Privacy Notice regarding the use of interviews recorded by press

If you have any questions, feel free to get in touch via one of the methods set out in the 'Contact us' section below.

What personal information do we collect about you?

The personal information that we process includes:

• Basic information – such as your name (including prefix or title), gender, age, nationality and signature;
• Professional information – such as your employer, job title, e-mail address, location;
• Photographs, videos, audio recordings - such as the recorded interview made by a third-party which GSK wants to re-use for non-promotional purpose.

How do we obtain your personal information?

We collect your personal information when you:

• Provide it to us, or interact with us directly; e.g. when you sign the image consent form.

We may also receive information about you from other sources, such as:

• Third parties who have collected the information initially; e.g. when these third parties have recorded your image and voice during an interview initiated on their behalf;
• Publicly available sources, when permitted by law

How do we use your personal information?

We will only use your personal information for the purposes we describe below or for purposes which are reasonably compatible to the ones described. We cannot, and will not, use it for other purposes without your permission, unless we have a legal right or obligation to do so. 

We will use your personal information to:

• Collect and process your consent to use your picture, image and voice as explained in the consent form;
• Sharing the recorded interview on Social Media platforms and website of GSK or during live events for internal communication and educational purposes;
• Responding to and dealing with your queries or requests.

On what basis do we use your personal information?

We use your personal information on the following basis:

• Your informed consent when you have signed the Consent Form for the use of images and recordings. 
• To comply with legal and regulatory obligations, e.g.: when we reply to any query you may have regarding the processing of your personal data;
• For the establishment, exercise or defence of legal claims or proceedings.

How long will we keep your personal information?

We will keep your personal information only for as long as we must so we can fulfil the activities we have explained in this Privacy Notice (please refer to “How do we use your Personal Information?”). 

For image and audio recording, we should not keep the information for a longer period than 5 years, unless you would have express a renewed consent for a longer retention period.

We will always keep your personal information for the period required by law. We will also keep your personal information where we need to do so in connection with legal action or an investigation involving GSK.

With whom do we share your personal information?

We share your personal information on a need-to-know basis, and to the extent necessary to follow laws and regulations.

We will show the recorded interviews to all members of the GSK group of companies (including its workers) and the public in the framework of our internal and/or educational communication strategy.

From time to time, we may also need to make your personal information available to external organizations, such as:

• companies that provide products and services to GSK (such as social media Platforms and website hosting companies or media agencies);
• our professional advisors and auditors; and
• regulators, governments and law enforcement authorities.

See the "Protecting your personal information" section for information on how we keep your personal information secure when sharing it with others.

Transfers of your personal information outside of your home country

Your personal information may be processed by GSK, its affiliated companies and GSK’s trusted third party suppliers anywhere in the world, including in countries where data privacy laws may not be equivalent to, or as protective as, the laws in your home country. 

We will implement appropriate measures to ensure that your personal information remains protected and secure when it is transferred outside of your home country, in accordance with applicable data protection and privacy laws. These measures include data transfer agreements implementing standard data protection clauses, or GSK’s Binding Corporate Rules. You can find more information about data transfer agreements here, and more information about GSK’s Binding Corporate Rules here.

Protecting your personal information

We use a variety of security measures and technologies to help protect your personal information from unauthorised access, use, disclosure, alteration or destruction consistent with applicable data protection and privacy laws. 

For example, when we share your personal information with external suppliers, we may put in place a written agreement which commits the suppliers to keep your information confidential, and to put in place appropriate security measures to keep your information secure.

Your rights

You may be entitled to:

• ask GSK about the processing of your personal information, including to be provided with a copy of your personal information;
• request the correction and/or deletion of your personal information;
• request the restriction of the processing of your personal information, or object to that processing;
• withdraw your consent to the processing of your personal information (where GSK is processing your personal information based on your consent);
• request receipt or transmission to another organisation, in a machine-readable form, of the personal information that you have provided to GSK; and
• complain to your local supervisory authority if your privacy rights are violated, or if you have suffered as a result of unlawful processing of your personal information. 

Where you are given the option to share your personal information with us, you can always choose not to do so.

If you object to the processing of your personal information, or if you have provided your consent to processing and you later choose to withdraw it, we will respect that choice in accordance with our legal obligations.
  
This could mean that we are unable to perform the actions necessary to achieve the purposes of processing described (see ‘How do we use your personal information?’) or that you are unable to make use of the services and products offered by us. After you have chosen to withdraw your consent GSK may be able to continue to process your personal information to the extent required or otherwise permitted by law, in particular in connection with the further exercise of your privacy rights or any legal challenge regarding the legal base used to process initially your personal information.

Contact us

If you have questions or requests about the processing of your personal information (including any exercise of your rights), or need additional information, you can contact us at BE-NL.cpa@gsk.com.

Data controller

GlaxoSmithKline Biologicals SA, having its registered office at rue de l’Institut 89, 1330 Rixensart, is the controller of your personal information. You can contact our data protection officer at BE-NL.cpa@gsk.com