Veeva and Customer Data

Customer Data

Veeva Systems’ Customers may electronically submit data or information to the Services Platform for hosting and processing purposes (“Customer Data”). Veeva Systems will not review, share, distribute, or reference any such Customer Data except as provided in the Veeva Systems Master Subscription Agreement, or as may be required by law. In accordance with the Veeva Systems Master Subscription Agreement, Veeva Systems may access Customer Data only for the purpose of providing the Services, preventing or addressing service or technical problems, at a Customer’s request in connection with Customer support matters, or as may be required by law.

Service Provider, Sub-Processors/Onward Transfer

Veeva Systems may transfer personal information to companies that help us provide our service. Transfers to subsequent third parties are covered by the provisions in this statement regarding notice and choice and the service agreements with our Customers.

We use sub-processors in order to provide customer support on behalf of our Customers. To see a list of our sub-processors, please visit: trust.veeva.com.

Access to Data Controlled by our Customers:

Veeva Systems acknowledges that you have the right to access your personal information. Typically, Veeva Systems is a Data Processor who collects information under the direction of its Customer and has no direct relationship with the individuals whose personal data it processes. If you are a customer of one of our Customers and would no longer like to be contacted by one of our Customers that use our service, please contact the Customer that you interact with directly. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct queries to the appropriate Veeva Systems’ Customer (the Data Controller). If a Veeva Customer requests Veeva Systems’ assistance in the removal of data, Veeva will respond to such requests within 30 business days.

Additionally, Veeva offers health care professional data services to our Customers. In this context, Veeva acts as a Data Controller for the purposes of the collection of the data for the benefit of our Customers. Where Veeva Systems is a Data Controller, please contact privacy_au@veeva.com to access, correct or request a removal of your personal data. Veeva will respond to such requests within 30 business days.

Data Retention:

Veeva Systems will retain your information (including Customer Data we collect on behalf of our Customers) for as long as your or that Customer’s account is active or as needed to provide you services, and as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, or as otherwise reasonably necessary for our business purposes. It is also provided in the Veeva Systems Master Subscription Agreement.