Bristol Myers Squibb Srl: Privacy Policy

Bristol Myers Squibb Srl (the “Company” or “BMS”) agrees to meet the requirements on the protection of personal data (“Personal Data”) laid out by applicable European and national regulations.

PURPOSES
This statement (“Statement”) has the purpose of providing involved parties who have access to the contents of the website https://www.bmsstudyconnect.com/it/en/home.html specific information concerning the type, purpose, and method of Personal Data processing used by BMS as the Data Controller.

TYPE OF DATA PROCESSED
As it concerns the contents of the specific website, the Personal Data collected and processed may include the following categories: first and last name, date of birth, address, email, telephone number (landline or mobile), and curriculum vitae et studiorum.

PURPOSES OF PROCESSING AND THE TRANSFER OF PERSONAL DATA
The Company will use Personal Data exclusively for the following purposes:

• To increase the information available on clinical studies, in particular providing potential patients and all interested parties with comprehensive information concerning the types of studies in progress in Italy;
• To guarantee a “Patient Referral” service that can be activated for BMS clinical studies, making sure to provide direct contact information for the relative facility;
• To support patients throughout their experience when participating in a BMS clinical study.

BMS will process Personal Data in accordance with the following:

• Art. 6, paragraph 1, letter a) of the General Regulations on Data Protection (EU) 2016/679 (the “Regulations”), which authorize the Data Controller to process Personal Data given that the relative party has expressed consent to the processing of personal data for one or more purposes.

Personal Data may be processed, only for the purposes described herein, by BMS and/or partners with whom BMS has business relations and/or by affiliates of the Bristol Myers Squibb group, which may also be located outside of the European Union. For the latter case, the processing of Personal Data may be subject to legislation that is not able to guarantee a standard of protection equivalent to that ensured within the European Union and thus BMS agrees as of now to verify, prior to any transfer, that adequate protections are provided, for example with the use of agreements under the Privacy Shield, standard contractual clauses (SCC) and/or Binding Corporate Rules (BCR). A copy of the SCC and/or the BCR is available by contacting us at the following email address:EUDPO@BMS.COM

AUTOMATED PROCESSING 
BMS uses “cookies” in order to ensure effective navigation on the website https://www.bmsstudyconnect.com/it/en/home.html and to guarantee for users the use of the offered service with full security and speed. More information on the use of cookies.

PERIOD OF DATA STORAGE

Personal Data will be stored for the period strictly necessary to guarantee the purposes of processing and, in any case, for no more than two years.
SAFETY AND INTEGRITY OF DATA The Company adopts adequate safety measures in order to safeguard Personal Data from the risk of loss, improper use, unauthorized access, disclosure, alteration or destruction. The Company also adopts adequate procedures in order to guarantee that this data is reliable for the planned use and is accurate, complete and up to date.

RIGHTS OF THE RELATIVE PARTY

In compliance with that prescribed by the Regulations, pursuant to Art. 15 ff, the relative party will have the right at any time to request access to Personal Data, to obtain the rectification, integration, cancellation, and limitation of the relative processing, as well as to oppose processing or exercise the right to portability. To do this, the relative party should use the address indicated in the “Contact Information” section of this Statement, or make recourse to the competent authorities if he/she determines that BMS is processing Personal Data in a manner not consistent with applicable regulations.

CONTACT INFORMATION

The Head of Personal Data Protection for the Bristol Myers Squibb Group can be contacted at the following address: EUDPO@BMS.com; through this address, the parties whose data is included in the processing of Personal Data can exert all the rights guaranteed by applicable regulations, as well as ask questions or express objections to the processing of Personal Data by BMS.