Privacy notice

Who we are

Viallmed ("we") is the controller of the personal data described in this notice. For any privacy question or request, write to office@viallmed.com.

In short

• The site has no user accounts, advertising pixels or third-party trackers.
• Analytics cookies are used only with your consent. None are active today.
• The issue report form is anonymous and does not ask who you are.
• We do not sell personal data or use it for advertising.

When you visit the site

Our hosting provider receives the technical data needed to deliver each page: your IP address, browser and device type, the page requested, the referring page and the time of the request.

We use this data to deliver the site, keep it secure and fix errors. The legal basis is our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR).

Hosting logs are kept for a short period, generally no longer than 30 days, and are not combined with other data.

When you report an issue

The report form collects the link you report, where you saw it, the kind of issue, the country or market, your description and, if you choose, your role. It does not ask for your name, email or other contact details.

To limit abuse, the server checks your IP address against a short-term counter held in memory. The IP address is not stored with the report or passed on.

We use reports to review the page or app and, if a risk is confirmed, to notify the company responsible and, where the rules call for it, the competent authority. The legal basis is our legitimate interest in identifying and raising risks in pharma's digital channels (Article 6(1)(f) GDPR).

We keep a report while we review it and for as long as any follow-up with the company or authority continues, and then delete it.

Please do not include names, contact details, patient data or health information. If a report contains personal data about someone, we remove it.

When you request an audit or write to us

If you use the audit request form or email us, we process your name, email address, organisation and role, the content of your request or message and anything else you choose to share.

To limit abuse, the form checks your IP address against a short-term counter held in memory. The IP address is not stored with your request.

We use this data to reply, arrange a briefing and prepare proposals and contracts. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR).

We keep correspondence while the conversation is active and afterwards only as long as needed for our business records, to meet legal obligations or to establish or defend legal claims.

Please do not send patient data or personal health information.

Analytics

No analytics tools are active on the site today. If we add one, it will run only after you accept non-essential cookies, on the basis of your consent (Article 6(1)(a) GDPR), and we will name it in the Cookie notice before it goes live. You can withdraw consent at any time with Cookie settings at the bottom of every page.

Who receives your data

• Vercel Inc. (United States) hosts the site and processes technical data on our behalf.
• Telegram delivers issue reports and audit requests to our team's private chat.
• Our email service provider stores the messages we send and receive.
• Professional advisers, such as lawyers and accountants, where needed and under a duty of confidentiality.
• Authorities, courts and others where the law requires it or to protect our rights.

When we notify a company or an authority about a confirmed risk, we share what we found on the page or app. Reports are anonymous, so we cannot say who sent them.

International transfers

Some of these providers process data outside your country, including in the United States. Where data protection law requires it, transfers rely on an adequacy decision, such as the EU–U.S. Data Privacy Framework, or on Standard Contractual Clauses approved by the European Commission and their UK equivalent. You can ask us for details of the safeguards that apply.

Security

All traffic to the site is encrypted over HTTPS. Access to reports, requests and correspondence is limited to the people at Viallmed who need it. No system is perfectly secure, but we take reasonable technical and organisational measures to protect personal data.

What we do not do

• We do not sell or rent personal data.
• We do not track you across other websites or build advertising profiles.
• We do not make decisions about you based solely on automated processing.
• The site is meant for business and professional audiences. We do not knowingly collect data from children.

Your rights

Depending on where you live, you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use your data;
• object to processing based on our legitimate interests;
• receive data you provided in a portable format;
• withdraw consent at any time, without affecting processing that took place before.

To use these rights, write to office@viallmed.com. We reply within one month and may ask you to confirm your identity first. Because reports are anonymous, we usually cannot link one to you; if you tell us the link you reported and when, we will do our best.

You can also complain to the data protection authority where you live or work. We would appreciate the chance to address your concern first.

Changes to this notice

We update this notice when our practices change and show the date of the latest version at the top. Where a change is significant, we will say so on this page.