Protecting the Privacy of Personal Data

1. Introduction

In connection with your use of the Lundbeck UK LinkedIn page, Lundbeck Limited (referred to as “Lundbeck”, “we”, “us” and “our”) may collect and hold personal data about you.

This policy explains how and why we collect personal data via the Lundbeck UK LinkedIn page, as well as other legal information regarding our practices. Lundbeck is committed to protecting the personal data we may collect from online visitors and users of our products or services.

We have a separate privacy notice for users and visitors to our Lundbeck UK website. Links to specific social media privacy notices can also be found on our website or on our relevant social media pages or channels. Where we engage with you in your professional capacity, including as a Healthcare Professional (HCP) or Other Relevant Decision Maker (ORDM) as defined by the ABPI Code of Practice, we may collect and process further information about you. Please see our Privacy Notice: Healthcare Professionals and Other Relevant Decision Makers for further information. If our website or these links are unavailable for any reason, please contact us using the details at the end of this notice and we can provide copies.

Lundbeck Limited (company number 01040798) is the data controller in relation to the processing activities described below. This means that we decide why and how your personal data is processed.

In processing your personal data, Lundbeck will always comply with applicable data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

The entity providing the LinkedIn platform and services is LinkedIn Corporation, located at 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA (“LinkedIn”). LinkedIn will also be a data controller of personal data collected via the LinkedIn platform. Please see LinkedIn’s Privacy Policy and LinkedIn privacy settings for further information about how LinkedIn processes your personal data.

2. What personal data do we process?

Personal data means any information about an individual from which that person can be identified. The categories of personal data about you that we may collect, use, store and transfer, and the way in which we collect it, are as follows.

Personal data you give to us
This is information that you voluntarily give to us via our Lundbeck UK LinkedIn page, including information provided when you visit or follow our LinkedIn page, post material or respond to posts, contact us in relation to our business or make an enquiry about our business, and/or engage in correspondence with us by direct messaging or otherwise.

We may also ask you for information when you report a problem with our LinkedIn page.

The categories of personal data collected voluntarily may include name, LinkedIn display name, email address, job title or status, location, address, contact telephone number, enquiry details, legal information relating to claims made by you, information relating to the sale of our products or services, and information contained in our correspondence or other communications with you about our business.

If you report an adverse event, side effect or any product issue via our LinkedIn page, we will collect your name, location, health-related information and contact information such as a phone number or email address in order to report to our Pharmacovigilance Department and the relevant health authorities in accordance with applicable laws. Please refer to our adverse event reporting policy for further information.

As part of an adverse event report, Lundbeck may also process special category personal data about you where it is proportionate and necessary to do so in order to comply with our reporting obligations or where required under law. This includes certain medical or health information in connection with the use of a particular medicinal product. We will seek to anonymise specific named users of our products where appropriate when holding or processing special category personal data and will request your explicit consent where required by law.

Personal data we collect about you:

We may collect personal data that you allow to be shared as part of your public profile and/or your own LinkedIn page, such as activities, age, gender, country, education, experience, skills and endorsements.

We may also collect technical information where available through LinkedIn or related services, such as browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.

In addition to the above, LinkedIn collects information on your interests and behaviour on LinkedIn via cookies. Personal data obtained via cookies may be used to provide targeted advertisements to you. If you would like to understand and control how LinkedIn uses data to show you advertisements, please see LinkedIn’s Cookie Policy for further information.

Your personal data may be converted into statistical or aggregated data in such a way as to ensure that you are not identified or identifiable from it. Aggregated data cannot be linked back to you as a natural person. We may use this data for analytical and research purposes.

Please see our Cookies Policy for more information.

3. How we use your personal data

The purposes for which we collect and use your personal data via our LinkedIn page, and the legal bases under data protection laws on which we rely, are explained below.

Legitimate interests

We may use your personal data where processing is necessary for Lundbeck’s legitimate interests or those of a third party, provided those interests are not overridden by your rights, freedoms and interests. These purposes may include:

• to conduct data analysis to create and optimise our audience and targeting, to help us understand how our LinkedIn page is used and by whom, to research and understand demographics, preferences, interests and behaviour, and to assist, enhance and personalise your user experience, including by providing more relevant information and news;
• to correspond or communicate with you;
• for business administration, including statistical analysis;
• for network and information security, including taking steps to protect information against loss or damage, theft or unauthorised access;
• to comply with a request from you in connection with the exercise of your rights;
• to monitor the quality of support provided to our LinkedIn page followers and connections, and to assess and improve our service where necessary;
• for the management of enquiries, queries, complaints or claims;
• for prevention of fraud and other criminal activities; and
• for the establishment, exercise or defence of legal rights.

Compliance with a legal obligation

We will use your personal data to comply with our legal or regulatory obligations, including obligations under pharmacovigilance law. This may include using personal data to assist a public authority or criminal investigation body, to identify you when you contact us, and/or to verify the accuracy of data we hold about you.

4. Who may receive or have access to your data?

We may disclose your personal data to the following third parties:

Group companies

We may share your personal data with other companies within the Lundbeck group. This may involve transferring your data outside the UK to our overseas offices, including Denmark or other European offices. Group companies may use your personal data in the ways set out in the section headed “How we use your personal data”, including in connection with data analysis, business management and understanding how our LinkedIn page is used.

Health authorities

If you report an adverse event, side effect or any product issue via our LinkedIn page, we will share relevant personal data with our Pharmacovigilance Department and, where required, relevant health authorities as set out in applicable pharmacovigilance legislation. We will seek to anonymise specific named users of our products where appropriate when processing special category personal data and will request explicit consent where required by law. Please refer to our adverse event reporting policy for further information.

Our suppliers and service providers

We may disclose your personal data to third-party service providers, agents, subcontractors and other organisations for the purposes of providing services to us or directly to you on our behalf. Such third parties may include cloud service providers, hosting and email management providers, IT providers, professional advisers, advertising and marketing agencies, communication fulfilment service providers and administrative service providers.

When we use third-party service providers, we only disclose personal data that is necessary for them to provide their service and we have a contract in place that requires them to keep your information secure and not to use it other than in accordance with our specific instructions, unless otherwise permitted or required by law.

Business sale or restructure

We may transfer your personal data to a third party as part of a sale, transfer or merger of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation. This includes in the event of any liquidation, dissolution or administration.

Legal obligation

We may also transfer your personal data if we are under a duty to disclose or share it in order to comply with any legal obligation, detect or report a crime, enforce or apply the terms of our contracts, or protect the rights, property or safety of our visitors and customers.

When disclosing your personal data to third parties, we will take steps with the aim of ensuring that your privacy rights continue to be protected.

5. Where is your data stored?

All personal data you provide to us is stored on secure servers located within the United Kingdom and/or the European Economic Area (“EEA”).

If at any time we transfer your personal data to, or store it in, countries located outside the United Kingdom or the EEA, we will ensure that appropriate safeguards are in place for that transfer and storage as required by applicable law. This may include the use of adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the European Commission Standard Contractual Clauses, standard contractual clauses and/or other safeguards permitted by applicable data protection law.

If your personal data is transferred to other companies in the Lundbeck group, the transfer will be based on the Lundbeck Intra Group Agreement as applicable from time to time.

6. How long do we store your personal data?

If we collect your personal data, the length of time we retain it is determined by a number of factors, including the purpose we collected it for, the purpose for which we use that information and our obligations under applicable laws or regulations. We will only keep your personal data in an identifiable format for as long as is reasonably necessary to achieve the respective purpose of the processing, unless we believe that the law requires us to preserve it for longer.

If you have made a complaint, enquiry or contacted us via our LinkedIn page, we will store your personal data for as long as is reasonably required to deal with your enquiry or resolve your complaint. We review data submitted to us via the direct message function on our LinkedIn page on an annual basis and delete personal data that is no longer necessary for us to retain.

When it is no longer necessary to retain your personal data, we will delete the personal data that we hold about you from our systems. After that time, we may aggregate the data so that you cannot be identified and retain it for analytical purposes.

The exceptions to the above are where:

• we need your personal data to establish, bring or defend legal claims or to comply with a legal or regulatory requirement;
• the law requires us to hold your personal data for a longer period, or delete it sooner;
• you exercise your right to have the information erased, where that right applies, and we do not need to hold it in connection with any of the reasons permitted or required under the law;
• you exercise your right to require us to retain your personal data for a period longer than our stated retention period; or
• in limited cases, the law permits us to keep your personal data indefinitely provided appropriate protections are in place.

7. Security and links to other sites

The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of information transmitted to our LinkedIn page and any transmission is at your own risk. Once we have received your personal data, we put in place reasonable and appropriate controls to help protect it against accidental or unlawful destruction, loss, alteration, unauthorised access or unauthorised disclosure.

Our LinkedIn page and/or posts may contain links to other websites run by other organisations. This policy does not apply to those websites, so we encourage you to read their privacy statements. We cannot be responsible for the privacy policies and practices of other websites, even if you access them using links that we provide.

8. Data anonymisation and use of aggregated information

Your personal data may be converted into statistical or aggregated data in such a way as to ensure that you are not identified or identifiable from it. Aggregated data cannot be linked back to you as a natural person. We may use this data to share with partners or for analytical and research purposes. This information may be collected by cookies placed on our site; please see our Cookies Policy for more information.

9. Your rights

In the UK and EEA, you have certain rights in relation to your personal data under data protection law. These are described below. Please note that we may ask you for information to confirm your identity and, where applicable, to help us search for your personal data.

• Right of access. You have the right to request access to the personal data Lundbeck processes about you. We may not be able to provide you with a copy of your personal data if this concerns other individuals or where we have another lawful reason to withhold that information.
• Right to rectification. You have the right to rectification of inaccurate personal data concerning you, including completion of incomplete personal data. If you discover that any information we hold is inaccurate or out of date, please let us know.
• Right to erasure or restriction of processing. Under certain circumstances, you may ask for your personal data to be removed from our systems. Unless there is a reason that the law allows us to use your personal data for longer, we will make reasonable efforts to comply with your request. You may also ask us to restrict processing of your personal data where you believe it is unlawful for us to do so, you have objected to its use and our investigation is pending, or you require us to keep it in connection with legal proceedings.
• Right to data portability. Where processing is based on consent or a contract and the processing is carried out by automated means, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format. You have the right to ask us to transmit this personal data to a third party and we will do so if technically possible.
• Right to object. Where Lundbeck relies on legitimate interests as the legal basis for processing your personal data, you may object to us using your personal data for those purposes. Except for the purposes for which we are sure we can continue to process your personal data, we will temporarily stop processing your personal data in line with your objection until we have investigated the matter. If we agree that your objection is justified in accordance with your rights under data protection laws, we will permanently stop using your data for those purposes. Otherwise, we will provide our justification as to why we need to continue using your data.
• Withdrawing your consent. Where we rely on consent as the legal basis for processing your personal data, you may withdraw your consent at any time. If you withdraw your consent, our use of your personal data before you withdraw remains lawful.
• Automated decisions. Lundbeck does not undertake solely automated decision-making through its LinkedIn page that produces legal effects or similarly significant effects on individuals. In certain circumstances, you may contest a decision made about you based on automated processing.

If you want to exercise any of your rights as described above, please email or write to us using the contact details at the end of this policy.

10. Complaints

If you wish to file a complaint regarding Lundbeck’s processing of your personal data, you can email or write to us using the contact details at the end of this policy.

You also have the right to complain to the relevant data protection authority, which in the UK is the Information Commissioner’s Office (“ICO”), if you are concerned about the way that we have processed your personal data.

• Information Commissioner’s Office
  Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
  Telephone number: 0303 123 1113
  Website: https://ico.org.uk/

11. Changes
We may review this policy from time to time and any changes will be notified to you by posting an updated version or updated link on our LinkedIn page. Any changes will take effect seven days after the date on which we post the modified policy or link on our LinkedIn page. We recommend that you regularly check for changes and review this policy whenever you visit our LinkedIn page. If you do not agree with any aspect of the updated policy, you must immediately notify us and cease using our LinkedIn page.

This policy was last updated in July 2026.

12. Contact

If you have any questions regarding this privacy policy or Lundbeck’s processing of your personal data, please contact our Data Protection Officer using the details below.

• Email: DataPrivacyUK@lundbeck.com.
• Post: Lundbeck Limited, Iveco House, Station Road, Watford, Hertfordshire, England, UK WD17 1ET.
• Phone: 01908 649 966.

13. Disclaimer

• Any information on diseases and treatments available on our LinkedIn page is intended for general guidance only and must never be considered a substitute for advice provided by a doctor or other qualified healthcare professional.
• Always seek the advice of your physician or other qualified healthcare professional with questions you may have regarding your medical condition.
• Although Lundbeck takes all reasonable care to ensure that the content of its LinkedIn page is accurate and up to date, all information contained on it is provided on an “as is” basis.
• Lundbeck makes no warranties or representations of any kind concerning the accuracy or suitability of the information contained on its LinkedIn page.
• Lundbeck may at any time and at its sole discretion change or replace the information available on its LinkedIn page.
• To the extent permitted by applicable laws, Lundbeck shall not be liable for any direct, incidental, consequential, indirect or punitive damages arising out of access to or use of any content available on its LinkedIn page, regardless of the accuracy or completeness of any such content.
• Lundbeck disclaims any control over, relationship with, or endorsement of views expressed by other LinkedIn users. 
• Any links to third-party websites are provided only as a convenience and Lundbeck encourages you to read the privacy statements of any third-party websites.
• Where comments or other interactive functionality are available, comments may be regularly reviewed and monitored by Lundbeck and may be deleted if deemed inappropriate. Comments which are off-topic, offensive or promotional may be removed.
• Any comments or posts from members of the public do not necessarily reflect the views of Lundbeck.