Last update: 18 May 2026

Novartis is committed to use data ethically and values the protection of your personal data. This is how Novartis maintains trust with patients, healthcare professionals, its employees, and society.

This Privacy Notice describes how Novartis Pharma AG having its registered office at Novartis Campus, CH 4056 Basel, Switzerland (hereinafter "Novartis" or "we") collects, uses and otherwise processes your Personal Data (information about you that may identify you directly or indirectly). We gather this information through your interactions with us via our websites (such as www.novartis.com), or through any mobile page, application, or other service linked to this Privacy Notice (collectively, the “Services”).

In case you are provided with country-specific privacy notices, including as published on our country websites, and/or other privacy notices, e.g. when you are reporting an adverse event, these privacy notices shall govern the processing of your personal data for the purposes described in those notices and shall not be superseded by this Privacy Notice.

If you access any third-party link or website from our Services, you may need to refer to the privacy notices of such third parties. Novartis does not endorse and is not responsible for the information or privacy practices of websites or services owned by third parties.

Our Services are not directed to children under 13 years old. We do not knowingly collect any Personal Data about children on our website(s) or for the purposes mentioned in this Privacy Notice.

If a parent or guardian becomes aware that their child has provided us with his/her Personal Data and would like to request that such Personal Data be removed, please refer to our Contact us section.

Most of our Services can be accessed without registering or signing up. However, if you interact with us, we might collect Personal Data such as your name, contact details, and email address. We may also collect certain Personal Data that, when combined with other information, can identify you, such as your company name, position, or ID number. This might include computer or device serial numbers and IP addresses. If you provide Personal Data about others to us or to our service providers in connection with the Services, you confirm that you have the right to do so and that you have informed them in accordance with the present Privacy Notice.

We always process your Personal Data for a specific purpose and will only process the Personal Data relevant to achieve that purpose. The applicable legal basis may vary depending on the specific processing purpose and the requirements in your jurisdiction. In some countries, we may ask for your consent to process your Personal Data, which in such cases is the legal basis for our processing.


In the table below, we set out what Personal Data we process and for which purposes, indicating the corresponding legal justification/basis (where required).

Types of Personal Data we processPurposeJustification (legal basis)
(where required under applicable law)
Registration of User Accounts
You may need to register and create a user account (e.g. in websites for licensed medical professionals or accredited press members). 
During registration, you will provide details like your name, email address, login ID, security questions and answers, encrypted passwords, postal address, telephone number, and possibly your medical license or press accreditation.		We process and save the Personal Data provided during registration exclusively to enable you to access the content specifically relevant to you.

Legal basis:

  • fulfilment of contractual or legal obligations; or
  • your consent; or
  • our legitimate interest to manage user accounts and access to our content. 
Contact requests, customer support or feedback
You will be asked for your name, address, email, phone number, reason for contact, and your message by using our form. 
You may also share your social media profile details like name, email, contact info, comments, and reactions when interacting with us on social media or using social media to log in to our site.		We process and save the information provided solely to address your request about our products and services and to get in touch with you.

Legal basis:

  • fulfillment of our contractual obligations to address any relevant concerns about which you have contacted us; or
  • legitimate interest to maintain contacts with external stakeholders and provide relevant support.
Ordering products or services and obtaining information through our website
You may be asked to provide your name, email, postal address, payment details and other information as necessary. 		Fulfilling your orders and responding to your requests.

Legal basis:

  • Our legitimate interest to improve our products and services, making your experience with us better; or
  • Our contractual obligation.
Signing up for our newsletter
You will be asked for your name, email, and/or postal address. 		Delivering newsletters.

Legal basis:

  • Consent for us to use this information to send you newsletters about Novartis events, products, services, and promotions. If you agree, we may also analyze your behavior when reading the newsletter to personalize future newsletters and promotional communications.
Tracking and monitoring adverse events
Your Personal Data will be processed in accordance with our Privacy Notice for Pharmacovigilance, Medical Information, and Product Quality Complaints | Novartis

Novartis is legally obliged to:

  • inform itself about undesirable side effects and interactions, the lack of drug effectiveness, quality complaints and / or other safety or quality issues of Novartis products.
  • report significant side effects to the responsible health authorities, sharing your information in pseudonymous form (in a way that doesn't directly identify you). We can also share this information with other Novartis Group companies, provided that they are themselves obliged to report to the health authorities responsible for them.

Legal basis:

Please see our Privacy Notice for Pharmacovigilance, Medical Information, and Product Quality Complaints | Novartis

Social Media Listening
We may also collect publicly available Personal Data from social media platforms (including blogs, forums etc.), related to Novartis, Novartis products, and about drugs and diseases. This activity, called “social media listening”, may include your Persona Data such as comments, messages, blogs, photos, and videos. 
We will minimize the processing of such Personal Data and limit the storage time of this Personal Data. To further control who sees your Personal Data, use privacy settings on these platforms, and check their privacy notices since they are not managed by Novartis.		Collect aggregated views, trends and feed-backs on Novartis, its products, certain drugs and diseases and identify key stakeholders.

Legal basis:

  • our legitimate business interests, in particular to (i) have a better understanding of how certain key audiences, like healthcare professionals or patients, experience certain diseases or react to the use of Novartis products, (ii) have a better understanding of Novartis’ reputation and market trends, (iii) identify key-stakeholders, in particular bloggers and social media influencers, and to initiate contact with them.

Website usage analytics
We may also collect and process Personal Data about your visit to this website, such as the pages visited, the website you came from and your searches.
Novartis can store essential cookies on your device for the website to function, but needs your permission for other cookies types. These cookie settings let you accept or deny cookies by category; refusing cookies may limit website functionalities.

Please refer to our Cookie Settings for more details on the types of cookies we use (the purpose they serve, their lifespan, and their provenance) and how to manage your preferences.

We may use such information to help improve the site’s contents and compile usage statistics for internal use and market research purposes. We may use "cookies" or similar technologies that collect data and metadata such as your domain name, your internet service provider, your operating system, and the date and time of access.

Legal basis:

  • your consent; or
  • our legitimate business interest.
Certain of our Services, including websites, may use the web analysis service Google Analytics from Google LLC, of 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) to optimize them. Google uses this information obtained through a cookie to save a profile of which pages you have visited within a session. The information generated by the cookie about the use of Services is transmitted to Google servers and stored there. To protect your Personal Data and preserve your anonymity, we use features like "anonymize IP". For more information on how IP anonymization works, click here: https://support.google.com/analytics/answer/2763052Google uses this information on our behalf to analyse our website usage, compile activity reports and provide other relevant services. 
Novartis uses the data received from Google Analytics for business planning, business activities and marketing to improve our web services and user experience.

Legal basis:

  • your consent; or
  • our legitimate business interest.

Other tracking technologies 
We may use cookies or other tracking technologies (also known as action tags, single-pixel GIFs, clear GIFs, invisible GIFs and 1-by-1 GIFs) provided by third party advertisement companies.

Typically, we use the services of social media companies and other third-party advertisement companies. Please refer to our Cookie Settings to learn more about our marketing or advertisement cookies and manage your preferences.

Besides, our Services, including Websites, may use Crazy Egg technology which may record mouse clicks, mouse movements, scrolling activity, and other behavioral data. The data collected includes anonymized IP addresses, visited pages, movement patterns, and the number and position of link clicks.

We may also use Google Tag Manager (“GTM”) which is a tag management system operated by Google to manage JavaScript and HTML tags. Tags are small code elements that, among other things, are used to measure traffic and visitor behaviour; to understand the effect of online advertising and social channels; to set up remarketing and orientation towards target groups; and to test and optimize websites. GTM makes it easier for us to integrate and manage our tags.

We may use other technologies including tags that may collect some of your information like IP address, in particular:

Kaltura (Kaltura Inc., 250 Park Avenue South, 10th Floor, New York, NY 10003, United States) Privacy Policy.

Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, California 94107, United Sates) Privacy Policy.

To provide relevant advertisements 
to you based on your interests or browsing history.
To collect information like your browser details, unique client ID etc. so that we may serve you ads on our websites and on other websites you may use.
To support website analytics 

Legal basis:

  • your consent; or
  • our legitimate business interest.
Website preferences and security
We may collect certain information about you like your IP address, unique device identifiers like Media Access Control (MAC) address, computer type (Windows or Mac), browser type and version, screen resolution, operating system name and version. We may also derive your location information from your IP address. 		We use this information to secure our websites and network systems and to improve our services by recording your preferences, maintaining service levels, diagnosing and troubleshooting technical issues.

Legal basis:

  • our legitimate business interest.

Our processing activities may include the use of artificial intelligence (AI) when processing your Personal Data for the purposes listed above. We may also occasionally optimize such AI solutions by training or fine-tuning them with some limited amount of your Personal Data, ensuring that we are not compromising your privacy, rights and interests, and remain within the realm of our legitimate interest or in scope of the consent we would be collecting from you. When using AI, Novartis does so in compliance with applicable laws and strives to apply human-centric principles, appropriate transparency, and uses AI responsibly, applying adequate security measures.

We may combine, aggregate, or anonymize Personal Data with data we may collect from or about you from other sources, such as public databases, providers of demographic information, joint marketing partners, public social media platforms (data made public by you), and other third parties.

We may use your data for other standard business purposes, including audits, monitoring and prevention of fraud, infringement, and other potential misuse of our products and services, and for modifying our services.

Finally, we may use your Personal Data:

  • if we are required to do so because of an applicable law, requests from public and government authorities (including court order, subpoena, or governmental regulation), even outside your country of residence;
  • if we need to enforce our terms and conditions;
  • when we believe in good faith that the use of Personal Data is necessary to protect legal rights, the security or integrity of this website;
  • to protect your safety or the safety of others;
  • as part of any criminal or other legal investigation or proceeding in your country or in other countries; or,
  • to the extent reasonably necessary for development of or to proceed with the negotiation or completion of a corporate or commercial transaction.

We do not usually collect sensitive Personal Data for purposes other than monitoring and management of adverse events. Please do not disclose your sensitive Personal Data (e.g., social security number, information related to racial or ethnic origin, political opinions, religion or philosophical beliefs, health, sex life or sexual orientation, criminal background, or trade union membership, or biometric/ genetic data for the purpose of uniquely identifying an individual).

For the purposes described above, Novartis may need to share your Personal Data with authorized third parties, which are imposed adequate contractual obligations to ensure the protection of your Personal Data, according to applicable data protection law.

We will not sell, share, or otherwise transfer your Personal Data to third parties other than those indicated in this Privacy Notice.

The recipients may include:

  • our employees (including employees, departments or other companies of the Novartis group);
  • our suppliers and services providers that provide services and products to us, including our IT systems providers, cloud service providers, database providers and consultants;
  • any third party to whom we assign or novate any of our rights or obligations;
  • potential acquirers and other stakeholders in the event of a merger, acquisition, joint venture, assignment, spin-off or divestiture; and
  • legal and other authorities, upon their request or as required by applicable laws

The Personal Data we collect from you may also be processed, accessed or stored in a country outside the country where you are located, which may not offer the same level of protection of personal data.

If we transfer your Personal Data to external companies in other jurisdictions, we will make sure to protect your Personal Data by applying the level of protection required under the data protection/privacy laws applicable to Novartis, and acting in accordance with our policies and standards. To the extent that our processing of Personal Data is subject to the privacy laws of the European Economic Area ("EEA"), Switzerland, or the United Kingdom (“UK”), or any other country prescribing the use of protective measures for the transfer of Personal Data to third countries, we are only transferring personal data to countries not providing for the same level of data protection on the basis of standard contractual clauses approved by the European Commission or other alternatives prescribed by the applicable privacy laws. You may request more information or a copy of such measures by contacting us as described below (Section: ‘What are your rights and how can you exercise them’).

For intra-group transfers of Personal Data to our group companies, the Novartis Group has adopted Binding Corporate Rules, a system of principles, rules and tools, provided by European law, in an effort to ensure effective levels of data protection relating to transfers of personal data to Novartis affiliates outside the EEA, UK and Switzerland. Read more about the Novartis Binding Corporate Rules here.

We have implemented appropriate technical and organizational measures designed to provide an adequate level of security and confidentiality to your Personal Data.

The purpose thereof is to protect Personal Data against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure or access and against other unlawful forms of processing.

We will only retain your Personal Data for as long as necessary to fulfil the purposes outlined in this Privacy Notice.

Whenever we process Personal Data, we take steps to keep it accurate and up-to-date for the purposes for which they were collected. You have the right to:

  • access your Personal Data as processed by us and, if you believe that any information relating to you is incorrect, obsolete or incomplete, to request its correction or updating;
  • request the erasure of your Personal Data or the restriction thereof to specific categories of processing;
  • withdraw your consent at any time, without affecting prior processing;
  • object, in whole or in part, to the processing of your Personal Data, including for direct marketing and research (with certain exceptions)
  • request data portability, i.e. to receive or transfer your data in a structured, commonly used and machine-readable format; and
  • object to automated decision-making including profiling if it has a significant or legal impact on you.

If you have a question or want to exercise the above rights, please click here.

In addition to the rights above, you may have the right, under applicable law, to file a complaint with the competent supervisory authority.

This Privacy Notice was last updated May, 2026. We may modify this Privacy Notice from time to time, in particular to reflect changes in applicable legislation. Amendments will be available on this page, and we therefore invite you to keep checking this Notice periodically.

Contact us

Should you have any further questions, or wish to raise a request to our data protection officer, please email us at [email protected] or write us to the following address: 

Att. Data Protection Officer
Novartis Pharma AG
Global Privacy Office
Fabrikstrasse 18
4056 Basel
Switzerland

Additional State-Specific Information for United States Residents

Some states (including but not limited to California, Nevada and Texas), have state specific rights for their residents. Click here to learn more about those state specific rights.