Privacy Policy

Introduction

This Privacy Notice generally describes the ways in which Dr.Reddy’s, its Affiliates, subsidiaries and entities (“Dr.Reddy’s”/ “Company/ “we” / “our” ) in its capacity as a Data Controller or Responsible Party collect, hold, use and process and dispose off information about individual persons, including its employees, customers, suppliers, Key opinion leaders (KOLs), patients, and Health Care Professionals (HCPs) (“Data Subject”/ “you” / “your”) under applicable privacy laws and regulations For the purposes of this Privacy Notice “Dr.Reddy’s”, “Company”, “we” and/or “our” will refer to the company considered as data controller of your Personal Data; to determine which company is the data controller of your personal information please see section “Identity and contact details of controller and Global Data Privacy officer” below.

Our Commitment to Protect your Personal Data:

Dr.Reddy’s is committed to protect the privacy of Personal Data and handling the same in a responsible manner in accordance with the Protection of Personal Information Act, 2013; Regulation 2016/679 (the “General Data Protection Regulation” or “GDPR”, interchangeably) and any other relevant privacy legislations in the countries of our operations.

We will not knowingly collect, use or disclose Personal Data from a minor under the age of 18, without obtaining prior consent from a person with parental responsibility (e.g., a parent or guardian) through direct off-line contact. We will provide the person with parental responsibility with the relevant information regarding the processing of the child’s Personal Data.

Dr.Reddy’s will always handle your Personal Data in accordance with the applicable locals laws, our internal standards and industry best practices..

How personal data will be used?

Please, find below the information on how Dr.Reddy’s processes your Personal Data, depending on the category of data subject you belong to.

As a customer / supplier / Key Opinion Leader (KOL), Health Care Professional (HCP) of Dr.Reddy’s, please check our Global Data Privacy Policy including any other document(s) referred to and/or linked thereto for information on how Dr.Reddy’s processes your Personal Data, the legal basis for such processing and retention of the same, whom we disclose; as well as information on the international transfer of your data.

To whom we disclose your Personal Data? Will my data be transferred outside South Africa?

Your Personal Data may be transferred outside of South Africa by the data controller to comply with legal or contractual requirements. In addition, we may also provide your Personal Data to third- party service providers to the extent permitted by and in accordance with the local Privacy Laws and Regulations.

We will not share your personal data with anyone else without your consent unless one of the following exceptions apply:

To comply with the applicable law or with regulatory requests. In such a case, we will endeavor to disclose only the requested information under the circumstances;
To comply with valid legal processes such as search warrants, subpoenas or court orders;
As part of Dr.Reddy’s regular reporting obligations;
To protect the rights and properties of Dr.Reddy’s;
The transfer is for the benefit of the provider of the information
To respond to emergency situations including but not limited to protecting the safety of a person or group of persons or it is necessary to prevent a threat to the health of a person or the public at large;
Dr.Reddy’s to its best efforts will ensure that your Personal Data transferred will be subject to the same protection regime as if retained locally. In addition, the Company will ensure that third party service provider(s) take appropriate technical and other measures to protect the security and confidentiality of your Personal Data.

For how long Dr.Reddy’s will keep your Personal Data?

Your Personal Data will be stored for a period allowed under applicable laws of the countries of our operations. Except as otherwise permitted or required by applicable law or regulatory requirements, Dr.Reddy’s endeavors to retain your Personal Data only for as long as it believes is necessary to fulfill the purposes for which the Personal Data was collected (including, for meeting any legal, accounting or other reporting requirements or obligations). We may, instead of destroying or erasing your Personal Data, make it anonymous such that it cannot be associated with or tracked back to you.

We may retain your personal data for a longer period if the information is being used for historical, statistical or research purposes in accordance with the Protection of Personal Information Act, 2013. Your privacy is always our first priority and we will take all reasonable steps to protect your personal information in our possession. For more on security measures adopted by Dr. Reddy’s please see the relevant sections below.

Your rights

You have the right to request for an access to and rectification or erasure of your Personal Data, to restrict processing or otherwise, and data portability.
If you have provided consent for processing of your Personal Data, you have the right (in certain circumstances) to withdraw the said consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn.You can request to review, verify or correct your Personal Data.
You can lodge a complaint to our Data Privacy Office if you believe that we have not complied with the requirements of the applicable data protection legislation, regarding your Personal Data.
You can exercise your rights by reaching out to our designated officer at [email protected].
If you consider that the exercise of your rights has not been appropriately addressed by Dr.Reddy’s, you have the right to lodge a complaint with a supervisory authority.

Note:

Any such communication must be in writing.
When you exercise any of your rights, we may request specific information from you to enable us to confirm your identity. If you require assistance, please contact our Data Privacy Office.
The rights are not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse to address the exercise of your rights. In addition, your Personal Data may have been destroyed, erased or anonymized in accordance with our record retention obligations and practices and with the data minimisation principle.

Measures

Dr.Reddy’s to implement the technical and organizational measures necessary to ensure the security of Personal Data. Personal Data are to be protected against unauthorized disclosure and/or any form of unlawful processing. The measures ensure meeting applicable requirements and a level of security appropriate to the nature of the data to be protected and the risks arising from processing such data.

In case of an accidental breach of personal information, we will notify the Information Regulator as required by the applicable law as well as the affected individuals. We will aim to provide you with timely advice to ensure you are able to manage any loss that could result from the breach.

Implementation

Dr.Reddy’s is responsible for implementing and enforcing compliance with the applicable data protection legislation. The procedures for third-party processing of Personal Data pursuant to a contractual agreement are to be defined in writing. Dr.Reddy’s shall satisfy itself that the contracted third party is processing the data properly and that it is complying with the principles set forth in Global Data Privacy Policy including any other document(s) referred to and/or linked thereto and this Privacy Notice. If at any time a third party is unable to ensure the adequate security of Personal Data, Dr.Reddy’s may at its discretion terminate the contract with the third party.

Revisions to this Privacy Notice

Dr.Reddy’s may from time to time make changes to the Allerway Data Privacy Notice to reflect changes in its legal or regulatory obligations or the way we deal with your personal Data. Any revision/modification of this Privacy Notice will be communicated appropriately.

Last Updated: July 2023