|
|
 |
 |
 |
      |
 |
|
 |
 |
 |
|
 |
Data Privacy Policy
Policy Purpose: Eli Lilly and Company has established a comprehensive corporate privacy program, including a global privacy office and chief privacy officer, designed to help us respect and protect your privacy rights. At Lilly Kinsale, protecting your personal data and your privacy rights are very important to us. In the course of business the company collects a range of personal data. The purpose of this policy is to outline how Eli Lilly Kinsale will collect and manage personal information in accordance with all relevant legislation and standards.
Policy Applicability: This policy applies to activities related to personal data provided by job applicants, contractors, vendors, customers, business partners, government and state agencies in addition to visitors to the lilly.ie website.
What is Data Protection? Data Protection is the safeguarding of the privacy rights of individuals in relation to the processing of personal data, in both paper and electronic format. The Data Protection Acts 1988 and 2003 set out strict rules about the way in which personal data and sensitive personal data are collected, accessed, used and disclosed. The Data Protection Acts also permit individuals to access their personal data on request, and to have personal data amended if found to be incorrect.
What is Personal Data? Personal Data means data relating to a living individual who is or can be identified either from the data or from the data in conjunction with other information that is in, or is likely to come into, the possession of the data controller.
POLICY PROVISIONS: 1. Collection and Use of Personal Information Lilly Kinsale collects, processes and uses personal data for business purposes only and does so in a reasonable and lawful manner. Personal data shall only be collected, processed and used in accordance with this policy and the associated global and local Lilly operating procedures. Some personal data may be collected incidentally where reasonably necessary for the performance of business with suppliers and business contacts. 2. Notification Wherever possible, Lilly Kinsale shall inform individuals from whom personal data is collected, of the types of data collected, the purposes for which the data is collected and processed, the types of parties to whom the data may be disclosed. This Policy provides information to such individuals about their ability to access and correct their personal data. 3. Consent The general rule is that consent must be obtained for the collection, use or disclosure of personal data prior to, or at the time of, collection of the data. If the data being collected is Sensitive Personal Data (e.g. medical information) express consent will be obtained, prior to any disclosure unless there is a legal or statutory obligation for such disclosure. For data other than Sensitive Personal Data, consent may be express or taken to be implied given all the circumstances surrounding the collection of the personal data. Whether consent is to be express or implied, it must be obtained in such a manner that the individual providing the consent is able to reasonably understand the purpose(s), collection, use and/or disclosure of the data. 4. Disclosure of Personal Information Lilly's certification to the Safe Harbor (established between the EU and the US) will provide recognition that Lilly adequately protects personal data received from the EU which Lilly processes in the US. Internal Disclosure : Lilly Kinsale shall provide access to personal data only to those employees, agents or contractors who reasonably need such access to carry out their assigned functions. Sensitive and/or restricted personal data must have additional internal access restrictions as appropriate. Lilly Kinsale requires its employees, as well as its agents and contractors to whom it discloses personal data, to observe this policy and specifically to refrain from further disclosures not authorised by the company. External Disclosure : Lilly Kinsale shall disclose personal data to third parties only when it is necessary as part of its business practices or when there is a legal or statutory obligation to do so. Whenever we disclose personal data to third parties, we will only disclose that amount of personal data necessary to meet such business need or legal requirement. Third parties that receive personal data from Lilly Kinsale or our agents or contractors must satisfy us as to the measures taken to protect the personal data such parties receive. These requirements may also apply to third parties who are the initial collectors or processors of personal data on our behalf regardless of whether we actually receive or have access to the personal data. Appropriate measures will be taken to ensure that all such disclosures or transfers of personal data to third parties will be completed in a secure manner. 5. Retention and Accuracy Lilly Kinsale shall employ reasonable means to keep personal data accurate, complete and up-to-date in accordance with the purposes for which it was collected. Information will be stored for only as long as it is needed or required by statute and will be disposed of appropriately. Where an individual demonstrates an inaccuracy or incompleteness of his or her personal data, Lilly Kinsale will update the data. Once updated, the inaccurate personal data will be destroyed or erased unless required to do otherwise by law. 6. Security Lilly Kinsale shall employ reasonable administrative, technical, personnel and physical measures to safeguard personal data against loss, theft and unauthorised uses or modifications. Lilly Kinsale shall strive also to provide security that is proportionate to the sensitivity of the personal data being protected. 7. Access to Your Personal Information Lilly Kinsale shall comply with section 4 of the Data Protection Acts of 1988 - 2003 that requires it to provide data subjects with an opportunity to request a copy of their personal data (including manual data in relevant filing systems), confirm its accuracy and completeness and to have their personal data amended or removed if it is factually incorrect. All access requests must be made in writing to the Site Privacy Steward accompanied with a cheque for €6.35 made payable to Eli Lilly S.A – Irish Branch. Requests will be responded to within forty days of receipt, although reasonable extensions to this time frame may be agreed where it is reasonably necessary to compile the documentation relevant to the access request. Personal data relating to any other individual must not be disclosed while providing personal data pursuant to such a request and will be redacted from any documentation. Lilly Kinsale may elect to deny a request made by an individual to access their personal data under these circumstances (i.e. when the request cannot be complied with without disclosing information relating to another individual) or under other circumstances permitted by law. 8. Compliance Lilly Kinsale shall maintain programmes to help ensure compliance with this policy, its standard operating procedures and any applicable laws or contractual agreements on handling of personal data. 9. Job Applicants Applications are currently made in writing or via e-mail. You will receive written notification from Lilly Kinsale of receipt of your application. Your CV will be reviewed and should your skill set and experience match a current vacancy your application may be progressed to interview stage. Lilly Kinsale's general retention period for applications and recruitment related documentation is 12 months and documents are then destroyed. All provisions of this policy will apply to the processing of your application. Your information may be shared with our agents or partners in connection with services that these individuals or entities perform for Lilly. These agents or partners are restricted from using this data in any way other than to provide specified recruitment related services to Lilly. 10. Visitors to lilly.ie website We do not currently collect personal data via the lilly.ie website. However, we may collect Other Information that does not identify you such as the date and time of website session, movements across our website, and information about your browser. We do not tie Other Information to Personal Information. This Other Information may be used and stored by Lilly or its agents. Other Information we collect may include your IP Address (a number used to identify your computer on the Internet) and other information gathered through our weblogs, cookies or by other means (see below). We use Other Information to administer and update our website and for other everyday business purposes. Lilly reserves the right to maintain, update, disclose or otherwise use Other Information, without limitation. This site may use a technology known as web beacons — sometimes called single-pixel gifs — that allow this site to collect web log information. A web beacon is a graphic on a web page or in an e-mail message designed to track pages viewed or messages opened. Web log information is gathered when you visit one of our websites by the computer that hosts our website (called a "webserver"). The webserver automatically recognizes some non-personal information, such as the date and time you visited our site, the pages you visited, the website you came from, the type of browser you are using (e.g., Internet Explorer), the type of operating system you are using (e.g., Windows 2000), and the domain name and address of your Internet service provider (e.g., AOL). We may also include web beacons in promotional e-mail messages in order to determine whether messages have been opened. This website may use a technology called a "cookie" . A cookie is a piece of information that our webserver sends to your computer (actually to your browser file) when you access a website. Then when you come back our site will detect whether you have one of our cookies on your computer. Cookies do not contain any personal information about you and cannot be used to identify an individual user. Our cookies help provide additional functionality to the site and help us analyze site usage more accurately. For instance, our site may set a cookie on your browser that keeps you from needing to remember and then enter a password more than once during a visit to the site. With most Internet browsers or other software, you can erase cookies from your computer hard drive, block all cookies or receive a warning before a cookie is stored. Please refer to your browser instructions to learn more about these functions. If you reject cookies, functionality of the site may be limited, and you may not be able to take advantage of many of the site's features. This website collects and uses Internet Protocol (IP) Addresses. An IP Address is a number assigned to your computer by your Internet service provider so you can access the Internet. Generally, an IP address changes each time you connect to the Internet (it is a "dynamic" address). Note, however, that if you have a broadband connection, depending on your individual circumstance, it is possible that your IP Address that we collect, or even perhaps a cookie we use, may contain information that could be deemed identifiable. This is because with some broadband connections your IP Address doesn't change (it is "static") and could be associated with your personal computer. We use your IP address to report aggregate information on use and to help improve the website. Minors You should be aware that the Site is not intended for, or designed to attract individuals under the age of 18. We do not collect personally identifiable information from any person we actually know is an individual under the age of 18. 11. Links to other sites As a convenience to our visitors, the Site may contain links to a number of sites that we believe may offer useful information. The policies and procedures we describe here do not apply to those sites. We suggest contacting those sites directly for information on their privacy, security, data collection, and distribution policies. Lilly cannot be held liable for any actions by or content of such sites. 12. Changes to this Privacy Policy We may update this Privacy Policy from time to time. When we do update it, for your convenience, we will make the updated Privacy Policy available on this page. Last Updated: April 2010. 13. How to Raise Your Concerns If you wish to access any your personal data or have questions about how Lilly Kinsale manages your personal data, you should forward your query in writing to :-
Site Privacy Steward Eli Lilly S.A. - Irish Branch Dunderrow Kinsale Co. Cork
Further information can also be obtained from www.dataprotection.ie |
||||||||
|
|
Eli Lilly S.A. - Irish Branch, a Swiss company with a branch office registered in Ireland under company registration number 902873 and having its Irish registered office at Dunderrow, Kinsale, Co. Cork.
|
