Privacy Notice Center - Bristol Myers Squibb

We are Bristol-Myers Squibb Company (BMS). In addition to this Notice, our details (name, address, etc.) may have been given to you separately at the time of the collection of information about you, for example, in a form, an app or a website notice, or in an e-mail, containing a link to this Notice. Together with our worldwide affiliates and other entities that are part of the BMS group which have a relationship with you, we are the controllers of your Personal Information. We refer to these entities as “BMS”, “we”, “us” or “our”.

You can access the main locations of our entities and facilities, markets where we distribute our products and the countries where we operate on www.bms.com.

This general privacy notice (“Notice”) is a global Notice. It describes how Bristol Myers Squibb may Use information about you (“Personal Data” or “Personal Information”) when you interact with our company, in connection with your use of BMS websites, mobile applications, devices and platforms, when we communicate with you and in the context of our business activities. It also informs you about your privacy rights and the measures and processes we put in place to protect your data.

This Notice applies whether you are a patient, member of the public, visitor, shareholder or investor, member of a regulatory body or authority, supplier or business partner, job applicant, or any other individual with whom we engage or who is involved in our business activities. 

If you are an employee, supplier, or business partner, there may be additional privacy notices that apply to your information. Please refer to the information you received from us as an employee for additional privacy notice information, and if you are a supplier or business partner, please refer to your contractual agreements with BMS for additional information. 

In this Notice, we refer to you as “you” or “your”. We use the term “Processing” or “Use” when we refer to the access, collection, recording, organisation, structuring, retrieval, disclosure, storage, transfer, deletion or otherwise use of your Personal Information. 

Compliance with applicable laws

When Using your Personal Information in the context of our activities, we will do so in compliance with relevant data privacy and data protection laws, which includes regulatory and national law requirements that may apply to such Use and, where applicable, giving you the specific rights that apply in the country where you reside (altogether “Applicable Data Protection Law”).

We may collect your Personal Information online when you use BMS or third-party operated websites and other online resources, including mobile applications, other digital means or platforms. This may also happen through collaborations that we have in place with third parties or companies that host websites for us or with whom we have partnerships for our products, services, or activities. Below, we give you additional information about how we use your information online. 

You may interact with BMS or our partners websites and platforms that relate to BMS products and services, job application, patient recruitment, disease awareness, scientific research, alliance websites, or applications used in the context of patient support or management programs.

We enter into arrangements for those collaborations to require an appropriate protection of your Personal Information. Some area of our web sites and platforms may require you to submit information in order for BMS to respond to your request, permit you to access specific areas or participate in a particular activity. When visiting our websites, please also read our Legal Notice and if you are visiting our website for safety reasons, our page on medical information.

We have identified examples where we Use your Personal Information online in the table below.

Links to other third-party websites

As a convenience to users, our sites contain links to other third-party websites that may offer additional information, such as educational or professional materials, services and contacts. This Notice does not apply to your use of those other websites. Before using the linked websites, please review their privacy notices to understand how they use and protect your Personal Information.

The information that we Process about you may include various categories of Personal Data depending on your interactions with BMS, third parties with whom we collaborate, or external sources that provide us with your Personal Data. We have outlined below the main categories of Personal Information and, where applicable categories of sensitive Personal Information that we may collect about you.

In some situations, we may collect sensitive Personal Information about you. Depending upon the country in which you reside and the particular context for the collection of such Personal Information, this may include the following information:

In most cases, BMS will collect information directly from you, although sometimes we will obtain information from public or third-party information sources or from use of web-based, devices or other technologies which automatically generate such information. We have outlined below the main ways BMS collects and Processes Personal Data when interacting directly or indirectly with you.

We may collect information from you directly:

• when we interact with you in the course of our activities or when you participate in a BMS activity, event or program (such as diversity and inclusion, ambassador or patient support programs);
• in the context of a specific treatment, such as for personalized medicines, using medical devices or digital platforms or applications;
• when we engage service providers, business partners or institutions for services, collaborations or operations;
• when you sign up to receive our communications to become a member of our databases or when registering to receive our press releases, e-mail alerts, marketing communications or more information about our activities;
• when you share information with us through our various contact points, such as through our company products, commercial, clinical or alliance websites, mobile applications, contact forms, call centers, career application websites, during offices or manufacturing site visits, or for product inquiries;
• when we collect information about you from your computer or other devices you use when visiting BMS’s website or mobile applications, or other products, our offices and facilities; or
• when you share medical information with us relating to adverse events, pharmacovigilance or incidents involving devices or applications. These disclosures can be communicated in-person or remotely, including by calling us, or via our websites and other digital channels or means of communication.

We may collect Information about you indirectly:

• when we receive information about you through a healthcare professional where necessary for pharmacovigilance, incident management, risk management, investigation, or litigation purposes;
• when we obtain information that is accessible from public registries, databases, or other third-party sources, such as service providers, agencies or private organizations;
• when you have made information about you publicly available on the Internet, including websites, social media platforms, scientific reviews, articles and publications and other sources, in which case we will either inform you, anonymize the data or get your prior consent;
• when necessary to verify your credentials, professional information (such as by accessing publicly accessible information, national registries or third-party databases) or your identity for compliance, security or ID verification purposes; 
• when you make public posts on social media platforms that we follow (for example, so that we can understand public opinions).

We may also collect information about you automatically, such as for security and systems monitoring (e.g. through video (CCTV) recording) and building access control logs when you visit our offices or in other contexts made apparent to you at the time.

Where permitted and feasible, and to protect your right to privacy, BMS will take reasonable steps to remove, de-identify or anonymize information that may directly or indirectly identify you, and restrict to the minimum the amount of Personal Information that BMS Uses, submits or transfers to third parties, courts, or governmental bodies.

This is a global Notice. BMS Processes your information in the context of our regular activities, and in accordance with the purposes as set out in this Notice, a separate notice, or when Applicable Data Protection Laws either permit or require us to do so. These purposes may vary depending on where you live and where BMS operates. Where the laws of a country restrict or prohibit certain activities described in this Notice, we will comply with such requirements. This may include refraining or not Using your Information for those purposes restricted or prohibited in that country. 

Below, we list some of the main, but not all, of our purposes for which we may Use Personal Information about you.

In this section, we describe our legal justifications (commonly referred to as “legal basis”) for the Use of your Personal Information related to each of our main Processing activities. We will use the legal basis that is most appropriate for the purpose and circumstances related to such Processing. Below, we have explained which legal bases we may choose or have to use when Using your Personal Information.  

There may be times where we must use your consent to Process your Personal Information. We may also decide to ask your permission to Process your Personal Data, such as in the context of voluntary initiatives or activities. 

In the following table, you can read more details about what applicable legal basis or combination of legal bases we may use when Processing your Personal Information.

As a multinational company operating worldwide, your Personal Information may be shared with, or accessed by, parties located outside your country of residence. If you are located outside of the United States, BMS may share your Personal Information with parties located in countries that provide less protection than in your country, which includes the United States. We may also Process and share your Personal Information with some of our affiliates and other members of the BMS group including selected and approved third parties (vendors and business partners) that help us operate worldwide. When doing so, we implement appropriate measures to prevent unauthorized access or Use of your Personal Information.

Below you can find more information about how BMS shares your Personal Information within its group of entities and with third parties.

Sharing your Personal Information within the BMS group

Often, we share your Personal Information within the BMS group of companies (“BMS Group”). This may include the Bristol-Myers Squibb Company headquarters in the United States and all of its current and future subsidiaries, branch offices, affiliates, entities and other companies that are part of, owned or controlled by, the BMS Group. When exchanging information internally, we rely on appropriate arrangements and mechanisms to cover any transfer of your Personal Information within our corporate structure, such as binding corporate rules (BCRs), contractual arrangements approved by authorities or based on consent.

Sharing your Personal Information with third parties

To conduct our business, we share with, or disclose Personal Information to, third parties, such as:

• Third-party service providers for the purpose of outsourcing specific business activities to request external support and resources. This may include companies that provide information technology services, clinical trials and studies support, marketing or market research services, events, meeting and planning services, or services related to talent acquisition or consultancy;
• business partners such as external scientists and healthcare professionals to review and assist us with healthcare compliance activities and institutions and other organizations with whom we collaborate to support our clinical or commercial activities (such as for clinical studies, patient support programs, and so on);
  
• digital advertising companies, such as advertising networks or platforms that help us understand how which of our products or programs you are most likely to be interested in learning about; 
• regulatory and health authorities including governmental bodies (such as the FDA, EMA, NHS), data protection authorities, tax authorities, or courts in case of disputes, when permitted or required by Applicable Data Protection Law; and
• third parties to whom BMS is legally obligated to provide such information, such as other parties in litigation or legal disputes, guardians, conservators, or individuals with powers of attorney.

Data sharing in connection with a transfer of control

Circumstances may arise where we decide to reorganize or divest part or all of our business or a line of our business (or any portion of our assets), including our information databases and websites, through a sale, divestiture, merger, acquisition, in the event of a bankruptcy, or other means of transfer. In any such circumstance, your Personal Information may be shared with, sold, transferred, rented, licensed, or otherwise provided or made available by us or on our behalf to actual or potential parties to, and in connection with, the contemplated transaction (without your consent or any further notice to you). In such circumstances, we will seek written assurances that Personal Information about you submitted through this Website will be protected appropriately.

If you are in the European Economic Area (“EEA”) and Switzerland

Whenever we transfer your Personal Information within the EEA, Switzerland or to countries that are deemed “adequate”, such countries are deemed to offer the same level of protection as given by the law of your country. When accessing your Personal Data from, or transferring it, outside of the EEA or Switzerland to countries that may not provide the same level of protection as your own country, we will use appropriate safeguards to protect your right to privacy. For example, such safeguards may consist of using Standard Contractual Clauses (to exchange information with third parties outside of the EEA and Switzerland), Binding Corporate Rules (for data transfer within the BMS group of companies) as approved by the European Commission or the competent authority, data transfer agreements or your consent.

If you are outside the EEA and Switzerland

Where possible, we will allow access to or the transfer of your Personal Information outside your country of residence: to countries that provide a reasonable high level of data protection; using the most appropriate data transfer mechanisms available to BMS; or where required by Applicable Data Protection Laws, after we get your prior permission, for the collection, disclosure to third parties and the transfer of your Personal Information to a country which does not provide an adequate protection equivalent to the laws of your country of residence.

We may use algorithms that will enable us to use automated decision-making, including to create profiles. This means that when we use certain technologies, software or algorithms, which may allow us to create profiles, tiering, further understand trends and statistics or use other advanced technologies or automated processing, someone will be involved to validate decisions resulting from such use.

We do not use profiles to make any decisions that produce legal or similarly significant effects, such as the provision or denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health-care services, or access to essential goods or services.  

You have a number of rights related to the Personal Data that we Process about you (this will depend on the jurisdiction where you reside and the legal basis that we use). Most often, exercising your right is free of charge. We may also have to clarify your request and explain if we can comply with it or if this is restricted in your situation. You can always contact BMS at dpo@bms.com or via this contact form to find out more about your rights and how best to exercise them. 

Below we have listed individual rights that may apply depending on your jurisdiction. 

You may have the right to:

• receive a copy of your Personal Data we hold about you;
• correct your Personal Data we hold about you;
• where applicable, receive a machine-readable copy of your Personal Data (portability);
• ask us to delete your Personal Data or restrict how it is used;
• where applicable, object to Processing of your Personal Data for certain purposes, such as when we use it for marketing purposes (opt-out); and
• where you have provided us with your consent to Use your Personal Data, you can withdraw your consent at any time without affecting BMS’ Use of such information before your withdrawal of consent.

Exceptions to your rights

There may be exceptions to your privacy rights described in this Notice. This depends on the country where you reside, why we are Processing your Personal Data and if your request may impair the rights of others. If we cannot comply with your request to exercise your privacy rights, for example when we keep your information for regulatory purposes or for the investigation, prosecution, or defence of a legal claim, we will explain this to you when you contact us.

How to contact us

If you have any questions about how we Use your Personal Information, please contact our Data Protection Office at dpo@bms.com. If you are resident in a State that provides you with more rights (such as California), you can submit requests by calling 855-961-0474 or by completing the online form at www.bms.com/dpo/us/request. For further details, see our section on State Privacy Rights.

Note: We may need to request specific information from you to help us confirm your identity. If your request is complex or if you have made a large number of requests, it may take us longer to respond to you, but we will keep you informed of any delays. You will not have to pay a fee to obtain a copy of your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.

Lodging a complaint with a competent authority

In some countries, you may have the right to lodge a complaint to the relevant data protection or competent authority if you believe that we Process your Personal Information unlawfully or are violating your rights. For example, in the European Union, you can access the list of competent data protection authorities, including the authority in your country of residence by clicking here or by visiting: https://edpb.europa.eu/about-edpb/board/members_en.

We aim not to retain your Personal Information for longer than necessary for the specific business purposes for which it was collected. After that, unless we are required to continue to maintain the information by law, we may anonymize, restrict, block or delete it. In certain cases, BMS may retain your Personal Information for a longer period for the purpose that we have and, in a manner, or a format, that may require BMS to keep certain identifiers. In such case, we may archive it and apply appropriate measures which may consist of blocking, preventing, obfuscating, pseudonymizing, key-coding, or restricting any further access and Use of Personal Information about you. When retaining and storing information about you in our systems, we have put in place data retention schedules in accordance with our company policy and in compliance with Applicable Data Protection Laws.

When assessing the appropriate retention period, we take into account the quantity, nature and sensitivity of Personal Data, the potential risk of harm in the event of unauthorised use or disclosure, the purposes of the Processing and whether or not these purposes can be achieved by other means, as well as applicable legal obligations.

We implement appropriate technical and organizational controls to protect your Personal Information that we hold to prevent unauthorized Processing, loss of data, disclosure, use, alteration, or destruction.  Where appropriate, we use encryption, pseudonymisation (such as key coding), de-identification and other technologies that can assist us in securing the information about you, including measures to restore access to your information. We also require our service providers to comply with reasonable and recognized data privacy and security requirements. 

We conduct tests and reviews of our technologies and processes, including a review of our business partners and vendors, so that our security controls remain effective. Also, we may further anonymize your Personal Information when it is no longer needed for the purpose for which BMS originally collected such Information.

BMS may Process your Personal Data to evaluate your application to work at BMS. When applying for an opportunity at BMS, we may collect and Process Personal Information about you directly or indirectly from our official websites, third parties or when you make this information publicly available or accessible by third parties for recruitment purposes. You can consult our career opportunities on this page: https://careers.bms.com/. Below, you can find more information about how BMS Processes your Personal Information when you apply to work for us. 

To consider your application we may collect:

• your professional experience, such as job title, education information, professional qualifications, work experience, publications, and professional networks, programs and activities in which you participated;
• your contact details, such as your e-mail address, full name, date of birth and other information necessary to submit your application;
• information gathered from agencies, such as information from recruitment agencies, reference providers, and (where permitted by law) background screening providers;
• publicly available information from a company website, internet searches or social media platforms such as LinkedIn or other social media platforms, and publicly available profile information (such as your experience, skills, and interests);
• information that you allow us to access, for example, if you choose to simplify your login Process to the job platform to allow direct access once you have signed in to your third party social media user account, (such as Gmail or Yahoo!), or if you want to upload information to the platform (such as from LinkedIn) instead of manually completing an application; and
• other information that you submit to us, that we obtain indirectly or that we access when looking for new hires or career opportunities.

As your job application proceeds

We may ask you to share additional Personal Information with us, such as:

• official information, such as government issued identification number or tax status; 
• financial information, such as bank account details;
• special categories of Personal Data / sensitive Personal Data, including (where it is permitted, necessary or required for your application) information about your health, marital status, trade union membership religion, criminal records, or credit worthiness data; or 
• other information necessary for your interview or providing you with a job offer, such as details of any known disability or workplace accessibility needs, background information, travel and expenses, performance management, emergency contact details, compensation, hours of work, holidays and benefits-related information. 

Where do we Use your Personal Information for job application

As a multinational organization, our affiliates transfer information globally. When you upload information to a job search platform, you provide it to all our affiliates, each of which may Process it for its own recruitment purposes. This is the case even where you respond to a job posting that mentions a particular BMS affiliate. Accordingly, we may transfer globally information about you (for example, if you are in the European Economic Area ("EEA"), your information may be transferred outside the EEA; if you are in Australia, your information may be transferred outside Australia).

We will not keep your Personal Information for longer than needed to consider your application. However, we may ask your permission to keep some information about you for a longer period (for example your CV or resume, work experience, cover letters and so on) to consider your eligibility for further job opportunities.

BMS Processes Personal Information about patients that use our treatments and in the context of our clinical research activities. We may also Use patient Personal Information in connection with certain activities, such as through our services, collaborations or consortium agreements with third parties (for example genetic data), during events interviews, for advocacy related activities, or for clinical trials, studies or research projects linked to our products. 

Note, this section, together with this Notice, does not apply to participants to clinical trials. 

This Notice applies to how BMS may Use Personal Information about you when you participate in non-clinical activities. If you are involved in a research project, clinical trial or in a study you can contact your physician or contact dpo@bms.com. Below, you will find out more information about Personal Data that we collect about patients in contexts other than clinical studies or research projects.

Patients participating in non-clinical research activities with BMS

In the context of non-clinical research activities, BMS generally does not collect patient data, except in certain occasions, such as where we have reporting obligations to authorities, if you agree to share such information with us or, if permitted, by information you prior to the collection of your Personal Information. In some instances, we may have interactions with you or access information about you outside of our clinical research activities. This may happen, for example and where permitted, when:

• accessing our personalized medicines, other innovative therapies or devices; 
• BMS collaborates with patient organizations;
• inviting you to our events;
• we propose patient support programs;
• we use certain digital technologies, platform or device;
• we use patient recruitment websites or conduct awareness or recruitment campaigns on social media; or 
• when conducting surveys, market research, interviews or propose ambassador programs. 

When doing so, BMS will either collect information that does not allow us to identify you or use technical measures to limit the risk of identification. For example, we may use measures that could include:

• replacing your information such as name, identification number or any other information with a code (key-coded study data); 
• using a third party provider who will only share your Personal Information in an aggregate manner with BMS; 
• anonymizing your Personal Information after its collection; or
• requesting your prior consent. 

For more information about our Use of sensitive data, please refer to section 4.

This section applies to data subjects located in States which have implemented privacy laws as of the date of this Policy: California, Colorado, Connecticut, Virginia, and Utah. If you are a resident in one of these States, you may have certain specific rights (e.g., access and deletion) that apply to you. We describe those rights below. These rights are not absolute and only apply in certain circumstances.  This means that we may be unable (e.g., due to legal requirements), or not obligated, to satisfy your request.  In some cases, we may need to collect additional Personal Information from you to verify your identity before we provide access or delete your information, such as government-issued identification.  BMS will not discriminate against you for exercising your rights but may not be able to provide you with services or programs that you have requested if we are not able to use your Personal Information.  To submit requests, please call 855-961-0474 or complete the online form at www.bms.com/dpo/us/request. 
 

Information BMS Collects

Personal Data, or Personal Information, means any information about an identifiable individual. BMS may collect Personal Information directly from you (in person, through online forms, and other interactions with BMS employees, websites, and systems), or from other third parties.

How BMS Uses Personal Information

The purposes for which BMS Uses Personal Information depends on the relationship or interaction with a specific California resident, and we only Process your information for purposes permitted by Applicable Data Protection Laws.  BMS may Use Personal Information to operate, manage, and maintain our business, to provide products and services, and to accomplish business purposes and objectives.

For more information about the purposes for which we Use your Personal Information please refer to section 7 of this Notice.

BMS websites and mobile applications are not intended or designed for children under the age of 13. Depending on the country where you reside, you may not use this website under the age of 16 or 18. We do not collect information from any individual we know to be under the age of 13 (or older if your country is more restrictive). We do not knowingly sell Personal Information of children under the age of 16. Please contact your physician or dpo@bms.com if you need further information relating non-adults participation to our studies.

Depending on the country where you reside, you may manage your preferences on cookies and similar tracking technologies through the use of consent management tools that are available on our websites. This section applies to cookies and similar tracking technologies. When we collect information that may enable us to identify you, the other sections of this Notice will apply.

What are cookies?

A cookie is a small piece of data that a website asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Such cookies when set by us are called first-party cookies. We may also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting (for example, those used by social media, instant messaging, CRM or marketing platforms, or advertising companies). For more information about cookies, types of cookies and how to manage cookies, including how to block them and delete them, please visit http://www.allaboutcookies.org. 

Below, we list the main categories of cookies and similar tracking technologies that we may use when you connect to our websites, use our web-based platforms, applications, devices, or when you interact with us electronically or when you receive electronic communications from us (“Online Use”). You can learn more about the purposes for which BMS may use such technologies for your Online Use.

What categories of cookies may BMS use?

We generally use certain types of cookies during your session on our website (“session cookies”). To improve your experience or remember your preferences or choices, we may use cookies that will remain on your device unless you remove them (“persistent cookies”). When using cookies on our websites and other digital services, such technology may include: 

Why do we use cookies on our website?

In addition to the explanation provided in this Notice and the section above, we use cookies or similar tracking technologies in various instances, such as for the following purposes:

• Making your experience more efficient, faster and easier. By remembering your preferences, like preferred language, display and other settings, maintaining your session, and for authentication purposes. This helps us to provide you with a better user experience. These cookies are also referred to as Session-Id cookies, authentication cookies, and User Interface customization cookies.
• Gain useful knowledge about how the site is used. By collecting information about the number of visitors and other uses. This helps us improve our sites. These cookies are also referred to as analytics cookies. For this purpose, we use services such as Google Analytics which means that Google and similar suppliers will also have access to this information (including your IP address and any other equipment identifiers such as the IMEI number and the MAC address). 
• Provide easy access to our websites. This helps us to direct you, share with you our content within sites such as Facebook, Twitter, LinkedIn, YouTube or Pinterest or allow you to share content that is of your interest. To the extent we use such technology, these ‘social media plug-ins’ may store cookies and similar technology on your computer or other device. This means that the social media sites may access this information (including your IP address), may identify that you interacted with the BMS site. 
• Improve our marketing communications to you. Certain cookies, such as web beacons or tracking pixels, may be used by third party systems, such as customer relationship management systems or other service providers who help us manage e-mail campaigns. Those trackers enable us to better understand the success of our communications and the relevance of the content that we share with you. This may allow us to reduce the number of e-mails that we send you and provide you with content, scientific information, or initiatives that are more tailored to your interests.
• Collect and analyse advertising campaigns. We use, and allow certain 3rd parties to use, other technologies, such as web beacons, on our Web sites and in our digital communications to tailor advertising, or to measure the effectiveness of advertising campaigns. A web beacon is a clear GIF (Graphics Interchange Format) that a company can place on a web site or in digital communications to allow it or a third party (such as an Internet advertising, audience measurement, or social media company). As a result, we and these 3rd parties may collect and use information about your online visits to our Web sites and other websites or engagement with our digital communications.   

How can you object or refuse cookies?

Subject to the law of your country, in particular in the European Union, or state we will either inform you, ask your prior permission (opt-in) before placing tracking technologies on your device, or provide you with a right to object (opt-out) for the purposes that we describe in this section. Your web browser, e-mail software (such as Microsoft Outlook, or Google Gmail) and other clients that you use can be set to manage cookies and similar trackers and even reject them by default. Do bear in mind that if you set your browser to automatically reject cookies, your user experience when visiting websites will not be the same: your preferences may not be remembered, some functionality may be lost and you may not be able to access certain areas or features of the sites. 

Opt-Out Preference and Do-Not-Track Signals

We recognize the Global Privacy Control signal [if we have reason to believe that you are accessing our Web sites from California or Colorado].  We do not recognize the “do not track” signal that was developed in the early 2000s but not widely adopted. 

Interest-Based Advertising (IBA)

We may use 3rd party advertising companies to tailor online and mobile advertisements to you based on predictions about your interests. Your interests could come from several sources including your browsing activity, such as visits to our web sites from your browser and device or your response to online advertisements. These 3rd parties collect and store data about your interests based on your online and mobile activity using different technologies, such as placing or recognizing cookies on your browser, recognizing device identifiers, or using pixel tags. These 3rd parties may also use these types of technologies to recognize you across the devices you use.  

For interest-based ads, to opt-out, you may click on the "AdChoices" icon within the advertisement or Web site which will take you to a page where you can learn more about interest-based advertising and manage or opt out of the online targeting technology from the 3rd parties that we work with. Ad Choices Opt-outs are browser and device-specific; therefore, you should repeat your selections across each device and browser on you wish to be opted out. If you opt-out, you may still see advertising from Bristol Myers Squibb online or in mobile applications, but the 3rd parties we work with will not serve our ads based on predictions about your interests.  Also, if you delete or remove cookies or apps, your opt-out selections will not be stored.  You should review your opt-out preferences periodically, or update your choices to include new participating companies. In some cases, the 3rd parties we work with may still collect data about your browsing activity and mobile application activity for other purposes, but will not use this information to select our ads that you see. To learn more about interest-based advertising and how to opt out in desktop and mobile, please visit http://optout.aboutads.info/#/ and http://optout.networkadvertising.org/#/.  To opt out of interest-based ads on mobile, you can download the AppChoices app at www.aboutads.info/appchoices. Some parties we work with, such as social media platforms or other 3rd party technology platforms, have their own opt-out procedure. You should review the privacy policies of those properties to learn more about how you can opt-out of interest-based ads on those sites. 

Retargeting

The data captured through the tracking technologies used by our Web sites may be shared with our 3rd party advertising technology partners in order to provide you with targeted advertising that may appear on other websites you visit on the internet. These partners use technology to match cookies on your computer with cookies placed on your computer by other websites you may visit or have visited.  These partners may also use cookies and other technologies (e.g. web beacons) to recognize you across the devices you use, such as a mobile phone or laptop. 

Below we have identified the main cookies and categories that BMS uses on our websites and platforms.

BMS may update this notice from time to time by posting any revisions on this website.  Where any material revisions are made, BMS may place a prominent notice on this website and when legally required to do so, will directly notify you.  You are bound by any such revisions and should therefore periodically visit this page to review the most current privacy statement.

We are committed to protecting the privacy of children. We do not intend to collect Personal Information from children under 18 years old. If a child has provided us with his or her information that enables us to identify him or her, the parent or guardian of that child may contact us at (877) 274-0626.

Bristol Myers Squibb has a policy which provides for the proper use and protection of Social Security numbers obtained in the course of doing business by Bristol Myers Squibb. Such policy protects the confidentiality of Social Security numbers, prohibits unlawful disclosure of Social Security numbers, and limits access to Social Security numbers. This policy applies to all methods of collection of Social Security numbers, including Social Security numbers obtained by oral, written and electronic means.

If you have questions about this Notice or want to obtain more information about our privacy practices, please read the privacy notice of your country of residence for local information and contact details, contact our Data Protection Officer or contact us by postal mail as described below.

We are Bristol-Myers Squibb Company (BMS), a company member of the Bristol Myers Squibb group. In addition to this Notice, our details (name, address, etc.) may have been given to you separately at the time of the collection of information about you, for example, in a form, a notice on an app or a website, or in an e-mail, containing a link to this Notice. Together with our worldwide affiliates and other entities that are part of the BMS group which have a relationship with you, we are the controllers of your Personal Information. We refer to these entities as “BMS”, “we”, “us” or “our”.

You can access the main locations of our entities and facilities, and the markets where we distribute our products and the countries where we operate on www.bms.com.

This privacy notice (“Notice”) is a global Notice. It describes how Bristol Myers Squibb may Use information about you (“Personal Data” or “Personal Information”) as a healthcare professionals, medical professional, personnel and staff of healthcare institutions (such as statisticians, pharmacists, representatives of hospitals, clinicals, universities), government authorities, non-profit organisations, key opinion leaders or influencers, with whom we interact (altogether “HCPs”, “you”, “your”). This Notice applies when you interact with our company, in connection with your use of BMS websites, mobile applications, devices and platforms, when we communicate with you and in the context of our business activities. It also informs you about your privacy rights and the measures and processes we put in place to protect your data.  We use the term “Processing” or “Use” when we refer to the access, collection, recording, organisation, structuring, retrieval, disclosure, storage, transfer, deletion or otherwise use of your Personal Information. 

Compliance with applicable laws

When Using your Personal Information in the context of our activities, we will do so in compliance with relevant data privacy and data protection laws, which includes regulatory and national law requirements that may apply to such Use and, where applicable, giving you the specific rights that apply in the country where you reside (altogether “Applicable Data Protection Law”).

We may collect your Personal Information online when you use BMS or third-party operated websites and other online resources, including mobile applications, other digital means or platforms. This may also happen through collaborations that we have in place with third parties or companies that host websites for us or with whom we have partnerships for our products, services, or activities. Below, we give you additional information about how we use your information online. 

You may interact with BMS or our partners’ websites and platforms that relate to BMS products and services, job application, patient recruitment, disease awareness, scientific research, alliance websites, or applications used in the context of patient support or management programs.

We enter into arrangements for those collaborations to require an appropriate protection of your Personal Information. Some area of our websites and platforms may require you to submit information in order for BMS to respond to your request, permit you to access specific areas or participate in a particular activity. When visiting our websites, please also read our Legal Notice and if you are visiting our website for safety reasons, our page on Pharmacovigilance Notice.

We have identified examples where we Use your Personal Information online in the table below.

Links to other third-party websites

As a convenience to users, our websites contain links to other third-party websites that may offer additional information, such as educational or professional materials, services and contacts. This Notice does not apply to your use of those other websites. Before using the linked websites, please review their privacy notices to understand how they use and protect your Personal Information.

We interact with you as an HCP and Use information about you during our activities, such as to conduct clinical trials, for collaborations or commercial activities, for scientific projects, to understand the market or improve our medicines and products. When doing so we may Process various categories of Personal Information depending on your interactions with BMS or third parties with whom we collaborate, or external sources from where we obtain your Personal Data. We have outlined below the main categories of Personal Information and, where applicable categories of sensitive Personal Information that we may collect about you.

In most cases, BMS will collect Personal Information directly from you (such as when we collaborate with you) although sometimes we will obtain information about you indirectly from public or third-party information sources, databases or from use of web-based, devices or other technologies which automatically generate such information. We have outlined below the main ways BMS collects and Processes Personal Data when interacting directly or indirectly with you.

We may collect information from you directly:

Such as when:

• we conduct clinical trials, studies, research projects;
• we enable early access programs to patients or when you request us to provide patients with a BMS product at an early stage, or for compassionate use;
• we provide innovative products or devices to patients, such as cell therapies or personalized medicines;
• you use or visit about offices and facilities;
• you connect to or use our websites, applications, devices or other digital platforms in the context of clinical or commercial activities;
• you contact us through our different means of communication (email, call centers, medical information), such as to obtain information about BMS products, diseases or treatments;
• you notify, or report medical information to, BMS that may relate to adverse events or incidents, in the context of pharmacovigilance or risk management programs via other similar channels (via pharmacovigilance or risk management touch points), which may include incidents or other post-market surveillance obligation; 
• we exchange or when you request, information before entering into a contract with you, and thereafter during the term of such arrangement;
• we conduct due diligence, assessments, or when we evaluate your institutions’ eligibility to conduct a clinical study and thereafter if we select your institution;
• you interact with our BMS representatives in the course of our activities and interactions with you;
• you subscribe to our newsletters or want to remain informed about our activities or collaboration opportunities or where the law requires it, you agree to receive promotional materials; or
• we conduct in-person or remote visits or exchange information with you about our products and activities.

We may collect Information about you indirectly:

• when obtaining it from, or when you make your Personal Information available on, the website of your institution or your office, the Internet, social media, and other digital platforms;
• when we access public or private registries, or publication databases, journals, societies, editorial board websites, national registries, professional directories and third-party HCP databases; 
• when conducting pharmacovigilance, incident management, risk management, monitoring activities, or, investigation, or litigation purposes; 
• when we need to verify or obtain verification from third parties about your professional status, medical licence, such as by accessing publicly accessible information, national registries or third-party databases) or your identity for compliance, security or ID verification purposes; 
• when you make public posts on social media platforms that we follow (for example, so that we can understand public opinions).

We may also collect information about you automatically, such as for security and systems monitoring (e.g. through video (CCTV) recording) and building access control logs when you visit our offices or in other contexts made apparent to you at the time.

Where permitted and feasible, and to protect your right to privacy, BMS will take reasonable steps to remove, de-identify or anonymize information that may directly or indirectly identify you and restrict to the minimum the amount of Personal Information that BMS Uses, submits or transfers to third parties, courts, or governmental bodies.

This is a global Notice. BMS Processes your information in the context of our regular activities, and in accordance with the purposes as set out in this Notice, a separate notice, or when Applicable Data Protection Laws either permit or require us to do so. These purposes may vary depending on where you live and where BMS operates. Where the laws of a country restrict or prohibit certain activities described in this Notice, we will comply with such requirements. This may include refraining or not Using your Information for those purposes restricted or prohibited in that country. Below, we list some of the main, but not all, of our purposes for which we may Use Personal Information about you.

In this section, we describe our legal justifications (commonly referred to as “legal basis”) for the Use of your Personal Information related to each of our main Processing activities. We will use the legal basis that is most appropriate for the purpose and circumstances related to such Processing. Below, we have explained which legal bases we may choose or have to use when Using your Personal Information.  

There may be times where we must use your consent to Process your Personal Information. We may also decide to ask your permission to Process your Personal Data, such as in the context of voluntary initiatives or activities. 

In the following table, you can read more details about what applicable legal basis or combination of legal bases we may use when Processing your Personal Information.

As a multinational company operating worldwide, your Personal Information may be shared with, or accessed by, parties located outside your country of residence. If you are located outside of the United States, BMS may share your Personal Information with parties located in countries that provide less protection than in your country, which includes the United States. We may also Process and share your Personal Information with some of our affiliates and other members of the BMS group including selected and approved third parties (vendors and business partners) that help us operate worldwide. When doing so, we implement appropriate measures to prevent unauthorized access or Use of your Personal Information.

Below you can find more information about how BMS shares your Personal Information within its group of entities and with third parties.

Sharing your Personal Information within the BMS group

Often, we share your Personal Information within the BMS group of companies (“BMS Group”). This may include the Bristol-Myers Squibb Company headquarters in the United States and all of its current and future subsidiaries, branch offices, affiliates, entities and other companies that are part of, owned or controlled by, the BMS Group. When exchanging information internally, we rely on appropriate arrangements and mechanisms to cover any transfer of your Personal Information within our corporate structure, such as binding corporate rules (BCRs), contractual arrangements approved by authorities or based on consent.

Sharing your Personal Information with third parties

To conduct our business, we share with, or disclose Personal Information to, third parties, such as:

• Third-party service providers for the purpose of outsourcing specific business activities to request external support and resources. This may include companies that provide information technology services, clinical trials and studies support, marketing or market research services, events, meeting and planning services, or services related to talent acquisition or consultancy;
• business partners such as external scientists and healthcare professionals to review and assist us with healthcare compliance activities and institutions and other organizations with whom we collaborate to support our clinical or commercial activities (such as for clinical studies, patient support programs, and so on);
• Regulatory and health authorities including governmental bodies (such as the FDA, EMA, NHS), data protection authorities, tax authorities, or courts in case of disputes, when permitted or required by Applicable Data Protection Law; and
• third parties to whom BMS is legally obligated to provide such information, such as other parties in litigation or legal disputes, guardians, conservators, or individuals with powers of attorney. 

When engaging with third parties, we enter into agreements with them for the Processing of Personal Data so that such Processing is carried out in accordance with our instructions, in a confidential, secure, and transparent manner in order to protect your privacy rights. When it is not possible to enter into an agreement with a third party, such as when engaging, reporting or interacting with regulatory or health authorities or courts, and when legally possible, we will use our best efforts to implement appropriate security measures and controls (such as pseudonymisation) to protect your Personal Information.

Data sharing in connection with a transfer of control

Circumstances may arise where we decide to reorganize or divest part or all of our business or a line of our business (or any portion of our assets), including our information databases and websites, through a sale, divestiture, merger, acquisition, in the event of a bankruptcy, or other means of transfer. In any such circumstance, your Personal Information may be shared with, sold, transferred, rented, licensed, or otherwise provided or made available by us or on our behalf to actual or potential parties to, and in connection with, the contemplated transaction (without your consent or any further notice to you). In such circumstances, we will seek written assurances that Personal Information about you submitted through this Website will be protected appropriately.

If you are in the European Economic Area (“EEA”), Switzerland and the United Kingdom

Whenever we transfer your Personal Information within the EEA, Switzerland or to countries that are deemed “adequate”, such countries are deemed to offer the same level of protection as given by the law of your country. When accessing your Personal Data from, or transferring it, outside of the EEA or Switzerland to countries that may not provide the same level of protection as your own country, we will use appropriate safeguards to protect your right to privacy. For example, such safeguards may consist of using Standard Contractual Clauses (to exchange information with third parties outside of the EEA, Switzerland and the United Kingdom), Binding Corporate Rules (for data transfer within the BMS group of companies) as approved by the European Commission or the competent authority, data transfer agreements or your consent.

If you are outside the EEA, Switzerland and the United Kingdom

Where possible, we will allow access to or the transfer of your Personal Information outside your country of residence: to countries that provide a reasonable high level of data protection; using the most appropriate data transfer mechanisms available to BMS; or where required by Applicable Data Protection Laws, after we get your prior permission, for the collection, disclosure to third parties and the transfer of your Personal Information to a country which does not provide an adequate protection equivalent to the laws of your country of residence.

BMS may combine your Personal Data with other information we may already have about you or obtained through public means such as scientific and medical publications, national registries, software, databases, or the Internet. We may also carry out internal assessments, evaluations, categorization, classification, raking or ratings of your activities, and/or your institution or site’s performance, including analytics (where applicable). Below, we provide you with additional information about how we categorize or classify your Personal Data.

We may use algorithms or third-party data sources to tier HCPs according to your research activity (including publications) and skills (such as years of experience and qualifications). Where permitted by Applicable Data Protection Law, applicable rates for speaking and event participation are set according to the tiering of HCPs. 

Unless permitted by law, BMS does not make decisions based solely on automated Processing (including profiling) of individual data unless we inform you otherwise prior to the Processing. This means that when we use certain technologies, software, or algorithms, which may allow us to create profiles, tiering or further understand trends and statistics, or use other advanced technologies or automated processing, someone will be involved to validate decisions resulting from such use. 

As the use of such technologies evolves, we may use algorithms without a person involved in the decision. In this case, if this activity requires us to Process your Personal Information that is not anonymized, we will comply with any applicable legal requirements, such as to draw this to your attention and provide you with information about the logic involved in the decision, as well as the significance and the envisaged consequences for you of such Use of your Personal Information. Depending on your country of residence, you will have the right to ask that such decision is taken by an individual.

You have a number of rights related to the Personal Data that we Process about you (this will depend on the jurisdiction where you reside and the legal basis that we use). Most often, exercising your right is free of charge. We may also have to clarify your request and explain if we can comply with it or if this is restricted in your situation. You can always contact BMS at dpo@bms.com or via this form to find out more about your rights and how best to exercise them. 

Below we have listed individual rights that may apply depending on your jurisdiction. 

You may have the right to:

• receive a copy of your Personal Data we hold about you;
• correct your Personal Data we hold about you;
• where applicable, receive a machine-readable copy of your Personal Data (portability);
• ask us to delete your Personal Data or restrict how it is used;
• where applicable, object to Processing of your Personal Data for certain purposes, such as when we use it for marketing purposes (opt-out); and
• where you have provided us with your consent to Use your Personal Data, you can withdraw your consent at any time without affecting BMS’ Use of such information before your withdrawal of consent.

Exceptions to your rights

There may be exceptions to your privacy rights described in this Notice. This depends on the country where you reside, why we are Processing your Personal Data and if your request may impair the rights of others. If we cannot comply with your request to exercise your privacy rights, for example when we keep your information for regulatory purposes or for the investigation, prosecution, or defence of a legal claim, we will explain this to you when you contact us.

How to contact us

If you have any questions about how we Use your Personal Information, please contact our Data Protection Office at dpo@bms.com. 

Note: We may need to request specific information from you to help us confirm your identity. If your request is complex or if you have made a large number of requests, it may take us longer to respond to you, but we will keep you informed of any delays. You will not have to pay a fee to obtain a copy of your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.

Lodging a complaint with a competent supervisory authority

In some countries, you may have the right to lodge a complaint to the relevant data protection or competent authority if you believe that we Process your Personal Information unlawfully or are violating your rights. For example, in the European Union, you can access the list of competent data protection authorities, including the authority in your country of residence by clicking here.

We aim not to retain your Personal Information for longer than necessary for the specific business purposes for which it was collected. After that, unless we are required to continue to maintain the information by law, we may anonymize, restrict, block or delete it. 

In certain cases, BMS may retain your Personal Information for a longer period for the purpose that we have and, in a manner, or a format, that may require BMS to keep certain identifiers. In such case, we may archive it and apply appropriate measures which may consist of blocking, preventing, obfuscating, pseudonymizing, key-coding, or restricting any further access and Use of Personal Information about you. When retaining and storing information about you in our systems, we have put in place data retention schedules in accordance with our company policy and in compliance with Applicable Data Protection Laws. 

When assessing the appropriate retention period, we take into account the quantity, nature and sensitivity of Personal Data, the potential risk of harm in the event of unauthorised use or disclosure, the purposes of the Processing and whether or not these purposes can be achieved by other means, as well as applicable legal obligations.

We implement appropriate technical and organizational controls to protect your Personal Information that we hold to prevent unauthorized Processing, loss of data, disclosure, use, alteration, or destruction.  Where appropriate, we use encryption, pseudonymisation (such as key coding), de-identification and other technologies that can assist us in securing the information about you, including measures to restore access to your information. We also require our service providers to comply with reasonable and recognized data privacy and security requirements. 

We conduct tests and reviews of our technologies and processes, including a review of our business partners and vendors, so that our security controls remain effective. Also, we may further anonymize your Personal Information when it is no longer needed for the purpose for which BMS originally collected such Information.

This section applies to data subjects located in States which have implemented privacy laws (e.g. California). Depending on the State where you reside or from which you originate, you may have certain specific rights (e.g., access and deletion) that apply to you. These rights are not absolute and only apply in certain circumstances.  This means that we may be unable (e.g., due to legal requirements), or not obligated, to satisfy your request.  In some cases, we may need to collect additional Personal Information from you to verify your identity before we provide access or delete your information, such as government-issued identification.  BMS will not discriminate against you for exercising your rights but may not be able to provide you with services or programs that you have requested if we are not able to use your Personal Information.  To submit requests, please call 855-961-0474 or complete the online form at www.bms.com/dpo/us/request. 

Below, you will find more information about State privacy laws.

CALIFORNIA

Under the California Consumer Privacy Act of 2018 (CCPA), its further amendments and related legal acts (such as the California Privacy Rights Act of 2020), California residents may have specific rights regarding their Personal Information held by private companies. The information in this section applies solely to visitors, users, and others who reside in the State of California (“consumers,” “you”).

Information BMS Collects

Personal Data, or Personal Information, means any information about an identifiable individual. BMS may collect Personal Information directly from you (in person, through online forms, and other interactions with BMS employees, websites, and systems), or from other third parties.

How BMS Uses Personal Information

The purposes for which BMS Uses Personal Information depends on the relationship or interaction with a specific California resident, and we only Process your information for purposes permitted by Applicable Data Protection Laws.  BMS may Use Personal Information to operate, manage, and maintain our business, to provide products and services, and to accomplish business purposes and objectives.

For more information about the purposes for which we Use your Personal Information please refer to section 7 of this Notice.

Depending on the country where you reside, you may manage your preferences on cookies and similar tracking technologies through the use of consent management tools that are available on our websites. This section applies to cookies and similar tracking technologies and we explain what our use of cookies and similar tracking technologies means to you and how to disable tracking (such as using opt-in or opt-out preferences). When we collect information that may enable us to identify you, the other sections of this Notice will apply.

What are cookies?

A cookie is a small piece of data that a website asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Such cookies when set by us are called first-party cookies. We may also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting (for example, those used by social media, instant messaging, CRM or marketing platforms, or advertising companies). For more information about cookies, types of cookies and how to manage cookies, including how to block them and delete them, please visit https://www.allaboutcookies.org. 

Below, we list the main categories of cookies and similar tracking technologies that we may use when you connect to our websites, use our web-based platforms, applications, devices, or when you interact with us electronically or when you receive electronic communications from us (“Online Use”). You can learn more about the purposes for which BMS may use such technologies for your Online Use.

What categories of cookies may BMS use?

We generally use certain types of cookies during your session on our website (“session cookies”). To improve your experience or remember your preferences or choices, we may use cookies that will remain on your device unless you remove them (“persistent cookies”). When using cookies on our websites and other digital services, such technology may include:

Why do we use cookies on our website?

In addition to the explanation provided in this Notice and the section above, we use cookies or similar tracking technologies in various instances, such as for the following purposes:

• Making your experience more efficient, faster and easier: by remembering your preferences, like preferred language, display and other settings, maintaining your session, and for authentication purposes. This helps us to provide you with a better user experience. These cookies are also referred to as Session-Id cookies, authentication cookies, and User Interface customization cookies.
• Gain useful knowledge about how the website is used: by collecting information about the number of visitors and other uses. This helps us improve our websites. These cookies are also referred to as analytics cookies. For this purpose, we use services such as Google Analytics which means that Google and similar suppliers will also have access to this information (including your IP address and any other equipment identifiers such as the IMEI number and the MAC address). 
• Provide easy access to our websites. This helps us to direct you, share with you our content within websites such as Facebook, Twitter, LinkedIn, YouTube or Pinterest or allow you to share content that is of your interest. To the extent we use such technology, these ‘social media plug-ins’ may store cookies and similar technology on your computer or other device. This means that the social media websites may access this information (including your IP address), may identify that you interacted with the BMS website. 
• Improve our marketing communications to you. Certain cookies, such as web beacons or tracking pixels, may be used by third party systems, such as customer relationship management systems or other service providers who help us manage e-mail campaigns. Those trackers enable us to better understand the success of our communications and the relevance of the content that we share with you. This may allow us to reduce the number of e-mails that we send you and provide you with content, scientific information, or initiatives that are more tailored to your interests.
• Collect and analyse advertising campaigns. We use, and allow certain 3rd parties to use, other technologies, such as web beacons, on our Websites and in our digital communications to tailor advertising, or to measure the effectiveness of advertising campaigns. A web beacon is a clear GIF (Graphics Interchange Format) that a company can place on a website or in digital communications to allow it or a third party (such as an Internet advertising, audience measurement, or social media company). As a result, we and these 3rd parties may collect and use information about your online visits to our Websites or engagement with our digital communications.   

How can you object or refuse cookies?

Subject to the law of your country, in particular in the European Union, we will either inform you, ask your prior permission (opt-in) before placing tracking technologies on your device, or provide you with a right to object (opt-out) for the purposes that we describe in this section. Your web browser, e-mail software (such as Microsoft outlook, or Google Gmail) and other clients that you use can be set to manage cookies and similar trackers and even reject them by default. Do bear in mind that if you set your browser to automatically reject cookies, your user experience when visiting websites will not be the same: your preferences may not be remembered, some functionality may be lost and you may not be able to access certain areas or features of the websites. 

Do-Not-Track Signals

When you visit our Websites, the collection of traffic data occurs even when do-not-track signals are enabled on your internet browser. Under certain circumstances, we may be able to identify you when you visit our websites. For example, if you register on our website, we may be able to link your Personal Information to previous visits on our websites depending on whether our website cookies from earlier visits are still stored on your computer. For more information about do not track signals, visit https://www.allaboutdnt.com.

Interest-Based Advertising (IBA)

We may use 3rd party advertising companies to tailor online and mobile advertisements to you based on predictions about your interests. Your interests could come from several sources including your browsing activity, such as visits to our websites from your browser and device or your response to online advertisements. These 3rd parties collect and store data about your interests based on your online and mobile activity using different technologies, such as placing or recognizing cookies on your browser, recognizing device identifiers, or using pixel tags. These 3rd parties may also use these types of technologies to recognize you across the devices you use.  

For interest-based ads, to opt-out, you may click on the "AdChoices" icon within the advertisement or Website which will take you to a page where you can learn more about interest-based advertising and manage or opt out of the online targeting technology from the 3rd parties that we work with. Ad Choices Opt-outs are browser and device-specific; therefore, you should repeat your selections across each device and browser on you wish to be opted out. If you opt-out, you may still see advertising from Bristol Myers Squibb online or in mobile applications, but the 3rd parties we work with will not serve our ads based on predictions about your interests.  Also, if you delete or remove cookies or apps, your opt-out selections will not be stored.  You should review your opt-out preferences periodically, or update your choices to include new participating companies. In some cases, the 3rd parties we work with may still collect data about your browsing activity and mobile application activity for other purposes but will not use this information to select our ads that you see. 

More information: To learn more about interest-based advertising and how to opt out in desktop and mobile, please visit https://optout.aboutads.info/#/ and https://optout.networkadvertising.org/#/.  To opt out of interest-based ads on mobile, you can download the AppChoices app at www.aboutads.info/appchoices. Some parties we work with, such as social media platforms or other 3rd party technology platforms, have their own opt-out procedure. You should review the privacy policies of those properties to learn more about how you can opt-out of interest-based ads on those websites. 

Retargeting

The data captured through the tracking technologies used by our Websites may be shared with our 3rd party advertising technology partners in order to provide you with targeted advertising that may appear on other websites you visit on the internet. These partners use technology to match cookies on your computer with cookies placed on your computer by other websites you may visit or have visited.  These partners may also use cookies and other technologies (e.g. web beacons) to recognize you across the devices you use, such as a mobile phone or laptop. 

Below we have identified the main cookies and categories that BMS uses on our websites and platforms. 

For more details on the cookies that we use, you can read our cookie table below or, where applicable, on the website that you use by accessing the relevant cookie notice.

BMS may update this notice from time to time by posting any revisions on this website.  Where any material revisions are made, BMS may place a prominent notice on this website and when legally required to do so, will directly notify you.  You are bound by any such revisions and should therefore periodically visit this page to review the most current privacy statement.

If you have questions about this Notice, or want to obtain more information about our privacy practices, please contact our Data Protection Officer at dpo@bms.com, via this form or contact us by postal mail at: