GSK

Privacy Statement

GlaxoSmithKline ("GSK") respects the privacy of visitors to its web sites and is committed to the protection of their personal information. This privacy statement explains data collection and use practices relating to the GlaxoSmithKline HR Portal (the "Site").

This Site is hosted and made available, on GSK's behalf, by Conduent HR Solutions LLC ("Conduent"). Conduent has been engaged by GSK to provide certain employee benefits processing and record keeping services, and it provides this Site in connection with those services. GSK's agreement with Conduent requires it to protect your information from unauthorized use or disclosure.

Binding Nature
By accessing and using the Site, you agree and consent to the collection, use and disclosure of your personal information as outlined in this Privacy Statement.

1. Collection of Personally Identifiable Information

Conduent will collect personally identifiable information (i.e. information from which you can be identified, such as name, address, telephone number or e-mail address) only when it is asked for and/or you voluntarily submit it on this Site.

Conduent will also hold certain information about you provided by GSK, in connection with your benefits or similar human resources services. The personally identifiable information that we may have, and which enables us to provide services to you includes, for example, your name and contact information, financial account information and transactional activity, and other employee benefit information and activity.

Some of the information we hold about you, or which you provide to us, may be sensitive personally identifiable information (i.e. information about your health plans, your national insurance or social security number, or any bank account details you may provide). By using this Site, you consent to Conduent and GSK using this information for the purposes described in this Privacy Statement.

We may also collect information through the "Contact Us" link, which you can use to send us inquiries, or to make requests about particular benefits, products or services. We may retain copies of these messages.

2. Use of personally identifiable information

Conduent or GSK may use information held about you, or provided by you through the Site, to respond to your requests, to improve levels of service, and the content of the Site; to provide you with tips, helpful information, benefit news and updates; to notify you of new GSK benefits and services; and to seek your views on your benefits or GSK's services; and for GSK's own internal purposes.

Information collected is also used to provide a record of communications between Conduent and visitors to the Site, and to comply with applicable legal and/or regulatory requirements. In certain circumstances, information you provide or that we hold about you may also be made available to benefit plan administrators, to the extent required for benefits administration.

The information provided by you through the "Contact Us" link will only be used to respond to your inquiry, and to provide better customer service. We post responses to your inquiries to your personal Site inbox.

3. Collection of Non-Personally Identifiable Information
Conduent also collects non-personally identifiable information in aggregate form to track data such as the total number of visits to the Site, the number of visitors to each page of the Site, and the domain names of visitors' internet service providers. Conduent or GSK may use this information, which remains in aggregate form, to understand how visitors use the Site, so that the Site, and the services provided through it, can be improved. We may also share this information with other companies within the GlaxoSmithKine group.
3.1 Use of IP Addresses
An Internet Protocol ("IP") address is a set of numbers that is automatically assigned to your computer whenever you log on to your internet service provider, or through your organisation's local area network ("LAN") or wide area network ("WAN"). Web servers automatically identify your computer by the IP address assigned to it during your session online.

GSK, or third party companies acting on behalf of GSK, such as Conduent, may collect IP addresses for the purposes of systems administration and to audit the use of the Site. We do not ordinarily link a user's IP address to personally identifiable information of that user, which means that while each user's session will be logged, the user will remain anonymous to us. However, we may use IP addresses to identify users of the Site when we feel it is necessary to enforce compliance with the Site's terms of use, or to protect our services, the Site or other users.

3.2 Cookies
This Site uses a technology called "cookies". A cookie is a small text file that is placed on your hard disk by a web server. Cookies help provide additional functionality to the Site, or help us analyse use of the Site more accurately. For instance, a server may set a cookie that keeps you from having to enter a password more than once during a visit to the Site. In all cases in which cookies are used, we will not collect personally identifiable information without your explicit permission.

You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies, or receive a warning before a cookie is stored, if you prefer. Please refer to your web browser's instructions or help screen to learn more about these functions. If you choose to decline cookies, you may not be able to fully experience the interactive features of this Site or any other web sites that you visit.

4. How we protect your personal information
GSK and Conduent are committed to protecting the security of your personal information. We use a variety of security technologies and procedures to help protect your personal information from unauthorised access, use, or disclosure. For example, we store the personal information you provide on computer servers with limited access that are located in controlled facilities. While we cannot guarantee that loss, misuse or alteration to data will not occur, we make every commercially reasonable effort to prevent such unfortunate occurrences.

In addition to accessing information through the Site, or providing information, you may perform transactions on this Site, utilising services provided by Conduent, on GSK's behalf. In order to protect the security and confidentiality of information provided through such services, we require that users have a browser that supports at least 128-bit "strength" encryption. We may update this minimum standard to reflect advances in encryption technology.

5. Sharing Personally Identifiable Information with Third Parties
Neither Conduent nor GSK will sell or rent personally identifiable information to any third party for any purpose. Sometimes, however, selected third parties are used to provide us with support services in connection with the Site and such parties may, from time to time, have access to your information to enable them to provide those services to us. Please rest assured that all companies providing such support services are required by us to meet the same standards of data protection as Conduent and GSK, and are prohibited from using the information for their own marketing purposes.

In certain special cases, we may disclose your personally identifiable information in the following circumstances:

A. when we have reason to believe that disclosing this information is necessary to identify, contact, or bring legal action against, someone who may be causing injury to you, or otherwise injuring or interfering with Conduent' or GSK's rights, property or operations, other users of this site, or anyone else who could be harmed by such activities; or
   
B. when we believe the law requires it, or in response to any demand by law enforcement authorities in connection with a criminal investigation, or civil or administrative authorities in connection with a pending civil case or administrative investigation.

Both Conduent and GSK may share your information with other companies in their groups, in order to facilitate the provision of benefits or services to you, to respond to your inquiries or requests, or to provide you with information about benefits or services.

6. Transfers to other countries
Personal information collected on the Site may be stored and processed in your country of residence, or any other country in which Conduent, GSK or their affiliates, subcontractors or agents maintain facilities, and by using the Site, you consent to any transfer of information outside of your country of residence. Conduent and GSK will require that, if information is transferred outside your country of residence, it will still be treated in accordance with this Privacy Statement.
7. Links to Other Web Sites
This Site may provide links to other GSK and third party web sites as a service to our users. The Privacy Statement set out here does not apply to those sites. Please ensure you check the privacy statement, and any legal terms, posted on each site you link to.
8. Changes
We may occasionally update this Privacy Statement. We encourage you to periodically review this Privacy Statement to stay informed about how we are helping to protect the personal information we collect. Your continued use of the Site constitutes your agreement to the Privacy Statement and any updates.