Personal Data Rights Notice

The data controller responsible for the collection and processing of your personal information is as shown below:

This Privacy Notice is additional to the Organon Privacy Notice which can be accessed at the bottom of the website or here. The Organon Privacy Policy contains, in particular, detailed descriptions of the purposes of data processing and information on data recipients.

1. Legal Basis for Data Processing: We process personal information for the purposes set out in our Privacy Policy.
   
   The legal basis to process personal information includes processing that is:

1. Necessary for the performance of the contract between you and Organon,
2. Necessary to provide you the services or products you request and to identify and authenticate you so you may use our websites;
3. Necessary to comply with legal requirements (for example, to comply with applicable accounting rules and to make mandatory disclosures to law enforcement);
4. Necessary for legitimate business purpose, for example, to manage our relationship with you, ensure security protection, to improve our websites and our products and services or regulatory requirements such as pharmacovigilance;

Based on your consent where relevant and as required by the Law(for example, to communicate with you about our products and services and provide you with marketing information).

Where applicable, your consent can be subsequently withdrawn at any time by using this web form. Subsequent withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal.

2. International Transfers of Personal Information: We only share your personal information with third parties if there is a specific necessity. Data recipients are in particular service providers who support us as instruction-bound processors, third party vendors as well as affiliated companies that belong to Organon. This may also require data transfers to countries outside of Switzerland. Currently, this involves the following countries:
   
   Argentina, Australia, Austria, Belgium, Bosnia, Brazil, Bulgaria, Canada, Chile, China, Colombia, Costa Rica, Croatia, Cyprus, Czechia, Denmark, Ecuador, Egypt, Estonia, Finland, France, Germany, Greece, Hong Kong, Hungary, India, Indonesia, Ireland, Israel, Italy, Japan, Jordan, Kazakhstan, Latvia, Lebanon, Lithuania, Luxemburg, Malysia, Mauritius, Mexico, Morocco, Netherlands, New Zealand, North Macedonia, Norway, Panama, Peru, Philippines, Poland, Portugal, Puerto Rico, Qatar, Romania, Russia, Saudi Arabia, Serbia, Singapore, Slovak Republic, Slovenia, South Africa, South Korea, Spain, Taiwan, Thailand, Tunisia, Turkey, Ukraine, United Arab Emirates, United Kingdom, United States, Venezuela, Vietnam.
   
   For many of these countries, in particular for the countries of the European Union, an adequate level of data protection has been confirmed by the Swiss data protection authority (adequacy decisions according to art. 16 para. 1 nFADP). An up-to-date overview of all countries for which an adequacy decision exists can be found in the annex to the Swiss data protection regulation (link).
   
   In addition, some of the listed countries may be parties to treaties under international law that guarantee an adequate level of data protection, as established by art. 16 para. 2 lit. a nFADP.
   
   For data transfers that can neither be secured via adequacy decisions nor via international treaties, we execute with the data recipients located abroad the EU Commission’s Standard Contractual Clauses (SCCs), which we adjust according to the guidance provided by the Swiss data protection authority. The SCCs are recognized by the Swiss data protection authority and oblige data recipients to comply with Swiss data protection requirements. The SCCs can be found here.
   
   For more information about data transfers to countries outside of Switzerland, please feel free to contact euprivacydpo@organon.com.
   
   
3. Profiling and Automated Decision Making: We will inform you when we implement profiling mechanisms to customize information we provided to you or when we use automated decision-making technologies to support our data processing activities. Where applicable more information on the logic used to make such decision can be obtained by contacting the euprivacydpo@organon.com. You may as well exercise your right to object or require Organon expert review of such decision.
   
   
4. Your Rights: In addition to the right to access or correct information, you may be entitled, in accordance with applicable law, to object to or request the restriction of processing of your personal information, and to request erasure and portability of your own personal information. Requests should be submitted by using this web form. Information on the processing of personal data in the operation of the CCTV security system English/French/German.