Arabco Privacy Policy

Arabco ("we," "our," or "us"), headquartered in Palestine, believes that privacy is a fundamental right. Personal data is at the core of scientific and medical innovation, and your personal health data plays a critical role in helping monitor and improve patient safety.

We understand the extreme sensitivity of information about your health. When you entrust us with your personal data through our website data collection forms, you can expect that we will act ethically, responsibly, and in strict compliance with the General Data Protection Regulation (GDPR) and applicable local data protection laws.

1. Data Controller & Privacy Principles

For the purpose of the GDPR and relevant data protection legislations, the data controller is:

Company Name: Arabco

Headquarters Address: Katamon Building, 30 Al-Bukhari Street, Industrial Zone, Ramallah, Palestine

Dedicated Contact Email: drug.safety@arabco.ps

In aligning our practices with global pharmaceutical benchmarks, Arabco operates under four core privacy principles:

Respect: We respect your privacy rights regarding the protection of your personal health data.

Transparency: We maintain open disclosure about why we collect safety data and how it is shared.

Appropriate Use: We only collect the minimal data necessary to track, analyze, and ensure the safety of our medicines.

Safeguards: We implement rigorous technical and organizational controls designed to prevent unauthorized access or disclosure of health data.

2. Personal and Health Data We Collect via Forms

When you submit a drug safety report, adverse event, or product quality complaint on our website, we collect personal and special category data to validate the report under international health mandates. This includes:

Reporter Information: Name, professional credentials (if you are a Healthcare Professional/HCP), contact details (email, phone number, address), and your relationship to the patient (e.g., self, caregiver, physician) to facilitate essential regulatory follow-ups.

Patient Demographics: Initials, age, age group, sex, or date of birth. Note: To protect privacy, we strictly request that you do not submit full patient names.

Special Category Data (Health Data): Details of the suspected adverse event, symptoms, date of onset, severity, medical history, concurrent diseases, laboratory test results, concomitant medications, and specific details regarding the Arabco drug or treatment administered.

3. How We Use Health Data & Lawful Basis for Processing

Unlike standard web data collections, processing drug safety data is a global legal mandate. Arabco does not rely on marketing "consent" to process this information. Under the GDPR, we process this data based on the following specific legal grounds:

GDPR Article 6(1)(c) - Legal Obligation: Processing is mandatory for Arabco to comply with legal and regulatory monitoring frameworks governing pharmaceutical manufacturers.

GDPR Article 9(2)(i) - Public Interest in Public Health: Processing special categories of health data is strictly necessary for reasons of public interest in the area of public health, ensuring high standards of quality and safety of medicinal products.

Purpose of Processing: We use this data to analyze adverse events, track the risk-benefit profiles of our therapies, detect safety trends, prevent fraud, and report validated safety incidents to regulatory authorities.

4. Mandatory Data Sharing and Recipients

To fulfill our public health commitments and global safety tracking, Arabco may share pseudonymized safety information with:

Public and Government Authorities: National and international healthcare regulatory bodies (such as the European Medicines Agency (EMA), local ministries of health, and other global equivalents).

Affiliates and Partners: Co-marketing partners or business affiliates who share joint pharmacovigilance tracking obligations for Arabco products.

Specialized Third-Party Processors: Secure vendors who provide data analysis, database hosting, or pharmacovigilance services strictly on Arabco's behalf under rigid Data Processing Agreements (DPAs).

In all external sharing scenarios, direct patient identifiers are systematically stripped or replaced with tracking codes to preserve confidentiality.

5. International Data Transfers

Arabco operates globally. The data collected via our website forms may be transferred to, stored in, and processed in countries outside the European Economic Area (EEA)—including our servers and partners located in Palestine and other international jurisdictions.

When transferring data across international borders, Arabco implements strong legal protections, including the European Commission’s Standard Contractual Clauses (SCCs), ensuring that your data receives an equivalent tier of protection to that mandated within the European Union.

6. Data Retention Period

To satisfy global safety monitoring laws and track the lifetime safety profile of medicinal treatments, drug safety and pharmacovigilance data is retained for an extended duration.

7. Security and Safeguards

Special category health data demands maximum security. Arabco utilizes advanced technical and organizational measures to protect your data:

All form entries submitted on our website are protected using modern HTTPS/TLS encryption during transit.

Access to pharmacovigilance databases is strictly partitioned and restricted via multi-factor authentication to authorized safety personnel bound by professional confidentiality requirements.

Regular security audits and vulnerability assessments are performed to ensure network resilience against unauthorized breaches.

8. Your GDPR Privacy Rights & Limitations

Under the GDPR, individuals have specific data rights; however, due to the overriding legal requirements of public health tracking (GDPR Article 17(3)), certain restrictions apply:

Right of Access and Rectification: You have the right to request a copy of your data or update inaccurate details. However, to maintain scientific integrity, historical medical details from a safety event cannot be erased; updates will instead be appended as supplements to the file.

No Right to Erasure ("Right to be Forgotten"): You cannot request the deletion of an adverse event or drug safety report once submitted, as Arabco is legally bound to retain it for public health safety evaluations.

No Right to Object/Restrict: Because data processing is a statutory legal obligation, requests to object to processing or restrict the reporting of valid drug safety data must be declined.

To submit an access or correction request, please contact our Drug Safety unit at drug.safety@arabco.ps