Privacy Notice

Background

This privacy notice sets out how we, Net Solving Limited, 14 Barclay Road, Croydon, England, CR0 1JN uses and protects any personal information collected or processed whilst using CaseCapture. 

The website covered by this notice is data.casecapture.com

We have reviewed and updated this Privacy Notice to comply with the General Data Protection Regulation (EU) 2016 / 679 and the UK Data Protection Act 2018 (the Data Protection Regulations). 

Any future changes to our website which may affect the personally identifiable information collected or used in CaseCapture, will be communicated in an update to this Privacy Notice and made available on the CaseCapture website. 

What we collect, the source, the purpose of processing and lawful basis

CaseCapture is a private, access controlled, authorised user only, website for collecting information for use in clinical studies.

We act as a data processor for all data entered using CaseCapture by the authorised users, site administrators and study administrators.  As a data processor, we only act under the strict instructions of the data controller.  For details about how your contact data and the study data is used and processed, please contact the administrator of the clinical study.

Links to other websites

Our site does not contain links to other sites.  This is a secure and private website with access given only to authorised users. 

Recipients of your data

We use a third-party provider (sub processor) to manage the hosting of CaseCapture.  

We have a data processing agreement in place with the website hosting company, UK Fast, where our databases are managed and the clinical data is stored.  This hosting company has implemented security tools including: intrusion detection systems; strong network security and audit controls; privileged user access control systems and regular vulnerability assessment and security testing.  Their staff also have a duty of confidentiality of your data.

Security

We are committed to ensuring that your information is secure. Aside from the security in place with our hosting provider, we have internally, added physical, electronic and managerial procedures to safeguard and secure personal information used and processed within CaseCapture. 

Automated decision making

No automated decisions are made by us using the personal information entered in CaseCapture.  

Data Transfers outside the EEA

We use Google G+Suite to manage communications with you as an authorised user of CaseCapture.  Data may be stored within and outside the EEA. 

Currently no data entered into CaseCapture is sent outside the EEA.  For details on how data is used and processed please contact the administrators of the clinical study.

Your rights

You are entitled to ask about the data that is held about you, subject to certain exceptions.  This is called a Subject Access Request (SAR).  These should be made by email or in writing to the administrators of the clinical study in the first instance.  If necessary, you may contact us at the following addresses and we will forward your request to the study administrators accordingly:

Email: info@netsolving.com

Address: Data Protection Officer, Net Solving Limited, 14 Barclay Road, Croydon, England, CR0 1JN

In addition, the Data Protection Regulations provide the following rights for individuals:  (https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/)

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision making and profiling

If you would like to exercise any of your rights under the Data Protection Regulations, please contact the administrators of the clinical study.

 

Last updated: December 2019
www.dpo4business.co.uk