Lundbeck’s policy on data privacy

We will only collect and process personal data:

• When we have a specific need and legal basis
• In a transparent and secure way that protects the privacy of the individual

We will retain the data no longer than necessary and take prompt action to address any request or complaint related to personal data.

Find more details on how we process personal data here.

Privacy Notification

Privacy notification for data subjects who contact Lundbeck or the Lundbeck Group Data Protection Officer with privacy related inquiries or for the purpose of exercising their rights.

If you choose to contact Lundbeck via our Group Data Protection Officer at dataprivacy@lundeck.com, Lundbeck’s headquarter in Denmark, H. Lundbeck A/S will (as the data controller) receive, process, use and disclose personal data about you as described in more details in this Privacy Notification.

This Privacy Notification also applies to the disclosure to and processing by other Lundbeck companies, when involved in handling your request, as described below. Please find a list of Lundbeck companies here. H. Lundbeck A/S and each of the local companies is separately referred to as “Lundbeck”.

Lundbeck will process your personal data according to applicable legislation, including the EU General Data Protection Regulation (“GDPR”) and local legislation in the relevant EEA member states.

What categories of personal data are we processing and for what purposes?  We collect and process the types of personal data you provide us with, namely;

• your name,
• your title,
• your contact information,
• documentation of your identity before providing you with any information,
• the information on which types of rights you wish to exercise,
• your request and the answer to your request,
• the guidance provided to you on your rights, 
• the questions you ask us,
• documentation of decline or accommodation of your request and the response and other information, cf. the list above, and
• in limited cases; invoices for claims for fees, if permitted.

We process your personal data for the purposes of handling your request, confirming your identity and scoping the request, responding to you, documenting our handling of the request and our responses to you, claiming a fee, if permitted, and bookkeeping of such.

What is the legal basis for our processing of your personal data?  The legal basis for our collection, processing of your personal data set out above is the legal requirements set out in Articles 5, 12-22 of the GDPR relating to rights of data subjects as well as bookkeeping legislation (if relevant and permitted), cf. article 6 (1) (c) of the GDPR.