Privacy & Cookie Policy
SCOPE
This privacy policy (“Policy”) describes how Deciphera Pharmaceuticals AG and its affiliates and subsidiaries (collectively “Deciphera,” “we,” “our,” or “us”) collects, uses, and discloses information (“Personal Data”) about healthcare professionals (“Users”) who access and utilize the website insert website URL here (“this “Website”) in the course of operating our business.
Please note, Deciphera may have other unique privacy policies that apply to certain specific situations, such as privacy notices that cover data processing activities related to your role as a participant in a clinical trial or study. To the extent those policies or notices apply and conflict with this Policy, those policies govern our interactions with you.
Information We Collect
Information You Provide
We collect the Personal Data you voluntarily provide to us when you access or use the Services or when you interact with us offline. When you access and use this Website, we may collect personal information that can identify you as an individual. This may include:
Contact details you provide for us reaching out to you (with your consent)
ID Provider Authentication (DocCheck or similar platform)
<For FR> To facilitate your access to this Website, we will collect information from the provider of health professionals ID in France (“Pro Santé Connect”) in order to authenticate your professional credentials. You can connect to this service using the e-CPS mobile application or your CPS card.
<For DE> To facilitate your access to this Website, we will collect information from the provider of health professionals ID in Germany (“DocCheck”) in order to authenticate your professional credentials.
Information We Collect Automatically
When you access and use the Services, we and our third party service providers may collect information, including usage and technical data, automatically from your device, including, for example:
Personal Identifiers, such as device identifiers;
Internet or other electronic network activity information, such as IP address;
Geolocation Information, to ensure that the Website is only accessible to healthcare professionals in countries where Qinlock is authorized.
Sensitive Categories of Personal Data. We do not collect sensitive categories of Personal Data, such as information about your race, political views, religious views, or health conditions or other protected classifications, without obtaining your consent, where required.
Online Identification Technologies
Cookies
Cookies are small files that are stored on your computer by your web browser. A cookie allows a website to recognize whether you have visited before and may store user preferences and other information. For example, cookies can be used to collect information about your use of the Services during your current session and over time (including the pages you view and the files you download), your computer’s operating system and browser type, your Internet service provider, your domain name and IP address, your general geographic location, the website that you visited before the Services, and the link you used to leave the Services.
It is our intention to use these technologies to make navigation of our websites easier for visitors, to facilitate efficient registration procedures (including remembering preferences), and to better deliver tailored content to visitors.
We use cookies and other tracking technologies in the following categories described in the table below.
Type of Cookie
What does it do?
Retention time
_ga
The main cookie used by Google Analytics, enables the service to distinguish one visitor from another.
2 years
_ga_<container-id>
Used by Google Analytics to identify and track an individual session with your device.
2 years
doccheck_loggedin
Remembers the information you used to log with DocCheck so that the next login is faster.
30 days
Most browsers permit individuals to decline cookies. In most cases, you may refuse or delete one or more cookies and still access our websites, but the functionality of the Services may be impaired. After you finish using the Services, you may delete site cookies from your system if you wish. If you would like more information on how to opt out of cookies, please visit: http://optout.aboutads.info or http://www.youronlinechoices.eu/.
How We Use Your Personal Data
We may use your Personal Data or other information we collect about you for the following purposes:
Authentication: We use Personal Data to verify your location and your identity as a healthcare professional when you access and use our services.
Communicating with you: We may use your Personal Data when we communicate with you, in accordance with your preferences, for example to send you information about our services and other topics that are likely to be of interest to you.
Exercising our rights: We may use your Personal Data to exercise our legal rights where it is necessary to do so, for example to detect, prevent and respond to fraud claims, intellectual property infringement claims or violations of law or our Terms of Use or to investigate, prevent, or take action in situations involving threats to our property or the property or physical safety of any person or third party.
Complying with our obligations: We may process your Personal Data to, for example, fulfill the terms of any agreement you have with us, carry out fraud prevention check, or comply with other legal or regulatory requirements, where this is explicitly required by law.
We may use de-identified aggregate or anonymized information to help us analyze the use of the Services. Where permitted by law, this Policy does not limit our use or disclosure of de-identified, aggregate, or anonymous information, and we reserve the right to use and disclose such information to other third parties in our discretion.
Legal Bases for Processing
We need to have a legal basis to process your Personal Data. There are different legal bases that we rely on to use Personal Data, namely:
Legitimate interests. It is in our legitimate interests to process Personal Data in order to improve our products and services, perform administrative tasks, and, where consent is not required by applicable law, to identify and authenticate you, secure our systems and information, conduct research, and develop new products.
Consent. We will rely on consent, which, in some cases where local laws allow, may be implied, to use: (i) technical information, such as cookie data, as described in this Policy; (ii) Personal Data for certain marketing purposes in accordance with your preferences; and (iii) Personal Data for certain research purposes. You may withdraw your consent at any time by contacting us at the addresses at the end of this Policy.
We may obtain certain Personal Data and sensitive Personal Data about you from healthcare professionals (including hospitals, clinics, or similar healthcare providers or one of their representatives) that use our products and services or enter into other business arrangements with us, in which case they are responsible for obtaining and handling any required consents or for having another legitimate basis for processing such information.
Furthermore, it is in our legitimate interests to protect the legal rights, safety, and security of Deciphera, our affiliates, and our business partners; to respond to and resolve claims or complaints; to prevent fraud; and to manage risks associated with our business.
Legal obligations. We may use Personal Data to comply with legal obligations to which we are subject. For example, we may disclose Personal Data for regulatory reporting requirements or to law enforcement in accordance with legal process.
Disclosure of Personal Data
We may share your Personal Data with third parties under the following circumstances which include:
Our affiliates: We may share Personal Data with our affiliated entities for their own research and analytics purposes or for internal reporting purposes.
Service providers and business partners: We may share your Personal Data with our service providers and business partners that perform services for us including third-party providers for website hosting, maintenance, business operations, and identity verification.
Third parties as necessary to protect our interests and interests of others: We may disclose your Personal Data as is necessary to identify, contact, or bring legal action against a person or entity who may be violating our Terms of Use.
Law enforcement agencies, courts, or other government authorities or third parties where required by law: We may share your Personal Data with law enforcement agencies, courts, other government authorities or other third parties where we believe necessary to comply with a legal or regulatory obligation.
Data Subject Rights
You may have certain rights regarding your personal data, subject to local data protection laws. These include the following rights:
Access your Personal Data;
Rectify the information we hold about you;
Erase your Personal Data;
Restrict our use of your Personal Data;
Object to our use of your Personal Data;
Receive your Personal Data in a usable electronic format and transmit it to a third party (right to data portability);
Lodge a complaint with your local data protection authority.
Please note, we do not make automated decisions about you based on your Personal Data.
If you would like to discuss or exercise these rights, please contact us at the details below.
International Data Transfer
Any information you provide to us or that we automatically collect may be shared with our affiliates entities in the United States and may be transferred to other jurisdictions.
We have put in place appropriate safeguards (such as the EU Standard Contractual Clauses) in accordance with applicable legal requirements to ensure that your data is adequately protected. For more information on the appropriate safeguards in place, please contact us at the details below.
Retention
We will retain your Personal Data as long as we have a relationship with you. When deciding how long to keep your Personal Data after our relationship with you has ended, we take into account our legal obligations.
Security
Deciphera uses commercially reasonable physical, electronic, and procedural safeguards to protect Personal Data against loss or unauthorized access, use, modification, or deletion. However, we cannot guarantee the absolute security of Personal Data or other information.
Changes to the Privacy Notice
We may modify or update this privacy notice from time to time. If we make any revisions that materially change the ways in which we process your Personal Data, we will notify you of these changes before applying them to that Personal Data.
Contact Us
Deciphera Pharmaceuticals AG is the controller responsible for the Personal Data we collect and process.
To exercise your rights under applicable local law, please email us at dataprotection@deciphera.com.