Updated September 2024
If you are in the European Economic Area or the United Kingdom and share your business contact information and other personal data with RxY or any of its affiliates (“we”), this Privacy Statement is issued to you by P\S\L Group Luxembourg S.à.r.l., 1, rue Hildegard von Bingen, L-1282 Luxembourg. Please contact us at privacy@rxyhc.com for information about RxY for the purposes of EU General Data Protection Regulation on the protection of natural persons with regard to the processing of your personal data (“EU GDPR”). If you are located in the UK, the UK General Data Protection Regulation applies to the processing of your personal data. References to the “GDPR” are references to the General Data Protection Regulation as it applies in the country where you are located.
Data Categories Collected. We may collect and process your contact information (e.g., name, email address, company name, company address and phone number) and information about your business and its interactions with RxY.
Processing Purposes. We process the personal data you provide to be able to do business with you and contact you about business opportunities. Any data that you do not provide to us directly is either collected from publicly available sources such as company websites or professional networking sites or provided by another business professional in your field.
Legal Bases for the Processing. We process your personal data on several different legal bases, as follows:
Based on legitimate interests (see Article 6(1)(f) of the EU GDPR): We need to process your personal data to fulfill requests and orders from your business, issue requests and orders to your business, answer questions and requests from you, provide you with tailored client or vendor relationship support, correspond with you regarding potential business opportunities, and determine which of our products and services may be of interest to your business or vice-versa.
Based on compliance with legal obligations (see Article 6(1)(c) of the EU GDPR): We may need to process your personal data to comply with relevant laws, regulatory requirements and to respond to lawful requests, court orders, and legal process.
Based on consent (see Article 6(1)(a) of the EU GDPR): If RxY is required to obtain your consent to send you marketing communications and obtains such consent, RxY may send you marketing communications on the basis of such consent. In such cases, you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Your Rights and Choices. You can contact us to obtain copies of your personal data. Subject to the applicable statutory prerequisites, you can also ask us to correct or archive/erase your personal data or request your personal data to be made available according to portability requirements. You can exercise these rights by contacting us at privacy@rxyhc.com You also have the right to lodge a complaint with a supervisory authority.
Having a business relationship with us is voluntary, but we cannot effectively do business with you without processing some personal data about you such as your contact information.
Personal Data Transfers outside of the EEA. Some recipients located outside of the EEA are located in countries for which the European Commission has issued adequacy decisions: Canada. In each case, the transfer is thereby recognized as providing an adequate level of data protection from a European and UK data protection law perspective (see Article 45 of the EU GDPR).
Some recipients are located in countries for which the European Commission has not issued an adequacy decision in respect of the level of data protection there, namely: The U.S. , Mexico, South Africa, Malaysia. By entering into appropriate data transfer agreements based on Standard Contractual Clauses approved by the authorities of your jurisdiction, we have established that all such recipients will provide an adequate level of data protection and that appropriate technical and organizational security measures are in place to protect personal data against accidental or unlawful destruction, loss or alteration, unauthorized disclosure or access, and against all other unlawful forms of processing. Any onward transfer is subject to appropriate onward transfer requirements as required by the applicable contract or law.
You can ask for a copy of such appropriate data transfer agreements by contacting us as set out at the bottom of this notice.
Data Retention. We retain any personal data you provide for as long as your business has a business relationship with us and for 6 years thereafter, unless there is a legal requirement that we retain such personal data for shorter or longer.
Contact Us. For more information or to exercise your rights as described herein, please contact privacy@rxyhc.com.