What is this document about.

Opella is a multinational group that includes Opella Healthcare with its affiliates and subsidiaries (collectively “Opella”, “we”, or “us”). 

Your Personal Data (or Data) is any information that is about you, or is related to you and used to learn, evaluate, or decide something about you. Opella understands the importance of privacy and the protection of Personal Data and is committed to ensure protection and security of Data we process.

This Global Privacy Notice explains how and why we may process your Personal Data when you visit one of our locations, regardless of whether you also have other relationships with Opella (e.g. as an employee, or supplier, or customer).

We provide detailed information on what Data is actually collected and used through specific privacy notices that we make available when your Personal Data is collected.

If you interact with us in different capacities (e.g., as a visitor to our websites or a participant in an event) or if certain jurisdictions apply to you, please refer to the other relevant Privacy Notices on Opella.com for additional information.

Who is responsible for using and protecting your Data.

Opella is composed of many companies around the world. (A full list is available at: https://www.opella.com/en/privacy-center/documents/ListOfOpellaAffiliates-en-GL).

As a general criterion, the Opella company who manages the location you are visiting will be responsible for the processing of personal data in relation to such visit.

In all cases, we explicitly state which entities are responsible for specific uses of your Data within the privacy notice we make available to you when such Data is collected.

What Data we collect about you and why.

The Personal Data we may collect about you belong to the following categories: 

  • Personal identification data, such as name and surname; 
  • Contact details, such as addresses, email addresses, and phone numbers;  
  • Organizational affiliation data, such as company or organization, job title, role, function, functional responsibilities or domain areas;  
  • Images such as video surveillance images or photos for temporary access badges. 


We may process such Personal Data for one or more of the following purposes:

  • to manage access to and occupation of offices, plants, facilities and other professional premises and to provide on-site services, for example to manage registration to access a site or to allow for the use of conference rooms, the canteen, or Wi-Fi; 
  • to protect our staff, visitors, assets and information, for example to ensure that only authorized persons are granted access or by maintaining a list of people on-site to be used in case of danger or emergencies; 
  • to fulfill our legal, regulatory, ethical and compliance obligations, for example (when applicable) to meet safety and accessibility requirements; 
  • to establish, exercise or defend our legal rights, for example to handle oversee disputes, claims, and litigations involving the organization.


We process personal data collected in relation to your visit to our locations based on applicable legal grounds, which may include the necessity to provide requested services, compliance with legal obligations, legitimate business interests, or consent where required by law.

In case, during your visit, should you also interact with us as a:

  • users of our online services and applications; 
  • participants in events and training;


please refer to the corresponding Global Privacy Notices to learn more about additional uses of your Data in such contexts.

How we collect your Data. 

When you visit one of our location we normally get your data: 

  • directly and knowingly from you, for example when you fill-in registration forms; 
  • from other affiliates of Opella, for example if you are an employee of another Opella affiliate and we retrieve data from shared systems to facilitate or validate registration; 
  • through automated tools or tracking technologies, for example when you stand in the range of surveillance cameras, or when you swipe a visitor badge to enter or leave the location. 

If we obtain your Personal Data from more than one source, we may combine or link such Data and use it for purposes compatible with those for which it was originally collected.

Unsolicited Personal Data 
In some circumstances, you may voluntarily provide us with unsolicited Personal Data. We ask for your collaboration to avoid sharing Personal Data that is unnecessary. Should this happen, we will take reasonable steps to ensure the unnecessary data is not used and is deleted without delay. 

Personal Data you provide about others. 
In some circumstances, you may provide us with Personal Data about others (for example, about other visitors). Whenever you provide us with Personal Data about others, you must ensure that this does not violate those people's rights. If unsure, please refrain from communicating such Personal Data to us.

Who can access your Data.

We operate in a complex ecosystem of Opella affiliates, third-party service providers with their sub-contractors, commercial partners, scientific partners, customers, regulatory bodies, public authorities, and law enforcement agencies. 

Provided that we are legally authorized to do so, your Personal Data may be shared or otherwise made available to various recipients inside and outside Opella in various circumstances.  

Such recipients may include:

  • employees and staff of Opella affiliates and subsidiaries, to allow for the processing of your data for the purposes described in the previous sections; 
  • our partners such as service providers, contractors, or vendors, acting upon our instructions for to support the processing of your Data for the purposes described in the previous sections; 
  • professional advisors and auditors; 
  • supervisory & regulation bodies, public authorities, courts, and law enforcement bodies. This may happen, for example, in circumstances that include, but are not limited to fulfilling our reporting obligation; responding to requests from them; when it is necessary to establish, exercise, or defend legal claims; when you request us to do so if this does not constitute a violation of our or others' rights; when it is necessary to prevent physical harm or material financial losses to us or others.
     

Whenever required by the applicable law, we enter into contractual agreements with these recipients to ensure they provide adequate data protection measures, they commit not to use the Data for purposes other than those described in this Global Privacy Notice and cooperate with us to ensure that your rights can be effectively exercised. 

Privacy Notice and cooperate with us to ensure that your rights can be effectively exercised.

Where is your Data processed.

We are part of a multinational group with employees, affiliates, partners and service providers located around the world. Consequently, your Data may be processed in and accessed from countries where different data protection laws apply.

When Personal Data is transferred to or accessed from other jurisdictions, we adopt one of the mechanisms provided by the law to ensure an equivalent level of protection of your Data in the destination country. This includes, for example, the adoption of the Standard Contractual Clauses.

How long we keep your Data.

Your Data will be kept for a period not exceeding the time necessary to achieve the purposes for which it was collected. The criteria for determining the retention period of the Personal Data consider the period of permitted processing (for all the relevant purposes), applicable regulations affecting the minimum or maximum retention period (if any), limitation of rights, and legal bases for processing.

How we protect your Data.

While we strive to protect your Personal Data, no Data transmission, use or storage can be guaranteed as 100% secure. To protect your Data, we adopt technical and organizational measures aimed at reasonably mitigating the risk that such Data is leaked, lost, or used for unauthorized purposes. 

If a security incident occurs and affects your Personal Data, we will take reasonable actions to mitigate possible impacts on you. When the incident is likely to result in serious harm this may include a notification to you or to competent authorities.

Your rights.

You have rights regarding your Personal Data which may include, for example: 

  • have access to, and receive a copy of your Data; 
  • obtain the rectification of your Data, should it be inaccurate, incomplete, or obsolete; 
  • obtain the deletion of your Data in situations set forth by applicable data protection laws; 
  • withdraw your consent to data processing at any time, without affecting the lawfulness of processing, where your Data has been collected and processed on the basis of your consent; 
  • object to the processing of your Data, where it has been collected and processed on the basis of our legitimate interests; 
  • request a limitation of data processing activities, in the situations set forth by applicable laws; 
  • request that some of the Data you provided to us is brought to you, or to another company, in a commonly used, machine-readable format.


Your rights may vary depending on the privacy laws applicable to the specific use of your Data. 

If you want to exercise any of your rights, please submit a request using this online form https://www.opella.com/en/privacy-center or use the other contact indicated in this or other privacy notices, as well as in the list of Opella affiliates available at: https://www.opella.com/en/privacy-center/documents/ListOfOpellaAffiliates-en-GL.  

You are also entitled to lodge a complaint with your local Data Protection Authority. 
 

Contact us.

If you have a question or any concerns regarding our use of your Data, visit https://www.opella.com/en/contact.

Where a Data Protection Officer or equivalent role is designated, you can also contact them. For further details consult the list of Opella affiliates available at: https://www.opella.com/en/privacy-center/documents/ListOfOpellaAffiliates-en-GL.

Changes to this Global Privacy Notice.

We may update this Global Privacy Notice periodically to reflect changes in the law or our practices. We encourage you to check this page periodically.