Disclosure of your personal data personal

When you agree to provide us with your personal data. and those in special categories, we will also ask for your consent. to share your personal data with the third parties set out below for the purposes set out in the table [Purposes for which we will use your personal data]:

• internal third parties as indicated in the Glossary.
• external third parties as indicated in the Glossary.
• third parties to whom we may choose to sell, transfer or merge parts of our business or assets. Alternatively, we may look to acquire other businesses or merge with them. If there is a change to our business, then the new owners may use your personal data. and those in special categories in the same way as provided in this Privacy Policy.

International transfers

Many of our external third parties are based outside the EEA, so the processing of your data is not possible. will involve a transfer of data outside the EEA.

Whenever we transfer your personal data. With your personal data outside the EEA, we ensure that this transfer has a similar degree of protection by ensuring that at least one of the following safeguards is in place:

• We will transfer your personal data. only in countries that ensure an adequate level of protection of personal data, according to the European Commission's assessments. For more details, see European Commission: Adequacy of the level of protection of personal data in non-EU countries.
• where we use certain service providers, we may use specific contracts approved by the European Commission that provide the same level of protection as in Europe. For more details, see European Commission: Model contracts for the transfer of personal data to third countries.
• If we use US-based providers, we may transfer data to them if they are part of the Privacy Shield, which requires them to provide a similar level of protection to personal data shared between Europe and the US. For more details, see European Commission: EU-US Privacy Shield.

Please contact us if you would like further information regarding the specific mechanism used by us when transferring your personal data. but personal character outside the EEA.

Data security

All the information you provide to us is stored on our secure servers. Information stored "at rest" on our secure servers is protected using industry-standard data encryption. If we have given you (or where you have chosen) a password that allows you to access certain parts of our sites, you are responsible for keeping this password confidential. We ask that you do not share a password with someone else.

Once we have received your information, we will use strict procedures and security features to try to prevent your data from being accidentally lost, used or accessed. in an unauthorised way. Data transmitted between you as a user (End User) and Illingworth as part of the service are protected using industry-standard encryption methods. The data stored on our servers is protected by encryption at rest and state-of-the-art firewalls to prevent unauthorized access.

No personally identifiable data is stored on the end user's device. Two encrypted codes are stored on the end-user's device to facilitate login.

We have put in place procedures to deal with any suspicion of a personal data breach and will notify you. and any applicable regulator when we are legally required to do so.

Data retention

By law, we must keep basic information about you. (including contact, identity, financial and transaction data) for seven years after the end of the clinical trial for financial audit purposes.

In certain circumstances you may ask us to delete your data: see [Your Legal Rights] below for further information.

In certain circumstances, we will anonymize your personal data. (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely, without further notice to you.

Your rights Legal

In certain circumstances, you have the following rights under data protection laws in relation to your personal data. personal information.

• Request access to your data (known as a 'data subject access request')
• Request correction of the personal data we hold about you.
• Request deletion of your personal data. personal
• Object to the processing of your personal data. When we are relying on a legitimate interest (or that of a third party) and there is something about your situation. which makes you want to object to processing on this ground, as you feel that it affects your fundamental rights and freedoms
• Request the restriction of the processing of your personal data. personal information.
• Request the transfer of your personal data. personal information to you or to a third party
• Withdraw your consent at any time where we rely on consent to process your personal data. personal

You may exercise any of these rights at any time by contacting us at 1 Pinehurst Road, Farnborough GU14 7BF OR PatientGO@illingworthresearch.com

Gloss

Legal basis

Consent means the processing of your personal data. in case you have indicated your personal consent. by a statement or you have clearly opted for processing for a specific purpose. Consent will only be valid if it is a freely expressed, specific, informed and precise indication of what you want. You can withdraw your consent at any time by contacting us.

EEA stands for European Economic Area.

Legitimate interest means our business's interest in conducting and managing our business to enable us to provide you with the best service/product and the best and safest experience. We make sure to consider and balance any potential impact on you. (both positive and negative) and your rights before processing your personal data. for our legitimate interests. We do not use your personal data. for activities where our interests are outweighed by the impact on you. (unless we have your consent or otherwise have an obligation or permission under the law). You can obtain further information about how we assess our legitimate interests in relation to any potential impact on you. in terms of specific activities, by contacting us.

The performance of the contract means the processing of your personal data. where it is necessary for the performance of a contract to which you are a party or to take steps at your request. before concluding such a contract.

Compliance with a legal obligation means the processing of your personal data. personal data if this is necessary for compliance with a legal obligation.

Third parties

Internal third parties

Other companies in the Illingworth Group that act as joint controllers or processing entities and that are based in Spain, France, Italy, Australia and the United States of America and provide IT and systems administration services and undertake reporting to management.

External third parties

Service providers acting as processing entities providing IT services and systems administration services.

Professional consultants acting as processing entities or joint controllers, including lawyers, bankers, auditors and insurers providing consultancy, banking, legal, insurance and accounting services.

Service providers who act as processing entities that provide you with travel, accommodation and transportation as part of the services.

UK Revenue and Customs, regulators and other authorities acting as processing entities or as a base of associated controllers in the United Kingdom who require reporting of processing activities in certain circumstances.

Your rights Legal

You have the right to:

• Request access to your data (commonly known as a 'data subject access request'). This allows you to receive a copy of the personal data we hold about you. and check whether we are processing them legally.
• request correction of the personal data we hold about you. This allows you to correct any incomplete or inaccurate data we hold about you, although we may need to verify the accuracy of any new data you provide to us.
• Request deletion of your personal data. personal information. This allows you to ask us to delete or remove personal data where there is no good reason for us to continue processing it. You also have the right to ask us to delete or remove your personal data. where you have successfully exercised your right to object to processing (see below), where you may have processed your personal information. unlawfully or if we are obliged to delete your personal data. to comply with local laws. Please note, however, that we may not always be able to comply with your request. for specific legal reasons of which you will be informed, if any, at the time of your request.
• you object to the processing of your personal data. If we are relying on a legitimate interest (or that of a third party) and there is something about your situation. which makes you want to object to the processing on this ground, as you feel that it has an impact on your rights and freedoms. Fundamental. In some cases, we can demonstrate that we have compelling legitimate grounds to process your information. that overrides your rights and freedoms.
• solicitați limitarea prelucrării datelor dvs. cu caracter personal. Acest lucru vă permite să ne cereți să întrerupem prelucrarea datelor dvs. cu caracter personal în următoarele situații:
  • dacă doriți să stabilim acuratețea datelor;
  • în cazul în care utilizarea de către noi a datelor este ilegală, dar nu doriți ca noi să le ștergem;
  • în cazul în care aveți nevoie să vă păstrăm datele, chiar dacă nu ne mai sunt necesare, deoarece aveți nevoie de acestea pentru a demonstra, exercita sau apăra revendicări legale; sau
  • v-ați opus utilizării de către noi a datelor dvs., dar trebuie să verificăm dacă avem motive legitime prevalente pentru a le utiliza.
• solicitați transferul datelor dvs. cu caracter personal către dvs. sau către o terță parte. Vă vom furniza dvs. sau unei terțe părți pe care ați ales-o datele dvs. cu caracter personal într-un format structurat, utilizat în mod obișnuit, care poate fi citit automat. Rețineți că acest drept se aplică numai informațiilor automatizate pentru utilizarea cărora ne-ați dat inițial consimțământul sau în cazul în care am folosit informațiile pentru a încheia un contract cu dvs.
• vă retrageți consimțământul în orice moment în cazul care ne bazăm pe consimțământ pentru a prelucra datele dvs. cu caracter personal. Cu toate acestea, acest lucru nu va afecta legalitatea oricărei prelucrări efectuate înainte de a vă retrage consimțământul. Dacă vă retrageți consimțământul, este posibil să nu vă putem furniza anumite produse sau servicii. Vă vom informa dacă acesta este cazul în momentul în care vă retrageți consimțământul.

Descrierea categoriilor de date cu caracter personal

• Date de identitate: prenumele, numele, numele de fată, numele de utilizator sau un identificator similar, starea civilă, funcția, data nașterii, sexul, informațiile de pe pașaport, inclusiv numărul, numele, țara emitentă și data expirării.
• Date de contact: adresa de domiciliu, adresa de e-mail, numerele de telefon și datele persoanei de contact în caz de urgență.
• Date financiare: date privind conturile bancare și cardurile de plată.
• Date despre tranzacții: include detalii despre plățile către dvs. și detalii despre solicitările din aplicație.
• Date despre dispozitiv: includ tipul dispozitivului mobil pe care îl utilizați, un identificator unic al dispozitivului (de exemplu, numărul IMEI al dispozitivului dvs., adresa MAC a interfeței de rețea wireless a dispozitivului sau numărul de telefon mobil utilizat de dispozitiv),] informații despre rețeaua mobilă, sistemul de operare al telefonului dvs. mobil, tipul de browser mobil pe care îl utilizați și informații despre setarea fusului orar.
• Date despre conținut: includ informații stocate pe dispozitivul dvs., inclusiv fotografii, videoclipuri sau alt tip de conținut digital;
• Date despre profil: includ numele dvs. de utilizator și parola, istoricul solicitărilor în aplicație, preferințele dvs. și feedback-ul furnizat.
• Date de utilizare: includ detalii despre utilizarea de către dvs. a oricărei dintre aplicațiile noastre sau despre vizitele dvs. pe oricare dintre site-urile noastre, inclusiv, dar fără a se limita la, date despre trafic și alte date de comunicare, indiferent dacă acest lucru este necesar în scopurile noastre proprii de facturare sau în alt scop și resursele pe care le accesați.

Date din categorii speciale

Acestea vor include toate informațiile pe care ni le furnizați care se referă în mod specific la o solicitare pe care o faceți în cadrul aplicației (cum ar fi o solicitare de transport sau cazare) și pot include detalii despre rasa sau etnia dvs., convingerile religioase sau filosofice și informații despre sănătatea dvs.