EXTERNAL PRIVACY NOTICE
What is the purpose of this document?
Here at Veramed we are committed to protecting the privacy and security of your personal information. The majority of our website can be operated without providing any of your personal information, although there are some circumstances in which we require additional information to provide you with the information or services you are requesting.
This privacy notice describes how we collect and use your personal information through our website and the decisions you can make about the way your information is collected and used.
Veramed is a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice. We may update this notice at any time.
Data protection principles
We will comply with data protection law. This says that the personal information we hold about you must be:
1. Used lawfully, fairly and in a transparent way.
2. Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
3. Relevant to the purposes we have told you about and limited only to those purposes.
4. Accurate and kept up to date.
5. Kept only as long as necessary for the purposes we have told you about.
6. Kept securely.
The kind of information we hold about you
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
There are “special categories” of more sensitive personal data which require a higher level of protection.
Type of Personal Data
How do we collect it?
Legal basis for processing
Personal contact details such as name, company name, address, contact number, personal or professional email addresses
Through the contact page on our website.
Article 6 (a) Consent
Recruitment information (including a CV or cover letter or as part of the application process)
You provide this as part of your application for a role with Veramed via the ‘careers’ page on the company website.
Article 6 (a) Consent
How we will use information about you
We store the information you provide about yourself in a secure environment in order to provide you with the information, products, and/or services you request. The information is stored for the lifetime of the system unless you request that it be removed. You must opt-in or give consent for us to share your identifiable information with third parties, who would be bound by a confidentiality agreement. However, the information that you provide about yourself may be shared with Veramed employees to the extent necessary to accommodate your request.
For example, if you provide your name, mailing address, telephone and email address and request more information about Veramed’s services this information will be shared with appropriate Veramed personnel to fulfil your request.
Finally, unless otherwise excepted below, we would not use your personally identifiable information that you provide us online for purposes other than those you requested without first giving you an opportunity to agree or otherwise limit the use of your data for any unrelated purposes.
Change of purpose
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
No decisions will be taken about you using automated means.
The Group members include Veramed Limited; Veramed GmbH; Veramed Inc.; and Veramed LLC.
Data may be shared between the group members. A number of entities within the Veramed Group are based outside the European Economic Area (EEA) so their processing of your personal information will involve a transfer of data outside of the EEA. We have put in place provisions between the group entities in the form of Technical and Organisational Measures (TOMS)1, to ensure this is done in line with data protection laws. If you would like more information, please reach out to us at [email protected].
We have put in place measures to protect the security of your information. Details of these measures are available upon request.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
Cookies and other anonymous web tracking techniques
When you use our website, Veramed may assign cookie files to you, which are a small amount of data we send to your web browser. Cookies enable the computers operating our websites to differentiate between visitors and to track the patterns of activities engaged in by different visitors. By tracking such activities, the computers, the computers operating our websites can recognise a visitor and customise certain features for the visitor. The cookie preferences can be updated as and when you so wish. We may also use aggregated, non-identifiable data regarding persons who visit our site to learn more about the use of the site and how we can improve it.
How long will you use my information for?
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. If you would like more information as to specific retention periods, please do reach out to us at [email protected].
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
What are your rights under data protection laws?
Your rights in connection with personal information
You have various other rights under applicable data protection laws, including the right to:
- access your personal data (also known as a “subject access request”);
- correct incomplete or inaccurate data we hold about you;
- ask us to erase the personal data we hold about you;
- ask us to restrict our handling of your personal data;
- ask us to transfer your personal data to a third party;
- object to how we are using your personal data; and
- withdraw your consent to us handling your personal data.
You also have the right to lodge a complaint with your relevant supervisory authority, you can find which one applies to you here.
Please keep in mind that privacy law is complicated, and these rights will not always be available to you all of the time.
Our EU Representative is Veramed GmbH who can be contacted at [email protected].
Our UK Representative is Veramed Limited who can be contacted at [email protected].
If you have any questions about this privacy notice, please contact [email protected].