GlaxoSmithKline Website Privacy Statement
Updated 17 November 2017


GlaxoSmithKline (GSK) respects the privacy of visitors to its websites and is committed to the protection of their personal information. This Privacy Statement explains the data collection, transfer, processing, use, disclosure, and security practices of the ‘gsk.com’ website (the “Site”).


Note that this Privacy Statement does not apply to information collected from offline resources and communications.


Binding nature


By accessing and using the Site, you agree and consent to the collection, transfer, processing, use and disclosure of your personally identifiable information as outlined in this Privacy Statement.
Description of the information GSK may collect and how it is used:
Information we collect from visitors to our website
GSK directly collects personally identifiable information (i.e. information from which you can be identified, such as name, address, telephone number or e-mail address) only when it is asked for and/or you voluntarily submit it to us on this Site. We may use the information to respond to your requests,; improve our level of service and the content of our Site; provide you with tips, helpful information, product news and updates; notify you of new GSK products and services (where you have agreed to this); seek your views on our products and services; consider your application for employment; and for our own administrative and quality assurance purposes.
This Site is not intended or designed to attract children under the age of 18. We do not knowingly collect personally identifiable information via this Site from visitors in that age group without the explicit consent of a parent or guardian.
GSK also automatically collects (where available) information about your browser type and operating system, websites you visited before and after visiting the Site, standard server log information and IP Address (see below). This information is aggregated to gather data such as the total number of visits to our Site, the number of visitors to each page of our Site, and the domain names of our visitors' internet service providers. We use this information, which remains in aggregate form, to understand how our visitors use our Site so that we may improve it and the services we offer. We may also share this aggregated information with other companies within the GSK group and with other third parties.


Use of IP addresses


An Internet Protocol (IP) address is a set of numbers that is automatically assigned to your computer whenever you log on to your internet service provider or through your organisation's local area network (LAN) or wide area network (WAN). Web servers automatically identify your computer by the IP address assigned to it during your session online.


GSK, or third party companies acting on behalf of GSK, may collect IP addresses for the purposes of systems administration and analyse the use of our Site. We also may use IP addresses to identify users of our Site when we feel it is necessary to enforce compliance with the Site's terms of use, or to protect our service, Site or other users.


Cookies


GSK uses cookies on this Site to allow us to analyse its use and improve the experience for our website visitors. Cookies are tiny files, composed of a string of letters and numbers, placed on your computer by web page servers. To learn more about cookies and their use by GSK, please review our Cookie Policy.


How we protect your personally identifiable information


GSK is committed to using commercially reasonable means to ensure that your personally identifiable information is protected appropriately, and according to the sensitivity of the information. GSK uses a variety of security technologies and procedures to help protect your personally identifiable information from unauthorized access, use, or disclosure. For example, we store the personally identifiable information you provide to GSK on computer servers with limited access that are located in controlled facilities. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personally identifiable information, we cannot guarantee the security of the personally identifiable information you transmit to our Site; any transmission is at your own risk. While we cannot guarantee that loss, misuse or alteration to data will not occur, once we have received your information, we make commercially reasonable efforts to prevent such unfortunate occurrences.


Sharing personally identifiable information with third parties


GSK will not sell or rent personally identifiable information to third parties. Sometimes selected third parties are however used to provide GSK with support services in connection with the Site and such parties may, from time to time, have access to your information to enable them to provide those services to GSK. Please rest assured that all companies providing such support services are required by GSK to meet the same standards of data protection as GSK and are prohibited from using the information for their own purposes. In particular, GSK does not allow its service providers to use your personally identifiable information for their own marketing activities.
In certain special cases, we may disclose your personally identifiable information in the following circumstances:


• when we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to you, or otherwise injuring or interfering with GSK's rights, property or operations, other users of this Site, or anyone else who could be harmed by such activities


• when we believe the law requires it, or in response to any demand by law enforcement authorities in connection with a criminal investigation, or civil or administrative authorities in connection with a pending civil case or administrative investigation


• in connection with a substantial corporate transaction, such as the sale of a product line or division, a merger, consolidation, asset sale, or in the unlikely event of bankruptcy.

 

Personally identifiable information collected on the Site may be transferred to, stored and processed in your country of residence or any other country in which GSK or its affiliates, subcontractors or agents maintain facilities, including the United States and outside the European Economic Area (“EEA”). You should also note that your information may be processed in countries with lower data protection standards than your country of residence. By using the Site, you consent to any transfer, processing or storing of information outside of your country of residence, and outside the EEA. GSK will ensure that if information is transferred outside your country of residence, it will still be treated in accordance with this Privacy Statement.


Access


You have a right to update or correct your personally identifiable information at any time by contacting us in writing, as specified at the end of this Privacy Statement. You may have the right to access information held about you pursuant to your local laws and can be exercised in accordance with such laws. Any access request may be subject to a fee of £10 to meet our costs in providing you with details of the information.


Links to other web sites


This Site may from time to time provide links to other GSK and third party websites as a service to our users. This Privacy Statement does not apply to those websites. You agree that, if you choose to enter such a linked site, that GSK is not responsible for the availability of such websites and does not review or endorse and shall not be liable, directly or indirectly, for (i) how these websites treat your personally identifiable information, (ii) the content of such websites, including (without limitation) any advertising, products, goods or other materials or services available from such websites and (iii) the use that others make of these websites.
Please ensure that you check the legal and privacy statement posted on each website you link to before entering any personally identifiable information.
Changes
We may occasionally update this Privacy Statement. If the changes we make are material, we also may post a notice on this Site. We encourage you to periodically review this Privacy Statement to stay informed about how we are helping to protect the personally identifiable information we collect. Your continued use of the Site constitutes your agreement to the Privacy Statement and any updates.

 Volunteer recruitment –Data Privacy Notice


Please note the following important information concerning the processing of personal information, which is provided by you or otherwise generated in connection with your interest in volunteering for clinical studies, by or on behalf of GlaxoSmithKline (GSK, we or us):


• Your personal information will be processed for the following purposes for study application and recruitment


• You will be asked to provide consent before your personal information is used.


• Your personal information (including sensitive personal information) may include but is not limited to: name, address, telephone number, email address, date of birth, medical history, genetic data.


• Your personal information will be processed only for so long as is necessary for these purposes or to the extent required by applicable law.  In any event your personal information shall be held for no longer than 3  years.


• Your personal information will be accessible to GSK employees and any companies that work with GSK, such as clinical research organisations, to help set up clinical trials. 


• GSK may share your personal information with third party suppliers following appropriate due diligence, in accordance with GSK’s policies and procedures, and under a written agreement which commits those third parties to appropriate safeguards in relation to the handling of your personal information (including in relation to maintaining confidentiality of your personal information and implementing appropriate technical and organisational security measures).


• Your personal information may be transferred to entities within GSK group and to countries outside the European Economic Area.  The countries to which we transfer personal information may not have privacy laws that provide an adequate level of protection to your personal information, but we take steps to ensure that third parties and members of the GSK group to whom we transfer personal information in those countries nevertheless commit to ensure an adequate level of protection for your personal information.  This may include entering into data transfer agreements with third parties based on the model clauses approved by the European Commission, or using Binding Corporate Rules GSK has in place to transfer personal information used for research purposes between entities within GSK group.


• GSK will take appropriate legal, organizational and technical measures to protect your personal information consistent with applicable privacy and data security laws; and


• You may have the right in certain circumstances:


>to request information regarding the processing of your personal information and to be provided with a copy of your personal information;

>to request the correction and/or deletion of your personal information, or object to the processing of your personal information


>to request to transfer your personal information to a third party, in a suitable format for re-use; and


>to complain to your local supervisory authority, or to a court of law, if your privacy rights are violated.  You may be entitled to claim compensation for damages or distress incurred or suffered in consequence of unlawful processing of your personal information.


If you have questions regarding the processing of your personal information, if you wish to exercise any of your rights set out above, or if you require additional information, please contact:


You have the right to withdraw consent to the use of your personal information for the purposes described above at any time and at no cost or detriment to you.  If you withdraw your consent for use of your personal information for any or all of these purposes, you should know that:


• your personal information will not be used for those purposes from that point on and you will no longer be able to be considered for study recruitment.

Contact us


Questions, comments and requests regarding this Privacy Statement are welcomed and should be addressed to:
GlaxoSmithKline
980 Great West Road
Brentford
Middlesex
TW8 9GS
United Kingdom