Privacy Policy

Welcome to Dexa Group's Product Complaint Reporting website (pharmacovigilance.dexagroup.com) ("the Site"). This Site is intended and designed for reporting product complaints related to product quality or adverse events. To receive and process these complaints, we need to process the personal data you provide for internal administration and follow-up. By accessing and/or using the Site, you consent to our processing of your information, including the Personal Data you provide. We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, disclose, and manage your personal data in accordance with Law Number 27 of 2022 concerning Personal Data Protection (the PDP Law).

​

Personal Data We Collect
We collect various types of personal data, depending on your interaction with us. This may include:

1. Identity Data: Full name, gender, age, occupation, etc.

2. Contact Data: Email address, phone number, physical address.

3. Complaint Data: Name of the product used, date the complaint was found, date the product was first used, and names of other products used.

4. Technical Data: IP address, log data, device type, operating system, and cookie information.

5. Additional Upload Data: Information provided through supporting files, such as product photos, medical records, or other medical documents.

6. Other Data: Information you voluntarily provide to us.

​

How We Collect Your Personal Data
We collect your personal data through:

1. Information you provide directly to us (e.g., when registering, filling out forms, or contacting customer service).

2. Your use of our services (e.g., automated usage data).

​

If you provide personal data about a minor, you represent and warrant that you are the parent, legal guardian, or an authorized party with the right to provide consent on behalf of the minor.

​

Purpose of Collecting and Using Your Personal Data
We use your personal data for the following purposes:

1. Handling your complaints and providing an appropriate response.

2. Entering data into our complaint management database.

3. Contacting you for follow-up questions and clarification.

4. Analyzing product complaints.

5. Complying with applicable legal and regulatory obligations.

6. Ensuring the quality of our services.

7. Protecting our legitimate rights and interests, as well as those of other Data Subjects.

​

Disclosure of Personal Data to Third Parties
We will forward information related to your report to the relevant health authorities in an anonymized format, meaning no information can directly identify you. We may also need to forward such anonymized information to our affiliates and partners, to the extent that they are also obligated to notify the relevant health authorities in their respective territories.

​

In certain required situations, we may disclose your personal data to third parties, such as:

1. Service Providers: Partners who assist us in our operations (e.g., hosting providers, payment services).

2. Our Affiliates: Related entities within our corporate group for operational or business development purposes.

3. Legal Obligations: If required by law, a court order, or a government authority.

4. Your Consent: If you have given explicit consent for the disclosure.

​

We ensure that third parties who receive your data have adequate data protection standards and are bound by confidentiality obligations.

 

Transfer of Personal Data Abroad
If we need to transfer your personal data abroad, we will ensure that such a transfer is carried out in accordance with the provisions of the PDP Law, including ensuring that the receiving country has an equivalent level of data protection or that we have obtained your consent.

 

Retention Period of Personal Data
We will retain your personal data for as long as necessary to fulfill the purposes of collection and processing described in this Privacy Policy, or as required by applicable laws and regulations. After this period, your personal data will be securely deleted or anonymized.

 

Data Subject Rights
As a Data Subject, you have the following rights under the PDP Law:

1. Right to information: To obtain clear information regarding the processing of your personal data.

2. Right to access: To access and obtain a copy of your personal data.

3. Right to rectification: To request the correction of inaccurate personal data.

4. Right to erasure: To request the deletion of your personal data (the right to be forgotten), under certain conditions.

5. Right to restrict processing: To request the restriction of processing your personal data, under certain conditions.

6. Right to withdraw consent: To withdraw your consent at any time, without affecting the legality of processing carried out previously.

 

The exercise of these Data Subject rights is further regulated in our Data Subject Access Request (DSAR) Standard Operating Procedure (SOP). To exercise these rights or if you have any questions, please contact us at pv@dexagroup.com.

 

Personal Data Security
We implement adequate technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

​

Changes to the Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page and will become effective immediately upon publication. We encourage you to review this Privacy Policy periodically.

​

Contact Us
If you have any questions, complaints, or wish to exercise your rights regarding personal data, please contact us: pv@dexagroup.com