We would like to ensure the continuity of care for Ukrainian patients who have been displaced and who were previously receiving a critical Roche prescription medicine (medicine in scope of the service) in Ukraine. As you intend to make use of this service, this requires the processing of a range of personal data relating to you. This information is meant to explain to you what kind of data we collect and use for which purposes.
In the event that your personal data is covered by the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”): EU representative of F. Hoffmann-La Roche Ltd is Roche Privacy GmbH, Emil-Barell-Str. 1, D-79639 Grenzach-Wyhlen.
Please direct any questions and requests related to this information to F. Hoffmann-La Roche Ltd, Global Privacy Office, Grenzacherstrasse 124, CH-4070 Basel, Switzerland, email:
Purposes and legal basis for processing
Your personal data is collected and used in order to/for purposes of ensuring your continued access to and informing about medical treatment and diagnosis, continued product complaints and safety monitoring. In particular we must process personal data in order to provide services to you and accelerate the handling of any requests. Please note that some of the information mentioned in this Notice may be brought to our attention by your treating physician.
If and to the extent your data is covered by GDPR, we collect and process your data related to the continued provision of access to Roche medicines on the basis of legal obligations to ensure high quality of medical diagnosis and health treatment (GDPR Art. 6 (1) (c) and, if and as required for the processing of special categories of personal data, Art. 9 (2) (i)), the legitimate interest in scientific research purposes (GDPR Art. 6 (1) (f) and, if and as required for the processing of special categories of personal data, Art. 9 (2) (j)), and the legitimate interest to provide support in having continued access to our products and services (GDPR Art. 6 (1) (f)). Primarily, the processing of personal data relating to you will be based on your consent as you reach out to us in order to receive support and assistance (GDPR Art 6 (1) (a) and Art 9 (2) (a)).
Name, contact information, capacity (patient, caregiver, healthcare professional, site personnel), health data, language preferences, data related to reimbursement matters, place of origin, current and future localization information.
Recipients of your data may be Roche’s affiliates involved in the provisioning of your continued access to critical Roche prescription medicines as described in the Patient Agreement; such affiliates may be located in countries with privacy standards different from those in your home country. Our Roche affiliates will use the data for the same purposes as we do. A list of Roche’s affiliates is available in the current annual report which can be found in the Investors section of
Additional information in case your data is covered by GDPR: Regarding the exchange of data within the Roche Group, contracts containing the EU Standard Contractual Clauses according to EU Commission decisions of 27 December 2004 (2004/915/EC) and 05 February 2010 (C(2010) 593) or according to EU Commission decision of 04 June 2021 (EU 2021/914), whichever is applicable, constitute appropriate and suitable safeguards to ensure compliance with GDPR.
We may also have to communicate with medical professionals that help us provide Roche prescription medicines to you, in particular with your treating physician and the healthcare service provider in charge of your medical care.
The length of time in which we will store your Personal Data will differ depending on the purpose for which we have collected and are processing your data. In most cases, we will keep the data for one (1) year following our last interaction with you. We may, however, maintain your data for a longer period of time if required by law. For example, reports related to pharmacovigilance are kept for a minimum of 10 years after the withdrawal of the product in the last country where the product is marketed.
Provided your personal data is covered by GDPR, please note that you have the right to request from Roche access to and rectification of your personal data as well as the right to data portability, if applicable, or erasure or restriction of processing of your personal data. Erasure or restriction of processing is only possible if and to the extent the processing of personal data is based on consent or legitimate interest. If data processing is based on consent, kindly note that you have the right to withdraw your consent at any time, however, without affecting the lawfulness of processing based on consent before its withdrawal. For sending us a note to exercise your right to withdraw consent, please see contact details in the section “Identity and contact details of the data controller” above. Please be also aware that we may not be able to continue our services to you if you withdraw your consent.
In the event you have the impression that our data processing is non-compliant with GDPR: You are entitled to lodge a complaint with the responsible supervisory authority.