Privacy Policy | European Union, European Economic Area, Switzerland, and United Kingdom

Privacy Policy – European Union, European Economic Area, Switzerland, and United Kingdom

This notice applies to you only if are located in a member state of the European Union, the European Economic Area, Switzerland, or the United Kingdom.

Global Coalition for Adaptive Research, Inc (GCAR) is committed to protecting the privacy and security of your personal information. This privacy notice describes how we collect and use personal information about you during and after your relationship with us, in accordance with the applicable data protection legislation.  For the purpose of this document, we are referring to the UK Data Protection Act 2018 (including as amended), UK GDPR, the Swiss Federal Act on Data Protection (FADP), and EU GDPR 2016 ((EU) 2016/679.

Our lawful basis for processing the personal data.

In general, GCAR uses Personal Data for its legitimate interests in compliance with applicable law and regulation.  In certain situations, GCAR  may rely on alternative lawful bases for using your Personal Data in specific situations.  In such cases, you will be notified with additional information on the lawful use of your Personal Data.

What We Collect

We collect the following personal information about you that you voluntarily supply to us via our website:

If you are donating we will collect:

• Name
• Email address
• Phone number
• Full address
• Country of residence

This facility is run and managed by Donorbox see their privacy notice here:
https://donorbox.org/privacy

If you subscribe to our mailing list we will collect:

• Name (optional)
• Email address

If you provide your email address we may use it to contact you and notify you of any GCAR news or updates.

This facility is run and managed by MailChimp see their privacy notice here:
https://mailchimp.com/gdpr/

When you visit the Website, we may also collect “Other Information” that does not reveal your specific identity or does not relate to an identifiable individual. This might include, for instance, browser and device information; App usage data; information collected through cookies, pixel tags, and other technologies; demographic information and other information provided by you; or aggregated information. We use this information to facilitate our operation of the Sites.

In some instance we may also collect

• Clinical Trial Related Personal Data:  Personal Data may be collected from clients, personnel, clinical study participants (including patients, spouses, caregivers and legal guardians), investigator site personnel, healthcare providers, service providers, suppliers and business partners for GCAR to carry out business, operational, and safety activities related to a clinical trial or research study.  Such Personal Data may be disclosed to other entities participating in the study, including the sponsor of the study, investigative sites, and third-party services providers and suppliers.
• Human Resources Personal Data:  Personal Data may be collected from job applicants, actual or past employees, consultants or independent contractor, in order to fulfil our Human Resources (HR) functions and administer potential, past or current employment with GCAR. Such Personal Data may be disclosed to GCAR ’s agents providing recruitment or employment services on our behalf.
• Business Contact Personal Data:  Personal Data may be collected from clients, service providers, suppliers, and business partners in order to discuss prospective business opportunities, GCAR service offerings or provide customer support.
• Prospective Study Participant Personal Data:  Personal Data may be collected from prospective study participants, including patients or healthy volunteers, in order to determine interest or eligibility to participate in a clinical research study.  Such Personal Data may be disclosed to other entities participating in prospective studies, including GCAR (the sponsor of the study), investigative sites, and third-party services providers and suppliers.

GCAR is the Controller of the personal information we collect. Our Data Protection Policy governs the use and storage of your personal information. You may request a copy of this policy by sending an email to our Data Protection Officer at  detailing the reason for your request.

How We Collect Your Data

At this time, you directly provide us with the data we collect. We collect data and process data when you:

• Complete the contact form or get in touch using the contact information provided.

How Does GCAR Secure Personal Data?

We have implemented organizational, technical, and administrative measures in an effort to protect Personal Data within our organization, including security controls that are intended to prevent unauthorized access to our systems, including standard operating procedures, firewalls and restricted access.

While we take these reasonable steps to secure your Personal Data from loss, misuse, interference and unauthorized access, modification and disclosure, you should be aware no security procedures or protocols are ever guaranteed to be 100 percent secure from intrusion or hacking, and there is therefore always some risk to sharing Personal Data online.

If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account has been compromised), please immediately notify us in accordance with the “complaints and How to Contact Us” sections below.

Why We Collect Personal Information

We process your personal data only for predefined and lawful purposes.

We need your personal data in order to provide you with the following:

• To send you more information about our services
• To respond to your requests for contact with us
• To maintain and improve our services.

Sensitive Information

We ask that you not send us or disclose any sensitive Personal Data (e.g., information related to racial or ethnic origin, health, biometrics or genetic characteristics) on or through the Site.

However, there are special circumstances where GCAR may collect and use sensitive Personal Data including data pertaining to race, ethnic origin, sexual orientation, sex life, religious or philosophical beliefs, genetic data, biometric data and medical or health conditions.

GCAR shall only collect and use sensitive Personal Data where permitted, and subject to heightened restrictions, under applicable law (and only after obtaining your explicit consent or authorization where so required) and where we have provided you with specific notice of such processing.

What We Do With Your Personal Information

We will process (collect, store and use) the information you provide in a manner compatible with the UK Data Protection Act 2018 (including as amended), UK GDPR, the Swiss Federal Act on Data Protection (FADP), and EU GDPR 2016 ((EU) 2016/679 relevant privacy laws named above (as such apply to you).

We will endeavor to keep your information accurate and up to date.

Your personal information is processed at our office in the United States. Storage of your information takes place at our hosted service provider located in the United States.

No third party providers or external agencies have access to your personal information, unless specifically required by law.

How Long We Keep Your Personal Information

Personal information that you voluntarily provide to us for the purposes specified previously will be kept by us until such time that you notify us that you no longer wish us to use or retain your personal information. You may do this via email to our Data Protection Officer at .

Your Data Protection Rights

Every user is entitled to the following:

• The right to access – You have the right to request us for copies of your personal data.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request us to complete information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us using the details under ‘How To Contact Us’ below.

Privacy Notices of Other Websites

The GCAR  website may contain links to other websites. Our privacy notice applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Complaints

In the event that you wish to make a complaint about how your personal data is being processed by GCAR (or third parties), or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and GCAR data protection representatives.

If you feel that your personal information has not been handled appropriately according to the law, you can lodge a complaint with your Supervisory Authority – a list can be found here: https://ictinstitute.nl/europes-data-protection-authorities/

How to Contact Us

If you have any questions about this privacy notice, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Our email:  or our DPO at: 

Or write to us at:

Changes to Our Privacy Notice

GCAR keeps its privacy notice under regular review and places any updates on this web page.