PRIVACY NOTICE

Langland (“we,” “us,” or “our”) is a healthcare advertising agency. This Privacy Notice sets out how we collect, use, share, and protect any information we collect through this website (“Website”).

This Privacy Notice also explains the measures we take to safeguard your information and describes how you may contact us regarding our privacy practices.

Introduction

Any data collected through this Website, including personal data (as defined under applicable data protection laws, referred to collectively as “Personal Data”), will only be used for the purposes set out in this Privacy Notice. Notwithstanding, we may use information that does not identify you (including information that has been aggregated or de-identified) for any purpose except as prohibited by applicable law. When data is collected on this Website, Publicis Healthcare Communications Group Ltd is acting as a data controller.

Please read this Privacy Notice thoroughly. If you disagree with the way personal information will be used, please do not use this Website.

We may include links to other websites, including social media platforms. This Privacy Notice only covers this Website and does not apply to the data practices of other websites. We encourage you to read the privacy notices available on other websites you visit.

I. What Personal Data do we collect and process through the Website?

The following table describes the categories of Personal Data we collect.

Category of Personal Data

List of Personal Data processed

• Contact Information and Identifiers
• First name, last name, e-mail address, online identifiers; IP address
• Internet or other electronic network activity information (Technical data)
• Browsing history; search history; online interests, such as information about categories of consumer interests derived from online usage; and information on a consumer's interaction with a website, application, or advertisement
• Geolocation data
• Location information from your device or IP address

Categories of the sources of Personal Data we may collect:

We may collect the Personal Data outlined above from the following categories of sources:

• Directly from you, for example, when you send us your questions or comments using the query form or make usage of your privacy rights.
• Indirectly from you by using automated technologies, such as cookies, pixels, third party tags, scripts, log files and other means to automatically collect information about the use of our Website.

Further information about our use of cookies can be found in our Cookie Notice.

II. Purpose of Data Collection and Legal Basis

The following table provides information about our purposes and legal basis for collecting your Personal Data:

Our Purposes for collecting and using your Personal Data

Basis for processing

• When you contact us through the data access request form
• We rely on our legal obligation to provide you a process to exercise your rights
• To contact you where you have indicated you wish to receive news from us
• For visitors from the European Union, we rely on your consent, where you indicate that you want to receive marketing material from us
• Operating our Website, for example, operating, analyzing, improving, and securing our Website
• For visitors from the European Union, we rely on your consent to obtain your Personal Data through cookies
• For visitors from other geographies, we rely on our legitimate interest to improve our services and develop new products
• Marketing services, for example:
• Analyzing and optimizing our (or our service providers’) proprietary databases or helping us identify and mitigate potential fraud
• Providing “verification” or data “hygiene” services, which is how companies update and/or “clean” their databases by either verifying or removing or correcting old, incorrect or outdated information
• For visitors from the European Union, we rely on your consent to use your Personal Data for marketing services
• Other internal purposes, such as: internal research, internal operations, auditing, detecting security incidents, debugging, short-term and transient use, quality control, and legal compliance
• Our legitimate interest to support our internal operations and conduct research

In addition, we use analytics services, such as Google Analytics, to help us understand how users access and use the Website. We also work with agencies, advertisers, ad networks, and other technology services to place ads about our products and services on other websites and services. For example, we place ads through Google and Facebook that you may view on their platforms as well as on other websites.

As indicated below, vendors and other parties may act as our service providers, or in certain contexts independently decide how to process your information. We encourage you to familiarize yourself with and consult their privacy policies and terms of use.

III. With Whom do we Share Personal Data?

We may share your Personal Data for various business purposes, with other entities of the Publicis Groupe and our service providers.

Category

Categories of Parties With Whom We Share Your Data

• Contact Information and Identifiers
• Affiliates, service providers, advertising partners, analytics partners
• Internet or other electronic network activity information
• Affiliates, service providers, advertising partners, analytics partners
• Geolocation data
• Affiliates, service providers, advertising partners, analytics partners
• Your verbatim communications to us or shared on the public areas of our site
• Affiliates

We also may share any of the Personal Data we collect for the following purposes:

• Sharing for Legal Purposes: In addition, we may share Personal Data with other parties in order to:
• (a) comply with legal process or a regulatory investigation (e.g. regulatory authorities’ investigation, subpoena, or court order);
• (b) enforce our Terms of Service, this Privacy Notice, or other contracts with you, including investigation of potential violations thereof;
• (c) respond to claims that any content violates the rights of other parties; and/or
• (d) protect the rights, property or personal safety of us, our platform, our customers, our agents and affiliates, its users and/or the public. We likewise may provide information to other companies and organizations (including law enforcement) for fraud protection, spam/malware prevention and similar purposes.
• Sharing In Event of a Corporate Transaction: We may also share Personal Data in the event of a major corporate transaction, including for example a merger, investment, acquisition, reorganization, consolidation, bankruptcy, liquidation, or sale of some or all of our assets, or for purposes of due diligence connected with any such transaction.
• Aggregate, Deidentified, or Anonymised Information: We may aggregate, de-identify and/or anonymise any information collected so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”). We may use Aggregate/De-Identified Information for any purpose, including without limitation for research and marketing purposes, and may also share such data with any other party, including advertisers, promotional partners, and sponsors, in our discretion, unless otherwise prohibited by applicable law.

IV. Your Rights and Choices Regarding Your Personal Data

Please use this LINK if you want to make use of any of your below mentioned legal rights.

1. Where you are a Resident of the EU

1.1 General

Subject to certain exceptions and the jurisdiction in which you live, if you are a resident of the EU, the GDPR provides you with specific rights regarding your Personal Data. This subsection describes your rights and explains how to exercise those rights regarding Personal Data that we hold about you. These rights include:

The right of access:

You can access all Personal Data we hold about you, know the origin of this Personal Data and obtain a copy in an understandable format.You may also use your right to access your Personal Data to control the exactness of the data and have them rectified or deleted. You have no justification to provide to exercise your right to access;


The right to rectification:

In order to avoid that inaccurate or incomplete Personal Data relating to you is process or shared, you can ask us to rectify them;

The right to erasure:

You may request the erasure or deletion of the Personal Data we hold on you. This is not an absolute right since we may have to keep your Personal Data for legal or legitimate reasons. You may, for example, exercise your right to deletion in the following cases:

• if you have withdrawn your consent to the processing (see below);
• if you legitimately objected to the processing of your data (see below);
• when data is not or is no longer necessary for the purposes for which it was initially collected or processed;
• the data is processed unlawfully (e.g., publishing hacked data);

The right to object to the processing of your Personal Data:

When we process your Personal Data based on our legitimate interest (to determine to which processing this applies, please refer to Section II of this Privacy Notice), you may at any time object to the processing of your Personal Data for reasons relating to your personal situation. We may nevertheless, on a case-by-case basis, reject such a request by pointing out the legitimate and imperious reasons justifying the processing of this data which prevail on your interests, rights and freedoms, or when this data is necessary to establish, exercise or defend a right before a Court.


The right to restrict processing:

The right to limit the processing completes your other rights. This right means that the data processing relating to you and that we are performing is limited, so that we may keep this data, but we cannot use it or process it in any other manner. This right applies in specific circumstances, i.e.:

• if you challenge the exactness of your Personal Data. The processing is then limited for a period of time so that the agency may verify the exactness of the Personal Data;
• if the processing is unlawful and you object to the erasure of your Personal Data and request instead that its use be limited;
• if we do not need the Personal Data for the purposes mentioned above in Section I anymore, but you still need it to establish, exercise or defend rights before a Court; and
• in the cases where you objected to the processing which is based on the legitimate interests of the agency, you may ask to limit the processing for the time necessary for us to verify if we can accept your objection request (i.e., the time necessary to verify whether the legitimate reasons of the agency prevail over yours).

Right to object to data processing for direct marketing purpose

You may unsubscribe or object, at any time and without any justification, to the reception of direct marketing communications. Simply either (i) click on the link in the footer of the communications you receive from us; or (ii) use the hyperlink above; or (iii) send us an email at the email address set out in the “Further Information” section below with the word unsubscribe in the subject field of the email.

The right to data portability:

You may request to retrieve the Personal Data you provided us with, in a structured, commonly used, and machine-readable format, for personal use or to share them with a third party of your choice.

This right only applies to Personal Data you provided us with, directly or indirectly, and which was processed through automated means, if this processing is based on your consent or the performance of a contract. Please check the list of our Personal Data processing activities’ legal grounds (in Section II of this Privacy Notice) to know whether our processing is based on the performance of a contract or on consent.


The right to withdraw your consent to the processing of your Personal Data at any time:

You may read Section II of this Privacy Notice in order to identify the purposes for which the processing of your Personal Data is based on your consent.
If you are unsatisfied with the way we process your Personal Data or if your request has been rejected, you may also lodge a formal complaint with your local competent data protection authority.
Personal Data will be stored in accordance with our applicable data retention requirements and corporate policies. The retention period for Personal Data varies depending on the type of Personal Data and the purposes of processing it.

We will respond without undue delay and in any event within one month from the date we receive your request. This timeframe can be extended by two months to take the complexity of the request, or the number of requests received into account. In this case, we will inform you within one month from receiving your request, specifying the reasons for extending the response timeframe.

1.2 Information from our clients:

If Personal Data about you has been processed by us as a processor on behalf of a client and you wish to exercise any rights you have with such Personal Data, please inquire with our client directly. If you wish to make your request directly to us, please provide the name of our client on whose behalf we processed your Personal Data. We will refer your request to that client and will support them to the extent required by applicable law in responding to your request.

1.3 Analytics:

We may use our own technology or third-party technology to track and analyze usage information to provide enhanced interactions and more relevant communications, and to track the performance of our advertisements. For example, we use Google Analytics (“Google Analytics”), a web analytics service provided by Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can learn about Google’s privacy practices by going to www.google.com/policies/privacy/partners/. Google Analytics uses cookies to help us analyze how our websites are used, including the number of visitors, the websites from which visitors have navigated to our websites, and the pages on our websites to which visitors navigate. This information is used by us to improve our websites. We use Google Analytics with restrictions on how Google can process our data enabled. For information on Google’s Restricted Data Processing go to https://privacy.google.com/businesses/rdp/.

1.4 Interest-Based Advertising:

The companies we work with to provide you with targeted ads are required by us to give you the choice to opt out of receiving targeted ads. Most of these companies are participants of the Digital Advertising Alliance (“DAA”) and/or the Network Advertising Initiative (“NAI”). To learn more about the targeted ads provided by these companies, and how to opt out of receiving certain targeted ads from them, please visit: (i) for website targeted ads from DAA participants, https://www.aboutads.info/choices; (ii) for app targeted ads from DAA participants, https://www.aboutads.info/appchoices; and (iii) for targeted ads from NAI participants, https://www.networkadvertising.org/choices/. Opting out only means that the selected participants should no longer deliver certain targeted ads to you but does not mean you will no longer receive any targeted content and/or ads (e.g., in connection with the participants’ other customers or from other technology services). Please note that if you opt out using any of these methods, the opt out will only apply to the specific browser or device from which you opt out. We are not responsible for the effectiveness of, or compliance with any opt out options or programs, or the accuracy of any other entities’ statements regarding their opt out options or programs.

1.5 E-mails:

You can opt-out of receiving promotional emails from us at any time by following the instructions as provided in emails to click on the unsubscribe link, or emailing us at the email address set out in the “Further Information” section below with the word unsubscribe in the subject field of the email. Please note that you cannot opt-out of non-promotional emails, such as those about transactions, servicing, or our ongoing business relations.

V. Children

The Website is intended for general audiences and is not directed at children. We do not knowingly collect Personal Data from children.

VI. Data Security

We use a variety of methods, such as firewalls, intrusion detection software and manual security procedures, designed to secure your data against loss or damage and to help protect the accuracy and security of information and to prevent unauthorized access or improper use. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of information about you. If you think that the Website or any Personal Data is not secure or that there has been unauthorized access to the Website or your Personal Data, please contact privacyofficer@publicisgroupe.com immediately.

VII. Data Transfers

Due to the international nature of our business, your Personal Data may be transferred outside the European Union.

Your Personal Data may be transferred to the US or any country which is not considered to have the same level of data protection as in the EU. However, we ensure all data transfers comply with applicable legal requirements by executing standard contractual clauses. Should you wish to know more about how your Personal Data is protected or wish to request a copy of the contractual protections please contact privacyofficer@publicisgroupe.com.

VIII. Use of Cookies, Other Tracking Technology, Social Media, and Social Media Plug-ins

Cookies are small pieces of text or code sent to your device when you visit the Website. Cookies are used to optimize the viewing experience, count visitors to a webpage, troubleshoot any problems, keep websites secure, and better serve content. The following cookies are used on the Website:

• Functional and required cookies are always used to allow our hosting platform to securely serve this Website to you.
• Analytics and performance cookies are used on the Website to view site traffic, activity, and other analytics data.

Overall, cookies help us provide you with a better Website by enabling us to monitor which pages you find useful and which you do not. You can choose to accept or decline cookies.

For more information about the cookies dropped on your device, please review the Cookie Policy.

If you follow us on social media (for example, through our accounts on LinkedIn, Facebook, Twitter, or Instagram), we will also collect Personal Data about you in order to understand our followers better and understand the public response to our products and services. We may use this information to contact you/send you marketing information which we think may be of interest to you/engage in social listening to identify and assess what is being said about us publicly to understand industry trends and market sentiment. Any information you provide to us when you engage with our content (such as through our brand page or via Facebook Messenger) is treated in accordance with this Privacy Notice. Also, if you publicly reference us or our Website on social media (such as by using a hashtag associated with us in a tweet or post), we may use your reference on or in connection with our Website.

We provide social media plug-ins on the Website to allow you to easily share content from our Website through social media, and in doing so, we may receive your Personal Data from the social media platform that you have authorized to share with us. When you share content using these buttons, a new page will pop up from the relevant social media platform. If you're already logged into your account on that social media platform, then you will probably be automatically logged into this pop-up page, so that you don't have to log in again. If, however, you are not logged in (or if you are not registered with the social media platform), the page will ask you for your information.

We have no control over how social media platforms use your Personal Data, and they may independently collect information about you when you leave our Website. The information collected and stored by those parties remain subject to their own policies and practices, including what information they share with us, your rights and choices on their services and devices, and whether they store information in the U.S. or elsewhere. We encourage you to read the privacy notices on the various social media platforms you use.

Find out more about how these social media platforms use your Personal Data:

• Facebook
• Twitter
• YouTube (Google's general privacy policy)
• Instagram
• LinkedIn

IX. Notification of Changes

Any changes to this Privacy Notice will be promptly communicated on this page, and you should check back to see whether there are any changes. Continued use of the Website after a change in the Privacy Notice indicates your acknowledgment and acceptance of the use of Personal Data in accordance with the amended Privacy Notice.

If you wish to save this text, please mark the entire statement (e.g., with your mouse) and copy-paste by pushing ctrl-c.

X. Further Information

This Privacy Notice has been designed to be accessible to people with disabilities. If you experience any difficulties accessing the information here, please contact us at privacyofficer@publicisgroupe.com.

If you consider that we are not complying with this Privacy Notice, if you have any questions in relation to this Privacy Notice, or have questions about your rights and choices, please contact privacyofficer@publicisgroupe.com. Data subjects in Europe may also lodge a formal complaint with their competent data protection authority.

If you have any questions about Publicis Healthcare Communications Group Ltd data practices or you wish to exercise your rights or know about the contractual protections in place, please contact the Publicis Chief Data Privacy Officer on privacyofficer@publicisgroupe.com.