This Data Protection notice is issued by Roche Ireland Limited (“Roche”, “we”, “us”, “our”). We are based at Clarecastle, Co. Clare, V95 P589, Ireland.

Roche is the controller of any personal data which is collected via or in connection with this website.

Roche is part of the international Roche group that manufactures and sells various medical products, pharmaceuticals and related services in the areas of diagnostics, diabetes care and pharmaceuticals.

This website focuses specifically on the decommissioning of Roche’s Clarecastle Site. It therefore acts as an information resource for people who wish to find out more about the decommissioning project and it also enables people to engage directly with Roche by phone or email in relation to the decommissioning project.

Roche is aware that the protection of privacy and the protection of personal data relating to individuals who deal with Roche and access the website is very important and attaches great importance to this. Roche has therefore taken the necessary precautions to meet all applicable data protection requirements and accordingly complies with the provisions of EU, Irish and any other applicable data protection law.

Your personal data will only be processed to the extent permitted by law and in compliance with relevant laws, including the requirement of transparency.

Name and address of the data protection officer

The data protection officer of Roche is: Joe Murphy, joe.murphy@roche.com Roche Ireland Limited Clarecastle, Co Clare, V95 P589

Personal Data that we collect and process

Roche only collects personal data relating to you if you contact us and voluntarily provide that information to us.  This will arise where you contact Roche by email or phone with queries or comments or to raise any issues.  In such circumstances, you may provide us with the following details:

  • Name;
  • E-mail address;
  • Postal address;
  • Mobile number; and
  • Details of your query, comment or issue.

We will process these details solely to consider and deal with your query, comment or issue.

The provision of the data for the purposes mentioned above takes place on a voluntary basis. Failure to provide the data means that we cannot provide you with any information or improved information without your consent to the processing of your personal data.

If you browse our website but do not contact us, we will not collect any personal data in relation to you.  We may, however, collect non-personally identifiable information when you visit our website through the use of cookies. Cookies are small text files which provide us with information about how often someone visits our website, and what website activity is carried out during those visits.

For more information about the way this website uses cookies and your options for accepting and rejecting cookies, please click here

Legal basis for processing

The legal basis for which we process your personal data is:

  1. Where we process your personal data in order to respond to a query which you have raised, we do so on the basis of your consent (Article 6(1)(a) GDPR);
  2. Where we process your personal data in connection with a comment or issue which you have raised, we will do so on the basis of (i) our legitimate interests in conducting our business in a responsible and commercially prudent manner (Article 6(1)(f) GDPR) or (ii) where this is necessary to comply with our legal obligations (Article 6(1)(c) GDPR).

Recipients of Personal Data

Where necessary and proportionate, we may disclose data to third party recipients in connection with the purposes set out above. This includes sharing your personal data with:

  1. For the technical support of the website: Byrne Ventures Ltd., T/A Acton BV, Suite 1, Clare Technology Park, Ennis, Co. Clare V95 RC90, Ireland
  2. For hosting the website: Byrne Ventures Ltd. T/A Acton BV, Suite1, Clare Technology Park, Ennis, Co. Clare V95 RC90, Ireland
  3. For website tracking: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Rights of the data subject

Where we process your personal data, you have the following rights, in certain circumstances and subject to certain restrictions:

1. Right to information

You can request confirmation from Roche as to whether we are processing personal data relating to you.

If this is the case, you can request the following information from the person responsible:

  1. the purposes for which the personal data are processed;
  2. the categories of personal data that are processed;
  3. the recipients or the categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
  4. the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
  5. the existence of a right to correct or delete your personal data, a right to restrict processing by the person responsible or a right to object to this processing;
  6. the existence of a right to lodge a complaint with a supervisory authority;
  7. all available information about the origin of the data if the personal data are not collected from the data subject;
  8. the existence of automated decision-making including profiling in accordance with Art. 22(1) and (4) of the GDPR.

You have the right to request information about whether your personal data is being transmitted to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees according to Art. 46 GDPR in connection with the transmission.

2. Right to rectification

You have a right to request the correction of personal data if your data is incorrect or incomplete.

3. Right to restriction of processing

You can request that the processing of your personal data be restricted under the following conditions:

  1. if you dispute the correctness of the personal data concerning you, then you can restrict the processing of your personal data for a period of time that enables Roche to check the correctness of the personal data;
  2. the processing is unlawful and you request that the use of the personal data be restricted rather than deleted;
  3. if Roche no longer needs the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims, or
  4. if you have objected to the processing in accordance with Art. 21(1) of the GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

 4. Right of Erasure/Right to be Forgotten

4.1 You can request the erasure of your personal data. Roche is obliged to comply with this request if one of the following reasons applies:

  1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. Where the legal basis for the processing was your consent, if you revoke that consent.
  3. You object to the processing in accordance with Art. 21(1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21(2) GDPR.
  4. The personal data concerning you have been processed unlawfully.
  5. The deletion of your personal data is necessary to fulfill a legal obligation under EU law or the law of the member states to which Roche is subject.

4.2 The right to erasure does not exist if processing is necessary

  1. to exercise the right to freedom of expression and information;
  2. to fulfill a legal obligation that requires processing under EU law or that of any EU member state to which Roche is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible;
  3. for reasons of public interest in the area of ​​public health in accordance with Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89(1) GDPR,
  5. to assert, exercise or defend legal claims.

5. Right to data portability

You have the right to receive the personal data concerning you that you have provided to Roche in a structured, common and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that:

  1. the processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR and
  2. the processing is carried out using automated procedures.

In exercising this right, you also have the right to have your personal data transmitted directly from one person in charge to another person in charge, as far as this is technically feasible. This must not impair the freedoms and rights of other people.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to the person responsible.

6. Right to Object

You have the right to object at any time to the processing of your personal data, which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

Roche will no longer process the personal data relating to you unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

7. Right to withdraw consent

You have the right to withdraw your declaration of consent under data protection law at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation.

8. Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effects on you or which significantly affects you in a similar manner. This does not apply if the decision

  1. is necessary for the conclusion or performance of a contract between you and the person responsible,
  2. is permissible on the basis of EU or Member State law to which the controller is subject and this law contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
  3. takes place with your express consent.

If you wish to exercise any of the rights at 1 to 8 above, please contact us at: clarecastle.comms@roche.com

9. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation, if you are of the opinion that the processing of your personal data is contrary to the GDPR violates.  In Ireland, the supervisory authority is the Data Protection Commission.

Collection and retention of personal data

We only collect and keep such personal data as is necessary for the purposes set out in our data protection notices and we will only retain such personal data for as long as required for the purposes for which it is processed (or for any applicable statutory retention period).

Contact Us

If you have any questions about our data protection notice, please contact us:

via email to: clarecastle.comms@roche.com