Rhythm Pharmaceuticals Data Privacy Statement for Cravinganswers.com

In this Data Privacy Statement, “Rhythm Pharmaceuticals”, “we”, “us”’’ and ‘’our’’ refers to Rhythm Pharmaceuticals Netherlands BV. As a science-based pharmaceutical company, we may process your personal data for the purposes and by the manners described in this Privacy Statement.

We take the privacy and security of your personal data very seriously. This Privacy Statement applies to the processing of personal data through our website www.cravinganswers.com ("Website"). With this privacy statement, we would like to inform you about the data we may collect from you, the purposes of processing these data, the way the data are collected, processed and protected, and to what extent they are transmitted to third parties. We also explain which rights you have with regards to this data and provide useful contact details in case you have questions or concerns.

The collection and processing of personal data is carried out in accordance with the applicable law, namely the General Data Protection Regulation (GDPR).

We may change this Privacy Statement from time to time. This Privacy Statement was last updated on 11th July 2023.

How do we process your personal data?

I. Email communication

You can contact us via the email address displayed on our Website. If you send us an email, we will process your name, email address and email in the context of our legitimate interest to communicate with you and to retain relevant communications for the purpose of the relationship we maintain with you (Art. 6 (1) (f) GDPR).

II. User data Website

On our Website, we use so-called cookies and similar techniques (hereinafter collectively referred to as "cookies"). Cookies are small text files that are stored in the memory of your terminal via your browser and store certain information (for example your preferred language or site settings). Your browser may retransmit these to us when you revisit our website, depending on the lifespan of the cookies.

It is important to us to understand how our Website is used by you. We would like to know, for example, how often, for how long, when and in which way you use our Website. In so far as you provide your consent, we process such user data to measure the performance and use of our Website.

If you would like to know more about the use of cookies on our Website and/or if you want to check or change your preferences relating to consent, you can check our cookie tool: OneTrust. In this tool you will find the most up-to-date information concerning the use of cookies on our Website, as well as information as to how long we retain data which is processed via cookies.

How is your data protected?

We ensure that the personal data we process from you is adequately protected by taking state of art technical and organizational measures. Access to our systems is strictly personal and purpose based on a graduated authorization concept, that is, only those of our employees may access the data who require access for the particular processing purposes outlined above.

How long will your personal data be processed for?

We will store and process your personal data as long as we can claim a legitimate interest, you have provided a valid consent or if there is a legal requirement for a specific time period which is determined by applicable laws and the company's IT security and data privacy policies, as the case may be.

Will your data be transferred?

Your personal data may be transferred to other Rhythm Pharmaceuticals affiliates and may be stored by contracted third parties as software vendors and IT solution providers. We use Rhythm Pharmaceuticals proprietary and standard industry solutions to process your data in a safe environment.

We may also share categories of your personal data listed above with certain service providers or third parties such as: IT providers for the purposes of system development and technical support (for example, IQVIA, Salesforce, Veeva or DOMO); auditors and consultants to verify our compliance with external and internal requirements; statutory bodies, law enforcement agencies and litigants, as per a legal reporting requirement or claim.

Some of these parties are located outside the European Union (“EU”) or the European Economic Area (“EEA”), which means that your data will partly be processed in countries that may have a lower data protection level than European countries. In such cases, Rhythm Pharmaceuticals will ensure that a sufficient level of protection is provided for your data, e.g. by concluding specific agreements with these contractual partners.

Rhythm Pharmaceuticals does not sell personal data to third parties. We do permit third parties to collect information through our website but only for the purposes described herein and as described in our Cookie Notice.

What are your data privacy rights?

The following rights are available to you based on applicable privacy laws:

  • Right to information about personal data on you stored by us
  • Right to deletion or restriction of processing, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or in the event that the processing serves the enforcement, exercise or defence of legal claims
  • Right to correct your personal data
  • Right to object to processing that serves our legitimate interest, a public interest or profiling, unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or, in case, that the processing serves the enforcement, exercise or defence of legal claims
    Right to data transferability
  • Right to complain to a supervisory authority
  • You may withdraw your consent to the collection, processing and use of your personal data at any time from that point in time onwards.

If you want to exercise your rights, please address your request to privacy@rhythmtx.com.

Who can you contact in case of questions or concerns regarding the processing of your data?

In case of any questions regarding our data privacy you can get in touch with our company data protection team at the following address:

Rhythm Pharmaceuticals
Netherlands BV
Radarweg 29
1043 NX Amsterdam
The Netherlands

Or by e-mail: privacy@rhythmtx.com

Rhythm Pharmaceuticals Netherlands B.V. is a member of the Rhythm Pharmaceuticals group. Please use the contact details below in case you are looking for information about the processing of personal data by other EU Rhythm Pharmaceuticals group companies:

Rhythm Pharmaceuticals France SAS
7 Allée de Bambouleyre
33360 Latresne, Bordeaux
France

Rhythm Pharmaceuticals Germany GmbH
Maximilianstr. 35a
80539, München, Bayern
Deutschland

Rhythm Pharmaceuticals Italy S.r.l
VIA Niccolo' Tommaseo 78/C
Padova, 35131
Italia

Rhythm Pharmaceuticals Limited (Ireland)
10 Earlsfort Terrace
Dublin 2, D02 T380
Ireland

Rhythm Pharmaceuticals Spain S.L
Plaza Pablo Ruiz Picasso (Torre Picasso)
1 Ver Mapa, 28020, Madrid
España

Rhythm Pharmaceuticals UK Limited
North West House
119-127 Marylebone Rd
London, NW1 5PU
United Kingdom