Face up to rosacea
This website https://www.faceuptorosacea.com (”Website”) is operated by Galderma SA, World Trade Center, Avenue Gratta-Paille 2, 1018 Lausanne (“Galderma”, “We”, Us”) to offer to our website visitors (“you”, “your” or “website users”) a better understanding of rosacea and potential treatment and management options.
The privacy and security of your personal data is important to us. This Notice (“Notice”) will explain to you in a clear and comprehensive way how and why we collect, store, use and disclose your personal information (hereinafter referred to as “Personal Data”), as well as describe the controls and options at your disposal in how you choose to share your personal data.
How do we collect the data and under what legal basis?
Galderma will collect data directly from you based on your consent.
When you are asked to provide personal data, you may decline. But if you choose not to provide data that is necessary for us to provide you with additional services, we may not be able to provide you such information.
What personal data do we collect and why?
We only collect email addresses and statements of intent to ensure our email campaign remains relevant to you the end user, providing information that is pertinent to your rosacea journey.
For us to hold your details, you must first double opt-in to the email campaign. All your data is stored securely on our third-party, cloud-based mail service platform. Depending on what statement of intent you have selected upon sign-up, we will ensure you only receive information that is relevant to that statement. A record of consent and how it was obtained will be stored on the same mail service platform.
Should you wish to delete (unsubscribe) yourself from the mailing list, simply check on the corresponding link in your email and we will permanently remove all personal data provided at the point of sign-up. We will not be able to add this back in, but should you wish to sign-up again, you can do so by following the process on the website as before.
Deletion is both an automated and manual process run through our mail platform provider. All notifications are automatically sent to our team of administrators who will then personally process your request. We will undertake this process within 30 days, and you will receive notification accordingly.
Rosacea Appointment Guide:
We only collect the content of your Rosacea Appointment Guide, namely the answers in the questions that can include the symptoms and triggers pertinent to your disease.
During the use of the Rosacea Appointment Guide any personal information you may provide will be automatically processed in a way that cannot identify you.
The Personal Data are collected and stored securely and used for information purposes only - to gain a better understanding of rosacea and the development of ongoing content and support materials.
With whom do we share your Personal Data
In principle, we do not share or disclose your Personal data with any third party. As an exception, we may disclose your Personal Data to other Galderma affiliates and certain third parties, acting for and on our behalf as data processors who provide us with various business services, including but not limited to: professional services, information technology services and related infrastructure, customer service, e-mail delivery.
Currently we are using the following service providers as processors:
760 Ralph McGill Blvd NE, Atlanta, GA 30312
• Havas Life Medicom, part of the Havas Group
Ferry Works, Summer Road, Thames Ditton, Surrey KT7 0QJ
All Galderma affiliates and any third-party service providers are only permitted to use such data only to the extent strictly necessary for the purpose of performing services on our behalf and in accordance with all applicable data protection legislation.
Some of our affiliates and the third parties who provide services to us may be located outside the European Economic Area (EEA) or your country of residence; they may also store and process your data in data centers located outside the UK, the EEA or Switzerland.As a result, your Personal Data could be transferred to third countries where the local privacy laws may not provide an adequate or essentially equivalent level of data protection as the one afforded in your country of residence, the UK, the EEA or Switzerland.
We will ensure that any third party recipients located in countries outside the UK, the EEA and Switzerland will comply with applicable local privacy laws and regulations and require such parties to implement appropriate safeguards e.g., by executing the Standard Contractual Clauses adopted by the European Commission, as amended or replaced at any time, or any other legally approved transfer mechanism, as well as implement any supplementary measures, as may be required by law or deemed necessary by Galderma, to ensure the security of the processing as well as to ensure that an adequate or essentially equivalent level of data protection is afforded by the importing entity, taking into account the factual circumstances of the transfer(s) in question.
To receive a detailed list of our third-party recipients and a copy of the adopted data safeguards, where applicable, you may contact our Privacy Office via email at email@example.com.
Personal data of children
This website is intended for adult use only, i.e., anyone 16 years of age or older. We do not knowingly collect personal data from anyone under the age of 16 through this website. We assume that any person who provides their personal data through this website is 16 years of age or older. If we learn that we have collected any personal data from a child under the age of 16, we will take steps to delete such information promptly.
How long will we keep your Personal Data
Please note that to the extent your data are shared with third party controllers, such as the Google or Apple platforms, such data will be retained and processed in accordance with such party’s privacy policies.
What are your data protection rights?
You have the right to request from us to:
a) provide you with further details on the processing of your Personal Data;
b) provide you with access to your Personal Data that we have stored and request to obtain copies thereof;
c) update any inaccuracies in your Personal Data we have stored that is demonstrated to be inaccurate or incomplete;
d) delete any Personal Data for which we no longer have a lawful basis of processing;
e) provide you or a third party, with a copy of your data in a digital format (data portability);
f) cease any processing based on the legitimate interests or public interest to process information, unless our reasons for undertaking that processing outweigh your data protection rights; and
g) restrict certain aspects of the processing of your information.
If you wish to exercise any one of your privacy rights, or request additional information or make a complaint about the processing of your data, you may contact our Privacy Office by email at: firstname.lastname@example.org; alternatively, you may contact our Swiss office in writing at Galderma SA, World Trade Center, Avenue Gratta-Paille 2, 1018 Lausanne or write to the relevant Galderma entity in your country of residence.
If you are not satisfied with our response to you or have a concern about the way we handle your personal data, you have the right to file a complaint with the data protection authority of your country of residence or place of work. A list with the Supervisory Authorities in European Economic Area and their contact details is available here: https://edpb.europa.eu/about-edpb/board/members_en.
Changes to this Privacy Notice
Last updated: June 2022