The personal information that we process includes:

• Your basic information - age
• Health-related information - such as health related information provided (e.g. health information, information concerning sex life, and health risk factors);
• Technical information - such as:
  • information about the device you use to interact with us (including the unique device identifier, hardware model, operating system and version, and mobile network information), and information from your visits to our websites (including the type of browser and operating system you use, access times, pages viewed, URLs clicked on, your IP address and the page you visited before navigating to our websites);

We collect your personal information while monitoring our technology tools and services, including email communications sent to and from GSK.

Otherwise, we gather information about you when you provide it to us,or interact with us directly; e.g. by enabling cookies on the initial visit to this webiste and by completing the symptom assessment in this website.

We use your personal information for the following purposes:

• Responding to and dealing with your queries or requests
• Analysing common signs/complaints experienced by patient at risk for BPH

Operating our business, including for internal purposes such as auditing, data analysis and research to help us deliver and improve our GSK digital platforms, content, and services

We use your personal information on the following basis:

• For legitimate business purposes. Using your personal information helps us to operate and improve our business and minimise any disruption to the services that we may offer to you. It also allows us to make our communications with you more relevant and personalised to you, and to make your experience of our products and services efficient and effective.
• For the establishment, exercise or defence of legal claims or proceedings.
• Because it is necessary for reasons of substantial public interest, on the basis of applicable laws.

This example is relevant only where GSK is processing personal information on the basis of consent.

We will always keep your personal information for the period required by law. We will also keep your personal information where we need to do so in connection with legal action or an investigation involving GSK.

Otherwise, we keep your personal information:

• When you have completed the symptom assessment survey, we will store your responses for 15 months.
• Where you have contacted us with a question or request, we will keep your personal information for as long as necessary to allow us to respond your question or request

We share certain of your personal information with:

• members of the GSK group of companies; and
• the following trusted third parties:
• Tech Mahindra Limited, which is working with us to develop and continually improve the website

See the Protecting your personal information section for information on how we keep your personal information secure when sharing it with others.

Your personal information may be processed by GSK, its affiliated companies and GSK’s trusted third party suppliers anywhere in the world, including in countries where data privacy laws may not be equivalent to, or as protective as, the laws in your home country

These countries include:

• United Kingdom
• India

We will implement appropriate measures to ensure that your personal information remains protected and secure when it is transferred outside of your home country, in accordance with applicable data protection and privacy laws. These measures include data transfer agreements implementing standard data protection clauses, or GSK’s Binding Corporate Rules. You can find more information about data transfer agreements here, and more information about GSK’s Binding Corporate Rules here.

We use a variety of security measures and technologies to help protect your personal information from unauthorised access, use, disclosure, alteration or destruction consistent with applicable data protection and privacy laws.

For example, when we share your personal information with external suppliers, we may put in place a written agreement which commits the suppliers to keep your information confidential, and to put in place appropriate security measures to keep your information secure.

You may be entitled to:

• ask GSK about the processing of your personal information, including to be provided with a copy of your personal information;
• withdraw your consent to the processing of your personal information (where GSK is processing your personal information based on your consent);
• complain to your local supervisory authority if your privacy rights are violated, or if you have suffered as a result of unlawful processing of your personal information.

If you have questions or requests about the processing of your personal information (including any exercise of your rights), or need additional information, you can contact us at https://gskpro.com/en-ph/contact-us/ or (02) 8892 0761.

GSK Philippines, 23rd Floor, The Finance Centre, 26th Street corner 9th Avenue, Bonifacio Global City, Taguig City, Metro Manila, Philippines, is the controller of your personal information. You can contact our data protection officer at ph.GSKPI-DPO@gsk.com.