Skip to main content
data privacy policy
data privacy policy
Privacy Notice for users of the Novartis company archives website
November 8, 2024
This Privacy Notice describes how Novartis International AG (“Novartis”, “we” or “us”), having its registered office at Lichtstr. 35, CH-4056 Basel, Switzerland collects and processes your personal information made available to us through your interactions with us via this website. Novartis International AG is responsible for the processing of your personal information, acting as the data controller.
Some of our services do not require any form of registration or sign-up. However, in order to use certain services it may be necessary to create a user account by registering beforehand. This is the case, e.g., if you want to request permission to use materials offered on this website. In that case we will process your personal information for the purpose of engaging with you and granting you authorization to use specific materials.
We also process your personal information if you contact us for inquiries, customer support and feedback.
We may also collect and process information about your visit to this website, such as the pages you visit, the website you came from and the searches you perform, device identifiers, IP address and information relating to the browser you are using to connect to our website. We may use such information to help improve the contents and usability of the website and to compile aggregate statistics for internal use. In doing this we may install “cookies” or similar technologies that are created and stored on the user’s device when loading the website. If you want to learn more about the cookies used on this website, please check out the Cookie Settings.
We may collect certain information about you like your IP address, unique device identifiers like Media Access Control (MAC) address, computer type (Windows or Mac), browser type and version, screen resolution, operating system name and version. We may also derive your location information from your IP address. We use this information to secure our websites and network systems and to improve our services by recording your preferences, maintaining service levels, diagnosing and troubleshooting technical issues.
We may share your Personal Information with other Novartis subsidiaries and affiliates worldwide to exchange information and maintain databases in different countries. We also may transfer Personal Information to third parties who act on our behalf, for further processing in accordance with the purpose(s) for which the data were originally collected or may otherwise be lawfully processed, such as services delivery, evaluating the usefulness of our Services, data management, or technical support (e.g., IT system providers, cloud service providers, database providers).
The personal data that we collect from you is processed primarily in Switzerland, but also in the European Union, particularly in the Czech Republic and Ireland, as well as in India, Mexico and the USA. In addition, your personal data may also be processed, accessed and stored in countries in which Novartis has a presence, A list of these countries can be found here. If we transfer your Personal Information to external companies in other jurisdictions, we will make sure to protect your Personal Information by applying the level of protection required under applicable data privacy laws by implementing adequate technical and organisational measures. In the event that your Personal Information is transferred to a service provider based in a third country (countries outside the European Union that do not have a level of data protection comparable to the data protection law of the European Union, as determined by a competent data protection authority) and processed there, Novartis ensures the protection of your Personal Information by means of Standard Contractual Clauses or EU Model Clauses or another method in accordance with applicable law. Should these Standard Contractual Clauses in the future be declared null and void and/or be revised by the European Commission, we will adopt other applicable and/or approved instruments to provide for appropriate safeguards required for the third country transfers and enter into such agreed instruments in a written and legally binding form.
For transfers of Personal Information among Novartis subsidiaries and affiliates, Novartis has adopted Binding Corporate Rules, a system of principles, rules, and tools, authorized by European law, to regulate the transfer of Personal Information outside the EEA and Switzerland. Read more about the Novartis Binding Corporate Rules by clicking here.
We have implemented appropriate technical and organisational measures designed to provide an adequate level of security and confidentiality to your Personal Information.
The purpose of these measures is to protect Personal Information against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure or access and against other unlawful forms of processing.
We will retain your personal information only for as long as necessary to fulfil the purpose for which they were collected or to comply with legal or regulatory requirements.
If you want to exercise your privacy rights, please click here.
