Global Privacy Notice
OVERVIEW
Theravance Biopharma, Inc. and its subsidiaries and affiliates (referred to collectively as “Theravance Biopharma,” “we,” or “us”) respects your privacy rights. This Privacy Notice explains the practices that Theravance Biopharma follows in connection with the Personal Data that we collect through this website, when you contact us, and through our research.
WHAT IS PERSONAL DATA?
For the purposes of Theravance Biopharma’s business operations and the regulations that we need to comply with, “Personal Data” refers to any information that relates to an identified or identifiable individual such as a name, email, mailing address, phone number, or any information related to an individual’s health for the purpose of biopharmaceutical research.
PRIVACY REGULATIONS WE NEED TO COMPLY WITH
Theravance Biopharma operates its business and conducts clinical trials in various regions across the world. As a result, we are obligated to comply with different privacy and data protection regulations, including but not limited to the General Data Protection Regulation (“GDPR”) in the EU, the Data Protection Act of 2018 in the United Kingdom (“UK GDPR”), the Privacy Act in Australia, and the Personal Information Protection and Electronic Documents Act (“PIPEDA”) in Canada.
We are also expected to comply with privacy laws enacted by U.S. states, including but not limited to California, Colorado, Connecticut, Virginia, Montana, Texas, and Utah (collectively referred to as “U.S. State Privacy Laws”). We have developed a US Supplemental Privacy Notice that outlines our compliance with these laws.
We are committed to protecting your Personal Data in accordance with the laws applicable to your location.
HOW WE COLLECT AND PROCESS YOUR PERSONAL DATA
Personal Data we collect and process when you use our website
Requests for contact
We collect your Personal Data when you communicate with us through our website, or contact us via email, phone or through any of our representatives. We collect your name, email address, organization, phone number and the reason for your contact request.
We use your Personal Data to acknowledge and respond to your request.
Clinical research participants
We do not collect your Personal Data directly for the purpose of our research. Your Personal Data is collected through partners (“Clinical Sites”) that conduct the clinical trials that we sponsor. They collect your Personal Data as a participant of the clinical trial or as Clinical Site investigators.
The Personal Data that we obtain and use from the Clinical Site is pseudonymized and managed through an identifier that we cannot link back to you. Only the Clinical Site that collected your Personal Data can link it with the identifier they provide to us. The data we obtain from the Clinical Site and process, with your consent, may include:
- An identifier to track future data against
- Data concerning your health and how you are responding to the clinical trial
- Genetic data
We use your Personal Data to review the outcomes of the clinical trial.
Clinical Site investigators and personnel
Personal Data related to the Clinical Site investigators and personnel, which may be collected directly by us or on our behalf by service providers or Clinical Sites, is used to verify qualifications, satisfy documentation requirements for work performed related to the clinical trial, to verify any financial conflict of interest and for other administrative purposes related to the work performed related to the clinical trial.
The Personal Data we collect from the Clinical Site investigator and personnel includes:
- Name
- Address
- Curriculum Vitae
- Training records
- Financial disclosures
- Any correspondence between the Clinical Site and the investigator or personnel related to their interest in the clinical trial
When you interact with us in a professional capacity
We collect Personal Data directly from you or indirectly from service providers when you interact with us in a professional capacity, such as a Healthcare Professional or as an employee of a company with which we do business. We use this information to fulfill our business relationship, for internal business analysis, and market research.
Personal Data we collect and use when you apply for a job at Theravance Biopharma
We collect your contact information and details related to your professional qualifications, provided directly by you if you apply for a job or through referrals from current Theravance Biopharma employees who you have given consent to share your profile with us. We use this data to determine if your expertise fulfills the requirements of the role you are applying for and to contact you to continue the recruiting process.
Navigating our website
The website uses cookies, which are small files stored on your computer or mobile device when you visit most web pages, along with other similar technologies such as pixel tags, web beacons, clear GIFs, and JavaScript. We collect information about your website visit, including your IP address, the pages you visited, and the sections of our website that you engaged with the most. We use cookies to recognize your web browser and to understand how and when you visit and use our website. This helps us analyze trends, learn about visitors to our site, and operate and improve our website, providing you with a better web experience. Additionally, we may supplement the information we collect from you with data received from third parties, including those that have placed their own cookies on your device(s).
If you prefer not to have cookies installed on your browser, you can opt-out through our cookie consent tool, located on the bottom left-hand side of our website.
OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA
To ensure compliance with various global privacy and data protection regulations, particularly the General Data Protection Regulation (“GDPR”) in the EU and the Data Protection Act of 2018 in the UK, we are required to establish a legal basis for processing your Personal Data.
Theravance Biopharma will process your Personal Data only when there is a legal justification to do so. This includes the following circumstances:
- We, or the Clinical Sites we partner with, have obtained your explicit consent before processing your Personal Data;
- Processing is necessary to fulfill a contractual obligation to which you are a party to or to complete a contractual request initiated by you;
- Processing is required to meet our legal and regulatory obligations;
- We have a legitimate interest that does not compromise your fundamental rights and freedoms.
WHO HAS ACCESS TO YOUR PERSONAL DATA?
Theravance Biopharma will only disclose your Personal Data to the following parties under specific circumstances:
- Our affiliated companies;
- To Theravance Biopharma personnel, if required, to fulfill your request;
- To service providers that support our business, systems or the activities of the clinical trial, including the Clinical Sites that hold Personal Data about patients and personnel;
- To law enforcement, regulatory bodies, or courts, when we are required to do so under applicable laws and regulations;
- In connection with the sale or reorganization of all or part of our business, as permitted by applicable law.
- Other third parties with your prior consent.
HOW DO WE KEEP YOUR PERSONAL DATA SAFE?
Theravance Biopharma maintains appropriate safeguards and takes reasonable steps to protect your Personal Data. We ensure that we limit its use and that we disclose it only to the parties that have a legitimate reason to have access to it.
We ensure that all the parties that we disclose your Personal Data to, internal and external to Theravance Biopharma, have contractual obligations in place to protect the security and the confidentiality of your Personal Data at the same level that Theravance Biopharma does.
WHERE IS YOUR PERSONAL DATA STORED?
The Personal Data that we collect from you for the purpose of providing our services is stored on servers in the US. We ensure that your data is safeguarded and work with our partners to ensure that any risks to your privacy are minimized. We will take appropriate steps to ensure that transfers of Personal Data across borders are in accordance with applicable law, and we only transfer Personal Data to partners and other third-party organizations where we are satisfied that adequate levels of protection are in place to protect your data.
For Personal Data transferred out of the EU or the UK into countries that are not considered to have an adequate level of Personal Data protection, we obtain contractual commitments from third party organizations to protect your Personal Data. These contractual commitments include the use of standard contractual clauses approved by the EU Commission to ensure that we have a valid data transfer mechanism in place.
HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
We are expected to retain your Personal Data for an established period for regulatory, legal, tax or business requirements. We have developed a retention schedule that defines how long we retain your Personal Data and how we securely dispose of it when it is no longer necessary to fulfill any requirements.
PERSONAL DATA FROM MINORS
We do not seek to collect Personal Data about minors for any purpose. This website is not targeted at, nor do we knowingly collect Personal Data from, anyone under the age of 18.
If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us using the details in the “Contacting Us” section of this Notice. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.
WHAT RIGHTS DO YOU HAVE REGARDING YOUR PERSONAL DATA?
EU/UK Data Subjects
Subject to any exceptions provided by law, you have certain rights with respect to your Personal Data, including those set forth below:
- Access: You can request more information about the Personal Data we hold about you and request a copy of such Personal Data.
- Rectification: If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data.
- Erasure: You can request that we erase some or all of your Personal Data from our systems.
- Withdrawal of Consent: If we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of specific Personal Data, if such use or disclosure is necessary to enable you to utilize some or all parts of our website.
- Portability: You can ask for a copy of your Personal Data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible.
- Objection: You can contact us to let us know that you object to the further use or disclosure of your Personal Data for certain purposes, such as for direct marketing purposes.
- Restriction of Processing: You can ask us to restrict further the processing of your Personal Data.
- Right to File Complaint: If you reside in the EU or the UK and want to lodge a complaint with a Supervisory Authority (Data Protection Authority) you may do so in the Member State where you reside, where you work or where you may have experienced an issue with the processing of your Personal Data. A list of Supervisory Authorities is available here. If in the UK, you may contact the Information Commissioner’s Office here.
During a clinical trial your rights to access, update or delete your pseudonymized Personal Data may be limited as permitted by law. Specifically, we need to process your data in specific ways to maintain the reliability and integrity of the study for reasons of public interest in public health and for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
In each particular case we will inform you of the consequences of your request and if there are any exemptions to honoring your requests based on legal, regulatory or contractual requirements.
UNITED STATES RESIDENTS
If you reside in a U.S. state with enacted U.S. State Privacy Laws, you have specific privacy rights. For more information, please visit our U.S. Supplemental Privacy Notice.
CONTACTING US
We welcome your feedback or any questions regarding our Privacy Notice or the use of your Personal Data. We have a Data Protection Officer (“DPO”) who is responsible for matters relating to privacy and data protection. Our DPO can be reached at the following address:
- Email: dataprivacy@theravance.com
- Address: Theravance Biopharma US, Inc., Attn: Office of General Counsel, 901 Gateway Boulevard, South San Francisco, CA 94080
- Phone Number: 1-888 532-0188 (US) or +353 1800 944 938 (Ireland)
HOW WE UPDATE THIS PRIVACY NOTICE
We reserve the right to modify this Privacy Notice at any time in accordance with applicable law. If we do so, please look at the “Last Updated” legend at the bottom of the page to see when this Privacy Notice was last revised. Any changes to this Privacy Notice will become effective when we post it on the Site.
- Effective date: November 2019
- Last Updated: December 11, 2024