Data processing agreement
This agreement applies to the personal data wholesalers keep in PharmaWMS.
Roles
The wholesaler is the controller of the data of its staff and its pharmacies. PharmaWMS processes it as processor, only on the wholesaler’s instructions and to provide the service.
The data
Contact and account data of staff and pharmacies, orders, invoices, payments and the audit log.
Security
Each company’s data is separated at database level; connections are encrypted (HTTPS); sign-in is protected by strong passwords and two-step verification; changes are recorded in the audit log; backups run every night.
Confidentiality
Access by PharmaWMS personnel is limited to what support needs and is recorded in the audit log.
Subprocessors
The subprocessors are those listed in the privacy policy.
Incidents
In case of a personal data breach, the wholesaler is notified without undue delay, with the nature of the incident and the measures taken.
End of service
At the end of the service the wholesaler can export its data. Users are anonymized, while financial documents are archived for as long as the law requires.