Last Updated: 15-June 2020
We understand that privacy is important to you. We are committed to treating your personal information with care and integrity.
This Privacy Notice tells you what personal information we collect, how we collect it and what we use it for when you register with us and use GSK's authentication services to access and use GSK or third party systems and applications (the "Systems") and when you use your companies' sign on or other third party authentication service (for example Microsoft, Google log in page) to gain access to the Systems. With respect to third party systems please refer to 'Our responsibility regarding third party Systems'.
We also explain how we protect your personal information and keep it safe.
GlaxoSmithKline values your privacy. When we say "GSK", "we", "us" or "our", this is who we are referring to.
Personal information means any information or piece of information which could identify you either directly (e.g. your name) or indirectly (e.g. a unique ID number).
If you are an employee of GSK, this privacy notice does not apply to you. Please refer to your GSK Employee Notice. Contact your local HR representative in case you have doubts of where to find it.
In this Privacy Notice, we explain:
The personal information we collect and process may include the following:
You can choose not to give us different types of personal information when we ask you for them. If you decide not to give us your personal information, we may not be able to authenticate who you are and provide you access to the Systems.
We collect your personal information when you register with us to use GSK's authentication services, use the Systems, and otherwise give it to us like when you respond to surveys. We also collect your personal information in order to identify you and provide appropriate access when you use your companies' sign on or other third party authentication service (for example Microsoft, Google log in page) to gain access to the Systems.
We will only use your personal information for the purposes we describe below or for purposes which are reasonably compatible to the ones described. We cannot, and will not, use it for other purposes without your permission, unless we have a legal right or obligation to do so.
We will use your personal information:
We will use your personal information to:
We will use your personal information to:
We can collect and use your personal information when one of the following applies:
In some jurisdictions, we are legally required to keep your personal information for certain period. How long
depends on
the specific legal requirements of the jurisdiction you are in when you share your information with us.
We will always keep your personal information for the period required by law and where we need to do so in
connection
with legal action or an investigation involving GSK. Otherwise, we will keep your personal information for as
long
as we
have a relationship with you or in order to respond or process a question or request from you.
We share your personal information on a need to know basis, and to the extent necessary to follow laws and
regulations,
and in the context of managing our relationship with you.
We share your personal information only with teams in our GSK companies and affiliates who need to see it to do
their
jobs. Please see this link for a list of our
affiliates
and their locations.
From time to time, we may also need to make your personal information available to other entities, such as:
We work all over the world. Therefore, we may need to transfer and use your personal information outside of the country where we collect it from you. These countries may include: United States, United Kingdom and India, as well as countries within the European Union. We implement appropriate measures to protect your personal information when we transfer your personal information outside of your home country such as data transfer agreements that incorporate standard data protection clauses. The data privacy laws in the countries we transfer it to may not be the same as the laws in your home country. Law enforcement agencies, regulatory agencies, security authorities or courts in the countries we transfer your personal information to may have the right to see your personal information.
The European Commission recognises that some countries outside the EEA have similar data protection standards.
The
full
list of these countries is available here.
If we transfer your personal information to a country not on this list, we do so based on standard contract
clauses
adopted by the European Commission. These enable us to make international transfers of personal information
within
our
group of companies and meet the data protection laws of the European Union and the General Data Protection
Regulation
(GDPR).
We want to make sure your personal information is not shared with or used by those not allowed to see it. We use
a
variety of security measures and technologies to help protect your personal information.
We carefully choose service providers to work with, and check they have security measures and technologies in
place
to
protect your personal information.
You have rights we need to make you aware of. The rights available to you depend on our reason for processing your personal information and the local law in your jurisdiction. Depending on this you may have the right to:
You can find out how to get in touch with us to ask us to do any of the above by looking at the Contact Information and Privacy point of contact
section.
For your protection, and to protect the privacy of others, we may need to verify your identity before completing
what you have asked us to do.
Where we have relied upon your permission to use your personal information, and you later withdraw that
permission,
we may not be able to complete some of the activities described in the How do we use your personal information.
You should be aware that some third party systems or applications you access may have a specific terms of use, privacy notice or cookie policy. Please read those terms of use, privacy notices or cookie policy posted on each System to understand their practices with respect to your personal information.
Our services are not directed to children and we do not knowingly collect any personal information from children except as permitted by or required by applicable law.
Our websites and applications may use technology called "cookies" and similar technologies. A cookie is a small text file that is placed on your hard disk by a server. Cookies and similar technologies allow our websites and mobile applications to respond to you and provide a more personalized experience. The website or mobile application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. For instance, our server may set a cookie that keeps you from having to enter a password more than once during a visit to a website. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies or receive a warning before a cookie is stored if you prefer. Please refer to your Internet browser's instructions or help screen to learn more about these functions and to specify your cookie preferences, and note that your browser controls might not control other types of technologies. You may also wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html. If you choose to decline cookies, you may not be able to fully experience the interactive features of our websites or any other websites that you visit. To the extent that your local laws consider the information collected by cookies and other technologies as personal information, we will treat that information to the standards set out in this privacy notice. For more information on our use of cookies, please visit the Cookie Policy on the System you are browsing. You can usually find the link at the bottom of each page. This policy explains what cookies and similar technologies are, and how we use them. With respect to third party systems please refer to Our responsibility regarding third party Systems.
From time to time, we will update this Privacy Notice. Any changes become effective when we post the revised Privacy Notice on our privacy portal. This Privacy Notice was last updated as of the Last Updated date shown above. If changes are significant, we will provide a more prominent notice to let you know what the changes are.
GSK LLC, with domicile at Philadelphia Navy Yard, 5 Crescent Drive, Philadelphia, PA 19112, United States, and GSK Services Unlimited, 980 Great West Road, Brentford Middlesex TW8, United Kingdom, together with the local GSK company which has a relationship with you, are the controllers of your personal information. Here is a list of the locations where we operate, along with relevant contact details: GSK's worldwide contacts.
If you want to exercise your rights, have any questions about this privacy notice, need more information or would like to raise a concern, each local privacy point of contact's details can be found here.