PharmaTalks Privacy Policy

Table of Content

1. Introduction

2. Definitions

3. Scope

4. Information we collect

5. Use of information collected

6. Recording, images and publication of episodes

7. Personal Data sharing and disclosure

8. Information we do not share

9. Data retention and security

10. Notice under California Consumer Privacy Act

11. Privacy notice under GDPR

12. Sensitive personal information

13. Children

14. Communications preferences

15. Changes to this Privacy Policy

16. Contacting us

1. Introduction

Viseven Europe OÜ, registry code 12627365, registered at Lõõtsa Str. 2a, Lasnamäe district, Tallinn, Harju County, 11415, Estonia, and its Affiliates (“Viseven Europe”, “Viseven”, or the “Company”, “We”, “Us”, “Our”) are committed to the individual’s right to privacy. This Privacy Policy describes our information practices in relation to the PharmaTalks podcast and the PharmaTalks website: what information we collect about you and why, what we do with that information, how we share it, and how we handle the recordings and other content created with your participation. It also explains the choices available to you and how you can access and update your information.

For the purposes of this Policy, Viseven Europe OÜ is a controller of your Personal Data. Our Affiliates, service providers and other business partners may process your Personal Data as processors on our behalf and pursuant to our instructions, in order to produce, publish and promote the Podcast and to operate the Website.

This Privacy Policy is effective as of the date first set forth above. We may update it from time to time. If we make changes, we will post the updated Privacy Policy on this page and specify the date of the last revision. We will notify you of any modifications that might materially affect the way we use or disclose your Personal Data prior to the change becoming effective, by means of a message on the Website or by email, unless another type of notice is required by applicable law. Your continued use of the Website after we have posted changes is deemed to be your acceptance of those changes.

2. Definitions

“Affiliates” mean entities in the Viseven group, namely:

VISEVEN EUROPE LLC (Ukraine), identification code 38428784, registered at Peremohy Str. 99, 10003, Zhytomyr, Ukraine

VISEVEN USA LLC (USA), company number 0450363936, registered at 1170 Route 22, Bridgewater, New Jersey 08807

VISEVEN INDIA PRIVATE LIMITED (India), PAN No AAHCV5695A, GSTIN 07AAHCV5695A1Z5, registered at 4/65 2nd Floor, Phase 2 Ashok Vihar, 110052, New Delhi

“Authorized Personnel” means (a) Viseven’s specialists who have a need to know or otherwise access Personal Data for the purposes stated in this Privacy Policy on behalf of Viseven; and (b) Viseven’s contractors, agents and auditors who have a need to know or otherwise access Personal Data under this Privacy Policy, and who are bound in writing by confidentiality and other obligations sufficient to protect Personal Data in accordance with this Privacy Policy.

“Episode Materials” means the audio and video recording of a Podcast episode and everything derived from it, including edited episodes, clips, still images, transcripts, show notes and episode pages.

“European Data Protection Law” or “GDPR” means Regulation (EU) 2016/679 and applicable national legislation implementing it and, where applicable, the UK Data Protection Act 2018 and the UK GDPR.

“Guest” means an individual who takes part in a Podcast episode. “Guest Applicant” means an individual who applies or is approached to take part.

“Personal Data” is information that may be used to readily identify or contact you as an individual person, such as name, email address, job title, employer, image and voice, or other information relating to you as an identified or identifiable natural person. Personal Data does not include information that has been anonymized such that it does not allow for the ready identification of specific individuals.

“Podcast” means the PharmaTalks podcast produced by Viseven.

“Subscriber” means an individual who has subscribed to receive Podcast episodes and related updates by email.

“Usage Data” is aggregated data about a group or category of users, features or services that does not contain Personal Data.

“Website” means [https://pharma-talks.com/] and any related sub-domains and pages operated by us for the Podcast.

“You” and “your” refer to the individual to whom Personal Data covered by this Privacy Policy relates.

The terms “controller”, “processor” and consequential verbs used in this Privacy Policy have the meaning stated in the GDPR.

3. Scope

This Privacy Policy applies to the Personal Data we obtain through your use of the Website, through your participation in the Podcast, and when you otherwise interact with us in connection with the Podcast.

It does not cover:

Viseven’s products, services and corporate website, which are subject to the Viseven Privacy Policy;

recruitment, which is subject to the Viseven Candidate Privacy Notice;

third-party websites and services. Where the Website links to a third-party website, or embeds a social media feature, that third party processes data about its own users as a separate controller, under its own privacy policy. We are not responsible for the information practices or content of such third parties, and we encourage you to review their policies.

4. Information we collect

4.1. Information provided directly by you

4.1.1. Guest Applicants and Guests. When you apply, or are invited, to appear on the Podcast, we collect:

first name, last name, job title, company name, business email address, country;

the topic you propose and any other information you choose to submit in the application form or in correspondence with us;

scheduling and production information agreed with you;

your professional biography, headshot and any other images or materials you provide for the episode page;

the audio and video recording of your episode and still images captured from it.

4.1.2. Subscribers. When you subscribe to the Podcast, we collect your first name, last name, email address and, optionally, your company name.

4.1.3. Enquirers. If you contact us in connection with the Podcast, including in relation to a media partnership, we collect your name, email address, company and the content of your message.

If you provide information about another individual (for example, when proposing a colleague as a Guest), you must have the authority to do so and to provide their details to us for the purposes described in this Policy.

4.2. Information received from third parties

We may obtain information about you from:

our Affiliates, where necessary to produce or promote the Podcast;

social networks, where you interact with our accounts or with our Podcast content, or where you contact us through them, in accordance with the authorization procedures of the relevant service;

publicly available professional sources, such as your employer’s website or your public professional profile, which we use to verify and complete the information we hold about a Guest or Guest Applicant, and to prepare for a recording;

event organisers and media partners, where you have been introduced to us as a potential Guest and there is a lawful basis to do so.

4.3. Information collected automatically

Web logs. As with most websites, we gather and store in log files certain information when you interact with the Website, including IP address, browser type, internet service provider, referring and exit URLs, operating system, date and time stamps, locale and language preferences, and device identifiers.

Email statistics. Where you receive our emails, we collect delivery and engagement data such as deliveries, bounces, opens, clicks and unsubscribes.

Cookies. A cookie is a small text file stored on your device. We use only cookies that are strictly necessary to deliver the Website and the episode player. We do not use analytics, advertising or other tracking cookies, and we do not embed third-party tracking pixels in the Website. If this changes, we will ask for your consent before setting any cookie that is not strictly necessary.

You can change your browser settings to delete cookies already set and to refuse new ones; some features of the Website may then not work as intended.

5. Use of information collected

5.1. Based on the performance of a contract with you, or to take steps at your request prior to entering into a contract, we use your Personal Data to:

review your application to appear on the Podcast, assess topic fit, and contact you about it;

agree the arrangements for your participation and obtain your consent to the recording and to the publication of the episode;

organise and carry out the recording, including scheduling, briefing and technical preparation;

respond to your enquiries and, where relevant, discuss and administer a media partnership.

5.2. To the extent permitted by applicable law, and for certain legitimate interests, we use your Personal Data to:

operate, secure and administer the Website and provide you with the content you request;

promote the Podcast itself, where doing so does not involve the personal data of a Guest;

prepare for recordings, including researching the professional background of a Guest;

measure the performance of our email communications, in order to improve them;

invite you to events, webinars, roundtables and similar activities organised by us or our Affiliates, and to administer your participation in them;

send administrative information, such as changes to this Policy or to the Website;

investigate and prevent fraud, unauthorized access and other unlawful activity;

comply with legal obligations and legal process; respond to requests from public authorities; enforce our terms; protect our rights, property and safety and those of others; and establish, exercise or defend legal claims;

where you ask to be removed from our mailing lists, keep the minimum data necessary to identify you and prevent further unwanted contact.

Where we rely on a legitimate interest, we have assessed that interest against your interests, rights and freedoms. You may object to such processing as described in Section 11.2.

5.3. Based on your consent, we use your Personal Data to:

record your episode and produce, edit, publish and archive the Episode Materials on the Website;

use your name, job title, employer, professional biography, photograph, image and voice in the episode and in announcements of the episode on the Website, in our social media accounts, in our email communications, at events and with media partners;

send you new Podcast episodes, episode notes and related Podcast updates by email;

send you marketing communications from Viseven and its Affiliates that go beyond the Podcast, including commercial offers, product and service updates, event and webinar invitations, and surveys;

any other purpose for which we specifically ask for and obtain your consent.

Consent to receive the Podcast is separate from consent to receive Viseven’s wider marketing, and neither is a condition of applying to be a Guest, of taking part in the Podcast, or of subscribing. You may withdraw any consent at any time, as described in Section 14. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5.4. To comply with our legal obligations, we use your Personal Data to:

keep records of the consents you have given and withdrawn, and of the version of this Policy and of the form wording you were shown;

respond to requests from data subjects and supervisory authorities;

meet accounting, tax and other statutory record-keeping requirements.

6. Recording, images and publication of episodes

This Section applies in addition to Sections 4 and 5 if you take part in the Podcast as a Guest.

Recording. Episodes are recorded in audio and video. We edit the recording and publish it in whole or in part.

Publication. Episode Materials are published on the Website only. We do not distribute episodes through third-party podcast or video platforms.

Announcements. We announce and promote episodes in our social media accounts, in our email communications and at events. An announcement may include your name, job title, company, a photograph and a short quotation, together with a link to the episode on the Website.

Availability. Episode Materials remain publicly available on the Website for as long as we operate the Podcast, and are retained in our archive thereafter. Because the Website is public, we cannot recall material that has already been downloaded, re-shared, indexed or cached by third parties.

Review and takedown. Before publication you may ask us to remove specific passages from your episode, and we will accommodate reasonable requests. After publication, you may ask us to edit or take down an episode in which you appear; we will consider each request in good faith and, where we are able to act, will do so within a reasonable time. If you withdraw your consent, we will remove the affected material from the Website within a reasonable period and will stop using it in new announcements. We cannot recall material that has already been downloaded, re-shared, indexed or cached by third parties.

7. Personal Data sharing and disclosure

We will not share or disclose your Personal Data except as described in this Policy. We share it only with Authorized Personnel and the recipients set out below, as needed for the purposes specified in Section 5.

7.1. Affiliates

We may share your Personal Data with our Affiliates for administrative purposes and to help produce, publish and promote the Podcast, and to conduct sales and marketing activities on our behalf.

7.2. Service providers and subcontractors

We work with two third-party service providers: one for hosting the Website and one for CRM and email marketing. Recording, editing, transcription and the production of Episode Materials are carried out by us. These providers may access or process your Personal Data solely for the purpose of providing those services to us, as processors acting on our documented instructions and under a data processing agreement.

The table below states, for each provider, whose Personal Data it may access and which categories of data are involved.

Provider and country	Service	Whose data and which categories	Privacy statement and DPA
Hetzner Online GmbH, Germany	Hosting of the Website, storage of Episode Materials, delivery of the episode player	Website visitors — IP address, server log data. Guests — Episode Materials stored and served from the Website. Guest Applicants, Subscribers and Enquirers — form submissions in transit to the CRM	Privacy Policy · DPA
Pipedrive OÜ, Estonia	CRM and email marketing	Guest Applicants, Guests, Subscribers and Enquirers — name, email address, company, job title, country, message content, consent records, email delivery and engagement data	Privacy Notice · DPA

The table is kept up to date and reflects the providers engaged at the effective date of this Policy.

7.3. Social media

We maintain accounts on social networks, where we announce episodes and where you may interact with us. Those networks process data about their own users as separate controllers, under their own privacy policies. The Website does not embed social media tracking features.

7.4. Media partners

Where we agree a media partnership, we may share the name, job title, company and photograph of a Guest for the purposes of jointly announcing the relevant episode. Media partners act as separate controllers for their own promotional activities and under their own privacy policies.

7.5. Business transfers

We may share or transfer your Personal Data in connection with, or during negotiations of, any merger, sale of assets, financing or acquisition of all or part of our business. You will be notified by email or by a prominent notice on the Website of any change in ownership or in the uses of your Personal Data, as well as of any choices you may have.

7.6. Legal requirements and protection of our rights

We may disclose your Personal Data to a third party where we believe disclosure is reasonably necessary to comply with applicable law, regulation, legal process or a governmental request; to enforce our agreements and terms; to protect the security or integrity of our services; to protect us, our audience or the public from harm or unlawful activity; or to respond to an emergency.

7.7. Aggregated or anonymized data

We may share aggregated or anonymized information that does not directly identify you, including audience statistics for the Podcast.

We do not share Personal Data about you with third parties for their own marketing purposes without your permission. We do not sell your Personal Data.

9. Data retention and security

We retain your Personal Data for as long as reasonably necessary for the purposes set out in this Policy, and thereafter only where required to comply with a legal obligation or to establish, exercise or defend legal claims. After the applicable retention period has elapsed, your Personal Data will be anonymized or deleted.

Data	Retention
Applications that do not result in an episode	12 months from the last contact, unless you ask us to keep them longer for future consideration
Guest contact, correspondence and production data	For as long as the episode remains published, and [3] years thereafter
Records of the consents given by a Guest	3 years after the episode is withdrawn from publication
Episode Materials	For as long as we operate the Podcast, and thereafter in our archive
Subscriber data	Until you withdraw consent or unsubscribe; thereafter only a minimal suppression record
Consent and subscription records	3 years after the consent ends, or longer where needed to defend a claim
Enquiries and media partnership correspondence	24 months from the last contact
Website server logs	1 month

We follow generally accepted industry standards to protect Personal Data, both during transmission and once we receive it, including encryption in transit (SSL/HTTPS), access control on a need-to-know basis, confidentiality obligations for Authorized Personnel, and contractual data protection terms with our processors. No method of transmission over the internet or of electronic storage is entirely secure, and we cannot guarantee absolute security. If you have questions about security, contact us at [email protected].

10. Notice under California Consumer Privacy Act

Within the preceding twelve (12) months we have collected the following categories of Personal Information:

Category	Examples
A. Identifiers	Name, email address, online identifier, IP address, account name
B. Categories listed in Cal. Civ. Code § 1798.80(e)	Name, employer, job title, professional background
F. Internet or network activity	Information on your interaction with the Website and with our emails
G. Geolocation data	Approximate location inferred from IP address
H. Sensory data	Audio and visual information — the recording of your episode, still images and photographs, where you take part as a Guest
I. Professional or employment-related information	Current job title, employer and professional background

We obtain these categories from the following sources: directly from you, for example through the forms you complete and during a recording; indirectly from you, for example from your activity on the Website; and from the third parties described in Section 4.2.

We do not intentionally collect Category C (protected classification characteristics), Category E (biometric information), Category J (non-public education information) or Category K (inferences). We do not use audio or visual information collected through the Podcast for the purpose of uniquely identifying an individual, and it therefore does not constitute biometric information.

We may use or disclose the Personal Information we collect for the purposes described in Section 5.

California privacy rights. To the extent provided by law and subject to applicable exceptions, California residents have the right to know what Personal Information we have collected and how we have used and disclosed it; the right to request deletion of their Personal Information; and the right to be free from discrimination relating to the exercise of their privacy rights. These rights may be exercised by contacting us at [email protected].

To protect Personal Information from unauthorized access or deletion, we may ask you to provide information sufficient to verify your identity. If we cannot verify your identity, we will not provide or delete the Personal Information. A request may be submitted through an authorized agent, who must present signed written permission to act on your behalf.

Without limiting Section 7.5, for the purposes of the California Consumer Privacy Act we do not and will not sell your Personal Data.

This Section applies to individuals in the EEA, the UK and Switzerland.

11.1. Lawful basis for processing

Our legal bases for processing are: performance of a contract with you or steps taken at your request prior to entering into a contract (Art. 6(1)(b)); our legitimate interests (Art. 6(1)(f)); your consent (Art. 6(1)(a)); and compliance with our legal obligations (Art. 6(1)(c)). Section 5 states which basis applies to which purpose.

11.2. Your rights

As a data subject you have:

the right of access (Art. 15 GDPR) — to obtain confirmation of whether we process your Personal Data and, if so, a copy of it together with certain other details;

the right to rectification (Art. 16 GDPR) — to have inaccurate or incomplete data corrected or completed;

the right to erasure (Art. 17 GDPR) — to have your Personal Data erased in certain circumstances, such as where we no longer need it or you withdraw your consent;

the right to restriction of processing (Art. 18 GDPR) — to have processing restricted in certain circumstances, such as where you contest the accuracy of the data or have objected to the processing;

the right to data portability (Art. 20 GDPR) — to receive, in a structured, commonly used and machine-readable format, the Personal Data you provided to us on the basis of consent or a contract and which we process by automated means;

the right to object (Art. 21 GDPR) — to object at any time to processing based on our legitimate interests, in which case we will stop unless we demonstrate compelling legitimate grounds that override your interests, or the data is needed to establish, exercise or defend legal claims; and to object at any time, without any qualification, to processing for direct marketing;

the right to withdraw consent (Art. 7(3) GDPR) — at any time, without affecting the lawfulness of processing carried out before withdrawal;

the right to lodge a complaint with a supervisory authority, in particular the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, https://www.aki.ee/) or the authority of your habitual residence or place of work.

Where we have shared your Personal Data with others, we will inform them of a rectification, erasure or restriction where possible.

To exercise your rights, contact us at [email protected]. Viseven Europe OÜ is responsible for responding to your request, in accordance with the GDPR, normally within one month.

11.3. International transfers of Personal Data

Your Personal Data may be transferred outside the EEA, the UK and Switzerland, including to Ukraine, the United States and India, and may be processed by Authorized Personnel operating outside those territories. None of these countries is covered by an adequacy decision of the European Commission, and transfers to them are therefore made under the Standard Contractual Clauses approved by the European Commission, supplemented where necessary by a transfer impact assessment and additional technical and organisational measures. Copies of the relevant safeguards may be requested at [email protected].

Episode Materials, once published on the Website, are by their nature accessible worldwide.

12. Sensitive personal information

“Sensitive personal information” is information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data processed for the purpose of uniquely identifying an individual, and data concerning health, sex life or sexual orientation.

We do not knowingly or intentionally collect sensitive personal information or special categories of personal data as defined in Art. 9 GDPR through the Website or the Podcast, and we ask you not to submit it. Guests are asked not to disclose such information during a recording; where it is disclosed, we will remove it from the Episode Materials at your request before publication, and where you have knowingly disclosed it during a recording intended for publication we will treat it as manifestly made public by you within the meaning of Art. 9(2)(e) GDPR.

The Podcast is not a source of medical advice and is not intended to elicit information about the health of any individual.

13. Children

The Website and the Podcast are directed at professionals and are not intended for children under the age of 16. We do not knowingly collect Personal Data from children under 16. If you have reason to believe that a child under 16 has provided Personal Data to us, contact [email protected] and we will endeavour to delete it.

14. Communications preferences

You may manage your receipt of marketing and non-transactional communications by clicking the “unsubscribe” link at the bottom of any such email, by using the preference centre linked in our emails, or by writing to [email protected]. Consent to receive the Podcast and consent to receive Viseven’s wider marketing may be withdrawn independently of each other. We will continue to contact you where necessary in connection with an episode in which you are taking part, and to respond to your requests.

15. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes to our information practices. We will provide notification of material changes through the Website or by email prior to the change becoming effective. We encourage you to review this page periodically.

16. Contacting us

Questions regarding this Privacy Policy or our information practices should be directed to:

Viseven Europe OÜ

Lõõtsa Str. 2a, Lasnamäe district

Tallinn, Harju County, 11415, Estonia

Email: [email protected]

Effective Date

This Policy is effective as of 19 August 2026.