Personal data is information about an identifiable individual; anonymous or anonymised data about an individual is not personal data.
This Privacy Notice applies when we control the purposes for which your personal data is collected and used; it does not apply when we process personal data on behalf of someone else who controls how your personal data is used.
This Privacy Notice does not apply to how we handle the personal data of current or former employees of LAB10x partner organisations. Data Protection law obliges us to:
We are LAB10x, a partnership between the University of Oxford, Oxford University Innovation Ltd, Oxford Sciences Innovation plc, Sensyne Health plc and Evotec SE, created to accelerate data-driven healthcare, from concept to innovation.
We will use your personal data only for the purposes for which we collected it, unless:
For an explanation as to how use of your personal data for a new purpose is compatible with the original purpose, please email us at firstname.lastname@example.org with ‘Personal Data Enquiry’ in the subject line of your email.
If we intend to use your personal data for an unrelated purpose, we will contact you to explain the legal basis which allows us to use your personal data for that unrelated purpose.
If we use your personal data for archiving purposes in the public interest, for scientific or historical research purposes or statistical purposes and we impose the safeguards required by the law, those purposes are treated as being compatible with the original purpose.
Unless you have requested us not to do so, we may send marketing materials to you at your home or work address. You have the right to opt out of this at any time. Please see Your Rights.
We may send emails to you to market our products and services which are similar to those which you have previously acquired or negotiated to acquire, but you can always opt out.
Otherwise we will not send marketing materials to you at your email address or by text or fax unless we have your specific consent (which you can withdraw at any time).
We will not call you for marketing purposes if you are registered with a telephone preference service or you have asked us not to use your phone number for marketing purposes.
We may share your personal data with:
We may transfer your personal data outside the European Union (the EU), but we will not do so unless:
We have appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
We limit access to your personal data to those employees, agents, contractors and other third parties of the partners who have a business need to know. They will process your personal data only on our instructions and they are subject to a duty of confidentiality.
We will investigate any suspected personal data breach and will tell the Information Commissioner’s Office and you of a breach of security involving your personal data if the law obliges us to do so.
We will keep your personal data about you only for so long as is necessary to achieve the purpose for which we have collected that data, or as required by law, or as required for in order to meet any legal, accounting, or reporting requirements.
When deciding what is the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from any unauthorised use or disclosure of your personal data, the purposes for which we use your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances you can ask us to delete your personal data. Please see Your Rights.
If we anonymise your personal data, it will no longer be personal data and we may use it indefinitely.
In certain circumstances you have the right to:
You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to our using it (see below), where we may have used your personal data unlawfully or where we are required to erase your personal data to comply with the law. We may not always be able to comply with your request for erasure for legal reasons which we will inform you about if you request erasure.
Request a restriction on the processing of your personal data: You have the right to ask us to suspend the processing of your personal data in the following circumstances:
You have the right to object, where we are relying on our legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your personal data and that those grounds override your rights and freedoms.
You have the right to object where we are processing your personal data for direct marketing purposes.
Where you have given consent to our using your personal data for a specific purpose, you have the right to withdraw that consent at any time. Your withdrawal of consent will not affect the lawfulness of any use of your personal data based on your consent before you withdraw consent.
You have the right, where you provided your personal data to us, you gave consent to our using your personal data or we used that personal data to perform a contract with you and we have processed that data by automated means, to receive the personal data you have provided to us and to have us transmit that data to another person, if it is feasible to do so.
If you want to exercise any of the above rights please email us at email@example.com with ‘Personal Data Request’ in the subject line of your email.
We try to respond to all legitimate requests within a month. It may take us longer than a month if your request is complicated or you have made a number of requests. In this case, we will notify you and keep you updated.
Normally you will not have to pay a fee to access your personal data or to exercise any other right, but, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in those circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data or to exercise any other right. This is to ensure that personal data is not disclosed to a person who has no right to receive it. We may also contact you to ask you for further information in relation to your request.
You may decide not to give us any personal data, but
Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control those third-party websites and we are not responsible for their privacy policies or statements.
This Privacy Notice does not apply to any website operated by a third party. If you visit a third party website, please read its Privacy Notice or privacy statement to find out how it uses your personal data.
We take any complaints we receive very seriously. Please bring it to our attention if you think that our collection or use of your personal data is unfair, misleading or inappropriate.
We also welcome any suggestions for improving our procedures.
This Privacy Notice was drafted with brevity and clarity in mind. It does not provide exhaustive details of our collection and use of personal data, but please feel free to contact us if you want any additional information or further explanation.
You have the right to make a complaint about the way we have used your personal data to the UK Information Commissioner’s Office (the ICO) at The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or www.ico.org.uk, but please give us a chance to address your concerns before you contact the ICO.
If you want to ask us about this Privacy Notice, please email us at firstname.lastname@example.org with ‘Privacy Notice Question’ in the subject line of your email.
We keep this Privacy Notice under review. It was last updated on 24th June 2019.
It is important that your personal data is accurate and up to date. Please let us know if your personal data changes.