Privacy and Cookie Policy
Last updated: 7 August 2018
General
The EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018, provides new rights to individuals and requires organisations to provide information about their processing in a clear and transparent way. We have published Privacy Policy to take into account new requirements and to explain how Associated Drug Co. Limited (“the Company”, “we” or “us”) collects, stores and use personal data.
Any personal data provided by you voluntarily through our website www.associateddrug.com will be processed in accordance with the Data Protection Act (Chapter 586 of the Laws of Malta), the GDPR and any other relevant data protection legislation, as may be amended from time to time.
Data Controller
For the purposes of the GDPR, Associated Drug Co. Limited is the Data Controller.
If you have any questions about how we process your personal data, please email our data protection representative at [email protected]. Our postal address is: Associated Drug Co. Ltd., Triq l-Esportaturi, Zone 1, Central Business District, Birkirkara, CBD 1040, Malta
Information We Collect
The data that we may collect about you usually includes:
- Your name
- Your email address
- Any other personal data that you may provide to us
Basis of Processing
We will process personal data on the basis of:
- Our legal obligations (for example, to comply with fraud and money laundering regulations);
- Necessity for the performance of a contract which you have asked us to enter into, or in order to take steps at the request of prospective clients prior to entering into a contract (for example, to process an order you have made with us or provide you with a quote);
- Our legitimate interests (for example, to ensure we are providing you with the best possible customer service, to manage our customer database efficiently and to improve and ensure the security of our systems).
Sharing your Information
We will not share any of your personal data with third parties without your permission, except where this is strictly required for us to provide you with a service you have engaged us to provide or where we are obliged to do so in terms of our legal or regulatory obligations.
If we ever have to share your personal data with an entity outside the EU, we will do so in accordance with the requirements of the GDPR and any other applicable law.
Data Security
We take the security of your personal data very seriously and have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed, so as to safeguard its integrity and confidentiality.
The security measures we have implemented to ensure safe transmission and storage of personal data include:
- Use of secure server;
- Use of firewalls;
- Use of encryption;
- Physical access controls at data centres;
- Information access controls;
- Use of back-up systems;
We also regularly review and, where practicable, improve upon these security measures.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
While we do our utmost to safeguard your personal data, no data transmission over the internet can be totally secure and therefore we cannot guarantee or warrant that no unauthorised access will occur.
Cookies
Your Rights
Right of Access
You have the right to access all the personal data held and processed by the Company. To exercise this right, you can contact us at the email or postal address at the top of this page.
In order to process this request, we will require proof of your identity. We will do our best to process the request as soon as possible, and in no event not longer than sixty days from hearing from you.
Right to Rectification
You have the right to request modification of all the personal data held and processed by the Company. If you think we may hold details about you that are inaccurate or out of date, please contact us at the email or postal address at the top of this page.
Right to Erasure (‘right to be forgotten’)
You have the right to request that we delete the personal data held and processed by the Company by contacting us at the email or postal address at the top of this page.
This right is not absolute, and we may be justified in keeping certain personal data, for instance when we are legally obliged to do so or if such data may be necessary for us to defend a legal claim.
Right to Object
You have the right to object to the processing of your personal data, including where such processing takes place for the Company’s legitimate interests, and you may request to withdraw from all future activities and the removal of all personal data held and processed by us by contacting us at the email or postal address at the top of this page.
Right to Data Portability
You have the right to move, copy or transfer your personal data from one organisation to another, and you have the right to request from us a copy of your personal data in a structured, commonly used and machine-readable format, which we may provide to you or another organisation at your request. If you would like us to assist you with this please contact us at the email or postal address at the top of this page.
Right to Lodge a Complaint
All Data Protection enquiries/complaints should be sent to [email protected].
You also have the right to lodge a complaint with the Information and Data Protection Commissioner in Malta as the data protection supervisory authority:
Information and Data Protection Commissioner
Level 2, Airways House
High Street
Sliema SLM 1549
Malta
Tel: (+356) 2328 7100
Email: [email protected]
Retention
We will not store personal data for longer than is necessary keeping in mind the purpose/s (or compatible purposes) for which we first collected that data. We may also need to keep some of your personal data where we are obliged to do so in terms of legal or regulatory requirements, or in order to protect ourselves against legal claims, or to enforce our company terms and conditions.
As a general rule we will retain your personal data as long as you remain a client of ours, or until you ask us to stop communicating with you, unless we have a valid reason to keep the information for a longer time.
For more information about our retention policy, please contact us at the postal or email addresses at the top of this page.
Links to Third Party Websites
We may post links to other web sites which are operated by companies that are outside of our control, and your activities at those sites will be governed by the policies, practices and laws of those third parties operators. We encourage you to review the privacy practices of these third parties as we are not responsible for the privacy practices of those sites.
Changes to this Privacy Policy
We may update this Policy from time to time and we will replace this policy with an updated version. It is your responsibility to access the ‘Privacy Policy’ page frequently so that you will be aware of any changes that may be implemented by us from time to time.
Law and Jurisdiction
This Policy shall be governed by Maltese Law. Any dispute arising from, or related to, such Policy shall be subject to the non-exclusive jurisdiction of the courts of Malta.
Central Business District, Birkirkara, CBD 1040. Malta
T: 356 2277 8000
