Impressum

Personal data we process and why

Sharing your data

Third parties

We may share your personal data with third parties in the circumstances described below. We will ensure these third parties are only allowed to use your personal data in accordance with our instructions and pursuant to a written contract.

• Hosting cloud infrastructures will store personal data that is collected by Lindus Health. Our cloud infrastructure is AWS.
  
• Invoicing and payment providers will receive personal data from Medical Staff, Suppliers and Sponsors where necessary to make or receive payments. These include Tipalti and Xero.
  
• Communication tools used to send newsletters or other emails will receive personal data of Trial Volunteers, Website Contacts, Suppliers, and Sponsors. These include Hubspot, Google, Calendly, and Zoom.
  
• Customer relationship management systems will receive personal data of Sponsors. These include HubSpot.
  
• Trial services: In order to volunteer for a trial, the personal data of Trial Volunteers may be shared with a trial site, Sponsor, or other third parties contracted to work on the trial, or conducting services necessary for the delivery of the trial. The service providers include Jotform, SmartSheets, Florence, Virtual Incentives (for payments to Trial Volunteers), and DocuSign.
  

International data transfers

Some of the third parties we contract with in order to provide our services are based outside the UK, EEA or Switzerland. We will only share (including makingavailable remotely) personal data with third parties outside of the UK, EEA or Switzerland where:

• the transfer is to a country (or an international organisation) that the UK or EU government has determined ensures an adequate level of protection;
  
• the appropriate EU Standard Contractual Clauses (“SCCs”) or UK International Data Transfer Agreement (“IDTA”), has been put in place between Lindus Health and the entity located outside the UK or EU;
  
• binding corporate rules have been implemented, where applicable; or
  
• where the transfer is otherwise permitted by law.
  

By completing the pre-screen signup process, you accept that Lindus Health may transfer your personal data outside of the UK or EU where necessary.

How long we keep your data

We will retain your personal data for as long as is necessary to provide you with our services and for a reasonable period thereafter to:

• enable us to meet our contractual obligations;
  
• enable us to comply with legal and regulatory requirements (for example,we may be required to retain certain clinical trial data from Trial Volunteers under applicable law); and
  
• to deal with complaints and claims.
  

At the end of the applicable retention period, your personal data will be securely deleted or anonymised, for example by aggregation with other data, so that it can be used in a non-identifiable way for statistical analysis and business planning.

Your rights and options

You have the following rights in respect of your personal data:

• Right of access: You have the right to request copies of the personal data we collect about you and information about our processing of it. Wewill provide the copies of your personal data free of charge. However, we may charge a reasonable fee if your request is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
  
• Right to rectification: If the personal data we hold about you is incorrect or incomplete, you can ask us to rectify or add to it.
  
• Right to withdraw consent: Where we are using your personal data with your consent, you can withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on your consent before its withdrawal. If you have signed up to our newsletter, you can withdraw your consent by using the opt out feature provided in the email. Otherwise, please email us at data@lindushealth.com.
  
• Right to object to processing: Where we are using your personal information because it is in our legitimate interests to do so, you can object to us using it this way. Where we are using your personal data for direct marketing, including profiling for direct marketing purposes, you can object to us doing so.
  
• Right to restrict processing: You can ask us to restrict the use of your personal data if you believe:
  
• it is not accurate;
  
• it has been processed unlawfully by us (but you do not want us to delete it);
  
• we do not need it any-more (but you want us to keep it for use in legal claims); or
  
• if you have already asked us to stop using your data but you are waiting to receive confirmation from us as to whether we can comply with your request.
  
• Right to erasure: In certain circumstances you can request that we delete your personal data. For example, you can request we delete personal data that we no longer need for the purpose it was collected for, or if you withdraw your consent for our processing of your personal data under the GDPR (where our processing was based on your consent).
  
• Please note that under Article 17(3)(d) of the GDPR, where we are processing personal data for research related purposes, the right to erasure does not apply as it would be likely to render impossibleor seriously impair the achievement of our research.○This means that where you have chosen to take part in a study, wemay not always be able to delete your data.
  
• Right to object to automatic decision-making: You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.
  
• Right to data portability: When we are processing your personal data under the lawful basis of performance of a contract, you can request your personal data in a format that makes it easier to reuse your information in another context, and to transmit this data to another data controller of your choosing without hindrance.
  

How to exercise your rights

You   will   not   usually   need   to   pay   a   fee   to   exercise   any   of   the   above   rights.However, we may charge a reasonable fee if your request is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.If you wish to exercise your rights, you may contact our Data Protection Officer using the details set out below within the “Contact Us” section. We may need to request specific information from you to confirm your identity before we can process your request. Once in receipt of this, we will process your request without undue delay and within one month. In some cases, such as with complex requests, it may take us longer than this and, if so, we will keep you updatedIf you have any concerns or complaints about our processing of your personal data, you can also lodge a complaint with the Information Commissioner’s Office. They can be contacted using the information provided here: [LINK: https://ico.org.uk/global/contact-us/].

Children's privacy

We do not offer our products and services to children and we do not knowingly collect Personal Data of children without parental consent, unless permitted bylaw.   If   you   are   a   child   (under   18   years   old),   you   must   have   your   parent’s permission to take part in a clinical trial. If you learn that a child has provided us with   their   Personal   Data   without   parental   consent,   you   may   contact   us,   as described below, and if appropriate, we will securely and permanently delete it, in accordance with applicable law.

Contact Us

If you have any questions, or wish to exercise any of your rights, then you can contact us at the following address in the UK: Lindus Health, 90 Union Street, London, SE1 0NW. Alternatively, you can email us at data@lindushealth.com. If you are based in the EEA or Switzerland, please click here.

Changes to this privacy notice

We may update this notice (and any supplemental privacy notice), from time to time as shown below. We will notify you of the changes where required by applicable law to do so.