The Privacy Notice is for this website [http://researchhub.dsru.org] and served by the DSRU and outlines the privacy of Users. The DSRU regards the privacy and security of data and information very seriously. The Notice sets out the different areas where User privacy is concerned and outlines the obligations & requirements of the users, the website and website owners and the way the website processes, stores and protects User data.
The DSRU collects personal data during the process of a data subject or a person providing data regarding a data subject taking part in an online research study as follows:
The data collected during employment consists of:
The purposes for which the data is being processed or will be processed are to:
The DSRU will only use the personal identifiable data for account related activities and what the User and/or data subject has consented the personal identifiable data can be used for. The research data will be used for study specific analysis being conducted which will be outlined in the study protocol and study data management and statistical analysis plans. The DSRU may process personal data without consent only when required or permitted by law.
The DSRU has Information Security Policies and Procedures to protect and secure the personal data from being accidentally or maliciously lost or destroyed, altered, disclosed or used for unauthorised purposes or accessed by unauthorised personnel. The DSRU has security measures in place to ensure that only authorised personnel have access to the data.
When the data is shared with third parties, the DSRU require all third parties to have appropriate technical and organisational security measures in place to assure the data is protected and secured in accordance with current data protection legislation. The data will only be used by third parties for specified purposes and in accordance with written instructions.
The DSRU will notify the Information Commissioner’s Office (or any other applicable supervisory authority or regulator) and the applicant of any suspected breach in accordance with current data protection legislation.
The DSRU will not share the personal identifiable data with third parties unless specific consent is given. Study specific administrative staff and system support staff may need access from time to personal identifiable data to resolve system issues or for other administrative duties.
The research data may be shared within the DSRU with members of the research department for analysis purposes only. Research data where personal identifiable data has been removed may be shared with third parties for analysis purposes and this will be clearly outlined in the study data sharing plan.
Google stores information collected by cookies on servers in the United States. Google may transfer this information to third-parties where required to do so by law, or where such thirdparties process the information on Google’s behalf.
The DSRU will retain personal data for as long as is necessary to fulfil the purposes for which it were collected and processed and in accordance with the criteria outlined in the data subject consent form. Anonymous research data will be retained in accordance with the Medicines and Healthcare products Regulatory Agency (MHRA) guidance and may be kept for up to a period of 15 years after completion of the study but at least for 2 years after the granting of the last marketing authorisation in the EC.
Data subjects have a number of statutory rights, subject to certain conditions and circumstances, as follows:
To exercise any of these rights, contact the DSRU’s Head of Data Management (details below). If it is believed that the DSRU has contravened current data protection legislation with regard to the data then a complaint can be made to the Information Commissioner’s Office (ICO) at any time. The ICO is the UK supervisory authority for data protection issues.
Any general questions on DSRU Information Security or regarding an individual’s rights under current Data Protection legislation can be directed to:
Shayne Freemantle, Head of Data Management, DSRU, Bursledon Hall, Blundell Lane, Southampton SO31 1AA. Tel: 02380 408600. Email: email@example.com.
DSRU’s nominated Data Protection Officer is:
January 2020 Edited & customised by: DSRU. Company Number 327206 (England and Wales). Registered office address: Bursledon Hall, Blundell Lane, Southampton, SO31 1AA