Privacy Notice for Website Visitors
Last Updated: June 10, 2026
INTRODUCTION
This Privacy Notice is provided by Celltrion Healthcare Australia Pty Ltd. (hereinafter "Celltrion" or "we") and its affiliates to explain who we are, how we collect, share, and use personal data about visitors of our website (hereinafter "you" or "user"), as well as how visitors can exercise their privacy rights. If you have any questions or concerns about our use of your personal data, or would like to exercise any of your rights — including, but not limited to, objecting to the processing of your personal data in the ways that we describe here — then please contact us using the details provided at the end of this Privacy Notice.
Celltrion does its best to protect your privacy rights.
WHO WE ARE
Celltrion Healthcare Australia Pty Ltd is a member of the global pharmaceutical group of companies the ultimate parent company of which, Celltrion, Inc., is headquartered in Incheon, Republic of Korea (South). For more information about Celltrion, Inc.’s group of companies, please visit https://www.celltrion.com. Celltrion Healthcare Australia Pty Ltd. is the controller and responsible for this website and when we use Celltrion Healthcare, “we”, “us” or “our” we refer to the relevant company responsible for processing your Personal Data.
Celltrion Healthcare Australia Pty Ltd has registered offices in Australia: Suite 13.03 / Level 13, 31 Market Street, Sydney, NSW 2000, Australia.
PERSONAL DATA
We do not require registration to visit our websites. However, some services may require visitors to provide us with Personal Data, such as contact details and interests.
“Personal Data” may refer to any data that identifies one as an individual or relates to an identifiable individual. We may collect, use, store and transfer different kinds of Personal Data about you or individuals about whom you are contacting us, such as:
Contact details (name, telephone numbers and email addresses);
Interests (health conditions, specific requests made through the website);
Technical data (including internet protocol (“IP”) address browser type and version, time zone setting and location browser plug-in types and versions, operating systems and platform, device IP and other technology on the devices you use to access this website); and
Usage data (including information about how you interact with and use our website, products and services).
If you are a Healthcare Professional ("HCP"), we may request additional Personal Data related to our professional interaction with you. HCP refers to any member of the medical, dental, pharmacy, or nursing professions or any other person who, in the course of his or her professional activities, may prescribe, purchase, supply, or administer a medicinal product.
Additional Personal Data includes, but is not limited to:
Professional biography/credentials;
Data related to licenses, specialties, professional affiliations, publications, credentials, and other occupational achievements; or
Data related to your use of our products, your interactions with us, and services for those whom you care for.
Providing us with, or giving us permission to collect, any Personal Data relating to individuals other than yourself requires you to have valid authority to do so pursuant to relevant legislation.
HOW WE COLLECT YOUR PERSONAL DATA
We use different methods to collect Personal Data from and about you including through:
Your interactions with us. You may give us your Personal Data by filling in online forms or by corresponding with us by post, phone, email or otherwise, including but not limited to when you give us feedback or contact us.
Automated technologies or interactions. As you interact with our website, we will automatically collect Technical and Usage data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please see our cookie policyfor further details.
Third parties or publicly available sources. We will receive Personal Data about you from various third parties and public sources as set out below:
Technical data is collected from the analytics providers, such as Google based outside Australia.
WHAT HAPPENS IF YOU DO NOT PROVIDE YOUR PERSONAL INFORMATION TO US?
If you choose not to provide personal information that we request in connection with our business functions and activities, we may not be able to provide some or all of our products or services to you, engage with you as intended or be able to respond and assist in the manner required. We also may not be able to provide you with information about products and services that you may want or otherwise respond to you in the way we would otherwise have liked.
HOW WE USE PERSONAL DATA
We use Personal Data in order to maintain functionalities on our websites such as:
Providing customer service to users;
Responding to user inquiries and fulfilling any user requests;
Sending administrative information to users, such as changes to our terms, conditions, and policies, as well as market information that we believe may be of interest to you.
We also use Personal Data to ensure that our business operations comply with any relevant legal obligations and match our legitimate interests.
Our business activities may include:
Data analysis;
Internal data audits;
Identifying usage trends for our websites;
Detecting, preventing, and investigating fraud in the use of our websites;
Cyber security monitoring;
Improve the website’s function
Market research
Developing, enhancing, or modifying our products and services;
Validating users' ability to access or utilize our products and services;
Understanding how our products and services impact you and those in your care;
Expanding our business network and scale of operations.
The Personal Data that you and other website users provide may be aggregated. We may use and disclose such aggregated data for any purpose. Aggregated data does not personally identify you or any other individual.
HOW WE DISCLOSE PERSONAL DATA
We disclose Personal Data to third parties as follows:
Other members of the Celltrion group of companies, for the purposes described in this Privacy Notice.
Service providers in order to provide services including, but not limited to website hosting, data analysis, information technology, infrastructural provision, cyber security, customer service, email delivery, and auditing.
Other companies with whom we collaborate regarding products or services, including our co-promoting partners for products that we develop and market jointly.
We may also disclose your Personal Data as necessary or appropriate:
To comply with applicable law, as well as our regulatory and industry monitoring and reporting obligations (including laws outside your country of residence)
to respond to requests from both public and government authorities (including authorities outside your country of residence);
to cooperate with law enforcement; or
for other legal purposes.
INDIVIDUAL RIGHTS
Subject to certain grounds for refusal set out in the Privacy Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.
In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction, we will take reasonable steps to note on the personal information that you requested the correction.
To invoke any of these rights, please contact us by using the contact details at the bottom of this Privacy Notice. Please keep in mind that we may ask for additional information to verify your identity and where you are located when processing your request as well as information about how you have previously interacted or engaged with us.
If you have given your consent to a certain purpose, you can withdraw your consent at any time. Please keep in mind that withdrawal will not have retrospective effect, and may affect what services we can provide you with.
DATA SECURITY
We take your privacy very seriously and use reasonable organizational, technical, and administrative measures in order to protect your Personal Data. We work hard to protect you and your information from unauthorised access, alteration, disclosure, or destruction and have several layers of security measures in place, this includes encrypting your Personal Data in transit and at rest.
DATA RETENTION PERIOD
We will retain your Personal Data for as long as needed or permitted in light of the purpose(s) for which it was obtained and as outlined in this Privacy Notice.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, if your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until it can be safely deleted.
Please note that we may need to retain certain types of Personal Data for recordkeeping or legal or regulatory compliance purposes.
INTERNATIONAL DATA TRANSFERS
Your Personal Data may be transferred to, and processed in countries other than the one in which you are resident. These countries may have data protection laws that are different from the laws in your country.
The servers of this website are located in the Republic of Korea (South). We may transfer your Personal Data with legitimate purpose to other members of the Celltrion group of companies, third party service providers, and business partners located around the world.
Whenever we transfer your personal data out of Australia, we ensure that a similar degree of protection is afforded to and that your Personal Data will remain protected in accordance with this Privacy Notice.
As of the last updated date of this Privacy Notice, the UK’s Information Commissioner's Office (the ICO) and the European Commission have adopted an adequacy decision for Republic of Korea (South Korea), which means that free unrestricted transfers of personal data from the those jurisdictions to private and public entities in South Korea will be permitted (including remote access from South Korea), and the recipient in Republic of Korea is subject to comparable safeguard to the Australia’s Privacy Act. Before disclosing any personal information to an overseas recipient, we also take steps reasonable to comply with the is subject to the Privacy Act.
Appropriate safeguards have also been implemented with our third-party service providers and partners as required.
USE BY MINORS
Our websites and online services are not intended to be used by anyone under the age of 18.
THIRD PARTY LINKS
This website includes links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
LODGING A COMPLAINT
If you want to contact us about any of your rights or complain about how we use your information, you can contact us on the details set out below. We’ll do our best to help but if you are still not satisfied, you can lodge a complaint with the Office of the Privacy Commissioner (Privacy Commissioner).
UPDATES
We may update this Privacy Notice from time to time in response to changing legal, technical, or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws. This Privacy Notice was last updated as of the "Last Updated" date shown above.
CONTACT US
If you have any questions or concerns about our use of your personal information, please contact our data protection officer using the following details:
DPO.CTHC@celltrion.com
Privacy Notice for Customers and Business Partners
Last Updated: June 10, 2026
INTRODUCTION
This Privacy Notice is for healthcare professionals, customer/prospective customers, suppliers, and service providers, including representatives or contact persons of legal entities.
This Privacy Notice is provided by Celltrion Healthcare Australia Pty Ltd. (hereinafter "Celltrion" or "we") and its affiliates to explain who we are, how we collect, share, and use personal data about you (hereinafter "you" or "user"), as well as how you can exercise your privacy rights. If you have any questions or concerns about our use of your personal data, or would like to exercise any of your rights — including, but not limited to, objecting to the processing of your personal data in the ways that we describe here — then please contact us using the details provided at the end of this Privacy Notice.
Celltrion does its best to protect your privacy rights.
WHO WE ARE
Celltrion Healthcare Australia Pty Ltd is a member of the global pharmaceutical group of companies the ultimate parent company of which, Celltrion, Inc., is headquartered in Incheon, Republic of Korea (South). For more information about Celltrion, Inc.’s group of companies, please visit https://www.celltrion.com. Celltrion Healthcare Australia Pty Ltd. is the controller and responsible for this website and when we use Celltrion Healthcare, “we”, “us” or “our” we refer to the relevant company responsible for processing your Personal Data.
Celltrion Healthcare Australia Pty Ltd has registered offices in Australia: Suite 13.03 / Level 13, 31 Market Street, Sydney, NSW 2000, Australia.
PERSONAL DATA
We do not require registration to visit our websites. However, some services may require visitors to provide us with Personal Data, such as contact details and interests.
“Personal Data” may refer to any data that identifies one as an individual or relates to an identifiable individual. We may collect, use, store and transfer different kinds of Personal Data about you or individuals about whom you are contacting us, such as:
General information (such as name, gender, date of birth, nationality)
Identification information (such as ID card, SSN, passport numbers)
Function (such as title, position, company name)
Contact details (telephone numbers and email addresses);
Financial data (corresponding to your bank account and banking and payment information);
Health data (including e.g. pathology, treatment, disability data, particular in the context of research).
If you are a Healthcare Professional ("HCP"), we may request additional Personal Data related to our professional interaction with you. HCP refers to any member of the medical, dental, pharmacy, or nursing professions or any other person who, in the course of his or her professional activities, may prescribe, purchase, supply, or administer a medicinal product.
Additional Personal Data includes, but is not limited to:
Professional biography/credentials;
Data related to licenses, specialties, professional affiliations, publications, credentials, and other occupational achievements; or
Data related to your use of our products, your interactions with us, and services for those whom you care for.
Disclosable data related to any transfers of value we may have made to you in accordance with applicable laws, regulations and industry guidance.
If we ask you to provide any other personal information not described above, then the specific information requested and the reasons why we require them will be made clear to you at the point we collect your personal information. Providing us with, or giving us permission to collect, any Personal Data relating to individuals other than yourself requires you to have valid authority to do so pursuant to relevant legislation.
HOW WE COLLECT YOUR PERSONAL DATA
We use different methods to collect Personal Data from and about you including through:
Your interactions with us. We collect your personal data when you interact with us, including but not limited to, making enquiries, entering into a contract with us, communicating via telephone, email or our website, completing forms, subscribing to our services, or participating in surveys or promotional activities. Also, you may give us your Personal Data by corresponding with us by post, phone, email or otherwise, including but not limited to when you give us feedback or contact us.
Third parties or publicly available sources. We will receive Personal Data about you from various third parties and public sources.
WHAT HAPPENS IF YOU DO NOT PROVIDE YOUR PERSONAL INFORMATION TO US?
If you choose not to provide personal information that we request in connection with our business functions and activities, we may not be able to provide some or all of our products or services to you, engage with you as intended or be able to respond and assist in the manner required. We also may not be able to provide you with information about products and services that you may want or otherwise respond to you in the way we would otherwise have liked.
HOW WE USE PERSONAL DATA
We use Personal Data in order to:
Providing customer service to users;
Responding to user inquiries and fulfilling any user requests;
Sending administrative information to users, such as changes to our terms, conditions, and policies, as well as market information that we believe may be of interest to you.
Perform the noticed purpose when we obtained your prior consent;
Perform contractual obligations;
We also use Personal Data to ensure that our business operations comply with any relevant legal obligations and match our legitimate interests.
Our business activities may include:
Developing and managing our (contractual) relationship with you, such as:
To enter into contracts with customers, process orders, maintain the customer relationship and follow up on claims/complaints
providing our services and responding to your inquiries.
sending administrative information to you, such as changes to our terms, conditions, and policies, as well as market information that we believe may be of interest to you.
improving the quality of our interactions and services.
developing transactional transparency such as "know your customers" (KYC) data required by financial institutions, banking records, invoices, remittances, and receipts related to our suppliers or service providers.
To manage our lead database, create a prospecting blacklist, prepare quotes and commercial proposals, and management our commercial relationship with customers
To conduct customer satisfaction monitoring relating to HCPs
To support product analysis and development, quality and improvement of our services
Engaging with you, an HCP; as follows:
verifying your eligibility to access specific products, services and data that may be provided only to certain licensed HCPs.
interacting with you based on your professional expertise and opinion through digital and/or other means.
To prepare a HCPs' CV library
involving you in programs/panels of healthcare professionals.
reaching out to you for your professional expertise, in the context of surveys relating to products or services of our entities or business partners.
collaborating with you on medical events, publications, or advisory meetings.
seeking your views on products and services promoted by us, or an affiliate or business partner for development and improvement purposes.
To record, maintain and disclose information relating to transfers of value and similar dealings between us and HCPs, in line with applicable regulatory and industry standards (including around transparency)
Complying with legal/regulatory obligations or for our legitimate interests as follows:
analyzing or predicting your preferences in order to improve our interactions with you, (i.e., to deliver to you the content, products and offers via our Site, emails or digital tools that we believe will be relevant to your professional interests).
conducting data analysis and audits.
developing, enhancing, or modifying our products and services.
validating your ability to access or use certain products or services.
understanding how our products and services impact you and those in your care.
operating and expanding our business activities.
The Personal Data that you and other individuals provide may be aggregated. We may use and disclose such aggregated data for any purpose. Aggregated data does not personally identify you or any other individual.
In general, we will use the personal information we collect from you only for the purposes described in this Privacy Notice; for any other purpose not mentioned, we will explain to you at the time your personal information is collected. However, we may also use your personal information for other purposes not incompatible with the purposes we have disclosed to you (such as archiving purposes, scientific or historical research purposes, or statistical purposes) if and where this is permitted by applicable data protection laws.
HOW WE DISCLOSE PERSONAL DATA
We disclose Personal Data to third parties as follows:
Other members of the Celltrion group of companies, for the purposes described in this Privacy Notice.
Service providers in order to provide services including, but not limited to website hosting, data analysis, information technology, infrastructural provision, cyber security, customer service, email delivery, and auditing.
Other companies with whom we collaborate regarding products or services, including our co-promoting partners for products that we develop and market jointly.
To any other person with your consent to the disclosure.
We may also disclose your Personal Data as necessary or appropriate:
To comply with applicable law, as well as our regulatory and industry monitoring and reporting obligations (including laws outside your country of residence);
to respond to requests from both public and government authorities (including authorities outside your country of residence);
to cooperate with law enforcement; or
for other legal purposes.
INDIVIDUAL RIGHTS
Subject to certain grounds for refusal set out in the Privacy Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.
In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction, we will take reasonable steps to note on the personal information that you requested the correction.
To invoke any of these rights, please contact us by using the contact details at the bottom of this Privacy Notice. Please keep in mind that we may ask for additional information to verify your identity and where you are located when processing your request as well as information about how you have previously interacted or engaged with us.
If you have given your consent to a certain purpose, you can withdraw your consent at any time. Please keep in mind that withdrawal will not have retrospective effect, and may affect what services we can provide you with.
DATA SECURITY
We take your privacy very seriously and use reasonable organizational, technical, and administrative measures in order to protect your Personal Data. We work hard to protect you and your information from unauthorised access, alteration, disclosure, or destruction and have several layers of security measures in place, this includes encrypting your Personal Data in transit and at rest.
DATA RETENTION PERIOD
We will retain your Personal Data for as long as needed or permitted in light of the purpose(s) for which it was obtained and as outlined in this Privacy Notice.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, if your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until it can be safely deleted.
Please note that we may need to retain certain types of Personal Data for recordkeeping or legal or regulatory compliance purposes.
INTERNATIONAL DATA TRANSFERS
Your Personal Data may be transferred to, and processed in countries other than the one in which you are resident. These countries may have data protection laws that are different from the laws in your country.
The servers of this website are located in the Republic of Korea (South). We may transfer your Personal Data with legitimate purpose to other members of the Celltrion group of companies, third party service providers, and business partners located around the world.
Whenever we transfer your personal data out of Australia, we ensure that a similar degree of protection is afforded to and that your Personal Data will remain protected in accordance with this Privacy Notice.
As of the last updated date of this Privacy Notice, the UK’s Information Commissioner's Office (the ICO) and the European Commission have adopted an adequacy decision for Republic of Korea (South Korea), which means that free unrestricted transfers of personal data from the those jurisdictions to private and public entities in South Korea will be permitted (including remote access from South Korea), and the recipient in Republic of Korea is subject to comparable safeguard to the Australia’s Privacy Act. Before disclosing any personal information to an overseas recipient, we also take steps reasonable to comply with the is subject to the Privacy Act.
Appropriate safeguards have also been implemented with our third-party service providers and partners as required.
USE BY MINORS
Our websites and online services are not intended to be used by anyone under the age of 18.
THIRD PARTY LINKS
This website includes links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
LODGING A COMPLAINT
If you want to contact us about any of your rights or complain about how we use your information, you can contact us on the details set out below. We’ll do our best to help but if you are still not satisfied, you can lodge a complaint with the Office of the Privacy Commissioner (Privacy Commissioner).
UPDATES
We may update this Privacy Notice from time to time in response to changing legal, technical, or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws. This Privacy Notice was last updated as of the "Last Updated" date shown above.
CONTACT US
If you have any questions or concerns about our use of your personal information, please contact our data protection officer using the following details: DPO.CTHC@celltrion.com
Privacy Notice for Employees
Last Updated: June 10, 2026
INTRODUCTION
This Privacy Notice is for employees of Celltrion Healthcare Australia, Ltd.
This Privacy Notice is provided by Celltrion Healthcare Australia Pty Ltd.(hereinafter "Celltrion" or "we") and its affiliates to explain who we are, how we collect, share, and use personal data about you (hereinafter "you" or "user"), the employee, as well as how you can exercise your privacy rights. If you have any questions or concerns about our use of your personal data, or would like to exercise any of your rights — including, but not limited to, objecting to the processing of your personal data in the ways that we describe here — then please contact us using the details provided at the end of this Privacy Notice.
Celltrion does its best to protect your privacy rights.
WHO WE ARE
Celltrion Healthcare Australia Pty Ltd is a member of the global pharmaceutical group of companies the ultimate parent company of which, Celltrion, Inc., is headquartered in Incheon, Republic of Korea (South). For more information about Celltrion, Inc.’s group of companies, please visit https://www.celltrion.com. Celltrion Healthcare Australia Pty Ltd. is the controller and responsible for this website and when we use Celltrion Healthcare, “we”, “us” or “our” we refer to the relevant company responsible for processing your Personal Data.
Celltrion Healthcare Australia Pty Ltd has registered offices in Australia: Suite 13.03 / Level 13, 31 Market Street, Sydney, NSW 2000, Australia.
PERSONAL DATA
We do not require registration to visit our websites. However, some services may require visitors to provide us with Personal Data, such as contact details and interests.
“Personal Data” may refer to any data that identifies one as an individual or relates to an identifiable individual. We may collect, use, store and transfer different kinds of Personal Data about you or individuals about whom you are contacting us, such as:
Your name, address, contact details such as email addresses and telephone numbers, date of birth, and gender;
Details of your qualifications, skills, experience, education, and employment history (including duty services like military service), including start and end dates, previous employers and organizations;
Information about your remuneration, including entitlement to benefits such as pensions or insurance coverage;
Details regarding your bank account and social security number;
Information about your marital status, next of kin, dependents and emergency contacts;
Information about your nationality and entitlement to work in the employed country;
Details regarding your schedule (work days and working hours) and attendance at work;
Details regarding periods of leave taken by you, including holidays, sickness absences, family matters, and other absences, as well as the reason for the absence;
Details regarding any disciplinary or grievance procedures in which you have been involved, including any warnings issued to you and/or the related correspondence; or
Assessments of your performance, including appraisals, performance reviews, performance improvement plans and related correspondence.
We may also collect, store and use "personally identifiable information" (such as your driver license number, passport number, and social security number) and the following "special categories" of sensitive personal information including:
Information about medical or health conditions, including whether or not you have a disability for which the organization needs to make reasonable adjustments;
monitoring information in order to maintain fair and equal opportunity, including information about your ethnic origin, sexual orientation, health, and religion or belief; or
Biometric data, including fingerprints, hand geometry, and samples.
If we ask you to provide any other personal information not described above, then the specific information requested and the reasons why we require them will be made clear to you at the point we collect your personal information
Providing us with, or giving us permission to collect, any Personal Data relating to individuals other than yourself requires you to have valid authority to do so pursuant to relevant legislation.
HOW WE COLLECT YOUR PERSONAL DATA
We use different methods to collect Personal Data from and about you including through:
Your interactions with us. We collect personal data from employees at various stages of the employment relationship. This includes data provided by you during recruitment (e.g., in your CV or application form), any correspondence with you, or through interviews, meetings or other assessments. Upon onboarding (e.g., contract and tax documents), and throughout your employment (e.g., performance evaluations, payroll records, training logs).
Third parties or publicly available sources. We will receive Personal Data about you from various third parties and public sources such as previous employers, referees, or background check providers, where appropriate.
Providing us with, or giving us permission to collect, any Personal Data relating to individuals other than yourself requires you to have valid authority to do so pursuant to relevant legislation
WHAT HAPPENS IF YOU DO NOT PROVIDE YORU PERSONAL INFORMATION TO US?
Provision of certain personal data is mandatory to comply with statutory requirements and to perform the employment contract. Failure to provide such information may prevent us from fulfilling legal duties (such as taxation, health and safety, or employment laws), administering employment benefits, or maintaining necessary employment records. This may affect your ability to enter into or continue your employment with us.
HOW WE USE PERSONAL DATA
We use Personal Data in order to:
Manage the employment relationship;
Our contractual obligations include:
Payment in accordance with the employment contract; or
Administration and operation (such as benefit, tax, pension, and insurance).
Our legal/regulatory obligations include, but are not limited to:
We also use Personal Data as necessary for our legitimate interests and do not override your data protection or fundamental rights and freedoms at any time before, during and after the end of the employment relationship. Our legitimate interests include:
Running recruitment and promotion processes;
Maintaining accurate and up-to-date employment records, contact details (including details regarding who to contact in the event of an emergency), and records of employee contractual and statutory rights;
Operating and keeping a record of disciplinary and grievance processes in order to ensure acceptable conduct within the workplace;
Operating and keeping a record of employee performance and related processes in order to plan for career development, and for succession planning and workforce management purposes;
Operating and keeping a record of absence and absence management procedures in order to allow effective workforce management and ensure that employees are receiving the appropriate pay or other benefits to which they are entitled;
Obtaining occupational health advice, to ensure that it complies with duties in relation to individuals with disabilities, meeting its obligations under applicable laws, and making sure that employees are receiving the appropriate pay or other benefits to which they are entitled;
Operating and keeping a record of other types of leave (including maternity, paternity, parental and shared parental leave), in order to maintain effective workforce management, to ensure that the organization complies with its duties in relation to leave entitlement, and to make sure that employees are receiving the appropriate pay or other benefits to which they are entitled;
Managing effective general HR and business administration;
Providing references on request for current or former employees;
Responding to and defending against legal claims; or
Maintaining and promoting equality in the workplace.
The organization processes other special categories of Personal Data, such as information about ethnic origin, sexual orientation, health or religion or belief; this is done for the purposes of monitoring equal opportunity. Data that the organization uses for such purposes is anonymized. To note, although employees are entirely free to decide whether or not to provide such data and there are no negative consequences of refusing to do so, some information such as health or medical conditions, is processed in order to carry out obligations related to employment law (such as those in relation to employees with disabilities).
The Personal Data that you and other individuals provide may be aggregated. We may use and disclose such aggregated data for any purpose. Aggregated data does not personally identify you or any other individual.
In general, we will use the personal information we collect from you only for the purposes described in this Privacy Notice; for any other purpose not mentioned, we will explain to you at the time your personal information is collected. However, we may also use your personal information for other purposes not incompatible with the purposes we have disclosed to you (such as archiving purposes, scientific or historical research purposes, or statistical purposes) if and where this is permitted by applicable data protection laws.
HOW WE DISCLOSE PERSONAL DATA
We disclose Personal Data to third parties as follows:
To selected employees (including your managers and those at the HR/GA/Finance/Account/IT Departments, all of whom have signed a confidentiality agreement) and other members of the Celltrion group of companies, for the purposes described in this Privacy Notice.
Service providers acting on behalf of us and our subsidiaries/affiliates, such as payroll service providers, travel agencies, and IT system and data hosting providers.
We may also share your data with third parties in order to obtain pre-employment references from other employers as well as employment background checks from third party providers. These third parties are contractually and legally required to protect the confidentiality and security of your personal data, in compliance with applicable law.
To any other person with your consent to the disclosure.
We may also disclose your Personal Data as necessary or appropriate:
To comply with applicable law, as well as our regulatory and industry monitoring and reporting obligations (including laws outside your country of residence);
to respond to requests from both public and government authorities (including authorities outside your country of residence);
to cooperate with law enforcement; or
for other legal purposes.
INDIVIDUAL RIGHTS
Subject to certain grounds for refusal set out in the Privacy Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.
In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction, we will take reasonable steps to note on the personal information that you requested the correction.
To invoke any of these rights, please contact us by using the contact details at the bottom of this Privacy Notice. Please keep in mind that we may ask for additional information to verify your identity and where you are located when processing your request as well as information about how you have previously interacted or engaged with us.
If you have given your consent to a certain purpose, you can withdraw your consent at any time. Please keep in mind that withdrawal will not have retrospective effect, and may affect what services we can provide you with.
DATA SECURITY
We take your privacy very seriously and use reasonable organizational, technical, and administrative measures in order to protect your Personal Data. We work hard to protect you and your information from unauthorised access, alteration, disclosure, or destruction and have several layers of security measures in place, this includes encrypting your Personal Data in transit and at rest.
DATA RETENTION PERIOD
We will retain your Personal Data for as long as needed or permitted in light of the purpose(s) for which it was obtained and as outlined in this Privacy Notice. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing employment relationship with you; (ii) whether or not there is a legal obligation to which we are subject (such as keeping records of employment and payroll); (iii) whether or not retention is advisable in light of our legal position (such as in regard to the enforcement of the employment contract, applicable statutes of limitations, litigation or regulatory investigations).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, if your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until it can be safely deleted.
INTERNATIONAL DATA TRANSFERS
Your Personal Data may be transferred to, and processed in countries other than the one in which you are resident. These countries may have data protection laws that are different from the laws in your country.
The servers of this website are located in the Republic of Korea (South). We may transfer your Personal Data with legitimate purpose to other members of the Celltrion group of companies, third party service providers, and business partners located around the world.
Whenever we transfer your personal data out of Australia, we ensure that a similar degree of protection is afforded to and that your Personal Data will remain protected in accordance with this Privacy Notice.
As of the last updated date of this Privacy Notice, the UK’s Information Commissioner's Office (the ICO) and the European Commission have adopted an adequacy decision for Republic of Korea (South Korea), which means that free unrestricted transfers of personal data from the those jurisdictions to private and public entities in South Korea will be permitted (including remote access from South Korea), and the recipient in Republic of Korea is subject to comparable safeguard to the Australia’s Privacy Act. Before disclosing any personal information to an overseas recipient, we also take steps reasonable to comply with the is subject to the Privacy Act.
Appropriate safeguards have also been implemented with our third-party service providers and partners as required.
USE BY MINORS
Our websites and online services are not intended to be used by anyone under the age of 18.
THIRD PARTY LINKS
This website includes links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
LODGING A COMPLAINT
If you want to contact us about any of your rights or complain about how we use your information, you can contact us on the details set out below. We’ll do our best to help but if you are still not satisfied, you can lodge a complaint with the Office of the Privacy Commissioner (Privacy Commissioner).
UPDATES
We may update this Privacy Notice from time to time in response to changing legal, technical, or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws. This Privacy Notice was last updated as of the "Last Updated" date shown above.
CONTACT US
If you have any questions or concerns about our use of your personal information, please contact our data protection officer using the following details: DPO.CTHC@celltrion.com
Privacy Notice for Adverse Event Report, Complaints and Queries
Last Updated: June 10, 2026
INTRODUCTION
This Privacy Notice is for individuals who report adverse events, submit complaints or request medical information, or are the subject of such reports/submits/requests.
This Privacy Notice is provided by Celltrion Healthcare Australia Pty Ltd. (hereinafter "Celltrion" or "we") and its affiliates to explain who we are, how we collect, share, and use personal data about you (hereinafter "you" or "user"), as well as how you can exercise your privacy rights. If you have any questions or concerns about our use of your personal data, or would like to exercise any of your rights — including, but not limited to, objecting to the processing of your personal data in the ways that we describe here — then please contact us using the details provided at the end of this Privacy Notice.
Celltrion does its best to protect your privacy rights.
WHO WE ARE
Celltrion Healthcare Australia Pty Ltd is a member of the global pharmaceutical group of companies the ultimate parent company of which, Celltrion, Inc., is headquartered in Incheon, Republic of Korea (South). For more information about Celltrion, Inc.’s group of companies, please visit https://www.celltrion.com. Celltrion Healthcare Australia Pty Ltd. is the controller and responsible for this website and when we use Celltrion Healthcare, “we”, “us” or “our” we refer to the relevant company responsible for processing your Personal Data.
Celltrion Healthcare Australia Pty Ltd has registered offices in Australia: Suite 13.03 / Level 13, 31 Market Street, Sydney, NSW 2000, Australia.
PERSONAL DATA
We do not require registration to visit our websites. However, some services may require visitors to provide us with Personal Data, such as contact details and interests.
“Personal Data” may refer to any data that identifies one as an individual or relates to an identifiable individual. We may collect, use, store and transfer different kinds of Personal Data about you or individuals about whom you are contacting us, such as:
Information regarding individuals that report adverse events or make medical information queries or product quality complaints, such as healthcare professionals and caregivers. It includes your name, phone number, email and/or postal address, and place of work (for healthcare professionals);
Information about the patient, including name, hospital record numbers, age, date of birth, sex, weight, height, race, whether pregnant and/or breastfeeding, and strictly necessary occupational data for the evaluation of the adverse event; or
Strictly necessary or relevant data, for the purposes described in this Privacy Notice, refers to patient health or lifestyle data including, but not limited to, the nature of adverse effects, examination results, personal or family medical history, diseases or associated events, risk factors, information about the use of medicines and therapy management, physical exercise, diet, eating behavior, sexual life/contraception, and consumption of tobacco, alcohol, and drugs.
If you are a Healthcare Professional ("HCP"), we may request additional Personal Data related to our professional interaction with you. HCP refers to any member of the medical, dental, pharmacy, or nursing professions or any other person who, in the course of his or her professional activities, may prescribe, purchase, supply, or administer a medicinal product.
Additional Personal Data includes, but is not limited to:
Professional biography/credentials;
Data related to licenses, specialties, professional affiliations, publications, credentials, and other occupational achievements; or
Data related to your use of our products, your interactions with us, and services for those whom you care for.
If we ask you to provide any other personal information not described above, then the specific information requested and the reasons why we require them will be made clear to you at the point we collect your personal information
Providing us with, or giving us permission to collect, any Personal Data relating to individuals other than yourself requires you to have valid authority to do so pursuant to relevant legislation.
HOW WE COLLECT YOUR PERSONAL DATA
We use different methods to collect Personal Data from and about you including through:
Your interactions with us. You may give us your Personal Data by filling in online forms or by corresponding with us by post, phone, email or otherwise, including but not limited to when you give us feedback or contact us.
Third parties or publicly available sources. We will receive Personal Data about you from various third parties such as healthcare professionals, distributors, regulatory authorities, or other individuals reporting on your behalf. Health data is collected in connection with adverse event reporting, including regulatory databases where such reports are made.
WHAT HAPPENS IF YOU DO NOT PROVIDE YORU PERSONAL INFORMATION TO US?
When reporting an adverse event or filing a complaint, certain Personal Data may be required to assess, respond to, and report the matter in compliance with legal and regulatory obligations. If you choose not to provide necessary information, we may be unable to fully investigate the matter or meet reporting obligations to competent authorities, which could hinder our ability to ensure safety, resolve the issue, or fulfil our legal responsibilities.
HOW WE USE PERSONAL DATA
We use Personal Data in order to:
Monitor the safety of medicinal products and medical devices, which includes detecting, assessing, following up on and preventing adverse events, and reporting adverse events to health authorities;
Respond to queries regarding medical information including, but not limited to, relation to availability of products, clinical data, dosing and administration, formulation and stability, and interactions with other drugs, foods, and conditions;
Respond to quality complaints regarding our products, such as any fault of quality and/or effectiveness, stability, reliability, safety, performance, or usage;
Answer other questions or requests and improve our products and services;
Comply with our policies and local legal, regulatory, and compliance requirements; or
Conduct audits and defend litigation.
The Personal Data that you and other individuals provide may be aggregated. We may use and disclose such aggregated data for any purpose. Aggregated data does not personally identify you or any other individual.
HOW WE DISCLOSE PERSONAL DATA
We do not share or transfer personal data to third parties other than those indicated in this Privacy Notice.
Personal data may be accessed by or transferred to:
Our employees (including those at Medical, Quality, Legal and Compliance Departments) and other Celltrion Group (especially Celltrion Inc., the manufacturer of our products)
Other pharmaceutical and medical device companies if the adverse event, request for information, or complaint relates to one of their products
Service providers acting on behalf of us and our subsidiaries/affiliates, such as IT system and data hosting providers, and adverse event processing service providers. These third parties are contractually and legally obliged to protect the confidentiality and security of personal data, in compliance with applicable law
Personal data may be shared with:
Healthcare professionals involved in an adverse event, request for information, or complaint
A national and/or international regulatory, enforcement, public body or court where we are required to do so by applicable law or regulation or at their request; Including but not limited to:
The European Medicines Agency (EMA) which controls the EudraVigilance database (for more information visit https://www.ema.europa.eu);
The U.S. Food and Drug Administration (FDA) which controls the Adverse Event Reporting System (for more information visit https://open.fda.gov/data/faers/)
Therapeutic Goods Administration Australia (TGA) (for more information visit https://www.tga.gov.au/), and
The Korea Institute of Drug Safety & Risk Management (KIDS) which controls the Korea Adverse Event Reporting System (for more information visit https://kaers.drugsafe.or.kr/)
To any other person with your consent to the disclosure.
We may also disclose your Personal Data as necessary or appropriate:
To comply with applicable law, as well as our regulatory and industry monitoring and reporting obligations (including laws outside your country of residence);
to respond to requests from both public and government authorities (including authorities outside your country of residence);
to cooperate with law enforcement; or
for other legal purposes.
INDIVIDUAL RIGHTS
Subject to certain grounds for refusal set out in the Privacy Act, you have the right to access your readily retrievable personal information that we hold and to request a correction to your personal information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the personal information relates.
In respect of a request for correction, if we think the correction is reasonable and we are reasonably able to change the personal information, we will make the correction. If we do not make the correction, we will take reasonable steps to note on the personal information that you requested the correction.
To invoke any of these rights, please contact us by using the contact details at the bottom of this Privacy Notice. Please keep in mind that we may ask for additional information to verify your identity and where you are located when processing your request as well as information about how you have previously interacted or engaged with us.
If you have given your consent to a certain purpose, you can withdraw your consent at any time. Please keep in mind that withdrawal will not have retrospective effect, and may affect what services we can provide you with.
DATA SECURITY
We take your privacy very seriously and use reasonable organizational, technical, and administrative measures in order to protect your Personal Data. We work hard to protect you and your information from unauthorised access, alteration, disclosure, or destruction and have several layers of security measures in place, this includes encrypting your Personal Data in transit and at rest.
DATA RETENTION PERIOD
We will retain your Personal Data for as long as needed or permitted in light of the purpose(s) for which it was obtained and as outlined in this Privacy Notice.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, if your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until it can be safely deleted.
Please note that we may need to retain certain types of Personal Data for recordkeeping or legal or regulatory compliance purposes.
INTERNATIONAL DATA TRANSFERS
Your Personal Data may be transferred to, and processed in countries other than the one in which you are resident. These countries may have data protection laws that are different from the laws in your country.
The servers of this website are located in the Republic of Korea (South). We may transfer your Personal Data with legitimate purpose to other members of the Celltrion group of companies, third party service providers, and business partners located around the world.
Whenever we transfer your personal data out of Australia, we ensure that a similar degree of protection is afforded to and that your Personal Data will remain protected in accordance with this Privacy Notice.
As of the last updated date of this Privacy Notice, the UK’s Information Commissioner's Office (the ICO) and the European Commission have adopted an adequacy decision for Republic of Korea (South Korea), which means that free unrestricted transfers of personal data from the those jurisdictions to private and public entities in South Korea will be permitted (including remote access from South Korea), and the recipient in Republic of Korea is subject to comparable safeguard to the Australia’s Privacy Act. Before disclosing any personal information to an overseas recipient, we also take steps reasonable to comply with the is subject to the Privacy Act.
Appropriate safeguards have also been implemented with our third-party service providers and partners as required.
USE BY MINORS
Our websites and online services are not intended to be used by anyone under the age of 18.
THIRD PARTY LINKS
This website includes links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
LODGING A COMPLAINT
If you want to contact us about any of your rights or complain about how we use your information, you can contact us on the details set out below. We’ll do our best to help but if you are still not satisfied, you can lodge a complaint with the Office of the Privacy Commissioner (Privacy Commissioner).
UPDATES
We may update this Privacy Notice from time to time in response to changing legal, technical, or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws. This Privacy Notice was last updated as of the "Last Updated" date shown above.
CONTACT US
If you have any questions or concerns about our use of your personal information, please contact our data protection officer using the following details: DPO.CTHC@celltrion.com
