Privacy policy.
1. GENERAL INFORMATION
UK Cell Therapy Group Limited is committed to user privacy and customer trust. This Privacy Policy (hereinafter ‘Policy’) describes how we collect and process your personal data during your visit/registration to our website during the use of our platform and services in accordance with the relevant data protection legislation, especially the European General Data Protection Regulation (hereinafter GDPR) and the UK Data Protection Act 2018.
1.1 DEFINITIONS
Adequacy Decision – A decision issued by the European Commission that a country or region or a category of recipients in such country or region is deemed to provide an “adequate” level of data protection.
Confidential Information – means any information disclosed by either party to the other party, either directly or indirectly, in writing, orally or by inspection of tangible objects (including, without limitation, documents, prototypes, samples, plant and equipment), which is designated as ‘Confidential,’ ‘Proprietary’ or some similar designation by the Company.
Controller – refers to the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by EEA/EU.
Customer – shall mean any person, private organization, or government body that purchases, may purchase, or has purchased a UK Cell Therapy Group Limited product or service.
Data Concerning Health – means personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status.
Data Protection Officer (DPO) – means an independent data protection expert who has numerous responsibilities regarding data processing in the Company, such as: (i) monitoring an organization’s data protection compliance; (ii) informing the Company about and advising it on its data protection obligations; (iii) providing advice on data protection impact assessments (DPIAs) and monitoring their performance; and (iv) acting as a contact point for data subjects and the relevant data supervisory authorities.
Data Protection Law – shall mean the provisions of mandatory law of an EEA country containing rules for the protection of individuals with regard to the Processing of Personal Information including security requirements for and the free movement of such Personal Information.
European Union (EU) and European Economic Area (EEA) countries – The area set up by the EEA agreement, comprising the 27 Member States of the European Union and the three countries of EFTA (the European Free Trade Association), which are bound by the Agreement on the European Economic Area (EEA). The 27 Member States are Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, and Sweden. The three EFTA countries which are also bound by the Data Protection Directive, through being part of the EEA, are Iceland, Liechtenstein, and Norway.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Individual – shall mean any Customer, Supplier, or Business Partner (employee of or any person working for) and any other person whose personal Information UK Cell Therapy Group Limited processes in the context of the provision of its services.
Information/data – shall refer to knowledge communicated or received via materials and/or data produced by, procured by, or obtained for UK Cell Therapy Group that can be in electronic or physical (e.g., printed or written on various physical media) form.
Personal Data – refers to any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Processor – means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
Sensitive Information – shall mean personal data that reveals an Individual’s racial or ethnic origin, political opinions or membership in political parties or similar organizations, religious or philosophical beliefs, membership in a professional or trade organization or union, physical or mental health including any opinion thereof, disabilities, genetic CSB Information, biometric CSB Information, addictions, sex life, criminal convictions or offenses, or social security numbers issued by the government.
Supplier – shall mean any Third-Party that provides goods or services to UK Cell Therapy Group (e.g., an agent, consultant, or vendor), including Third-Party Processors.
Third Country – Any country other than the EU and EEA Member States.
1.2 IDENTIFICATION OF WEBSITE OWNER AND CONTROLLER
Pursuant to the GDPR Personal Data Protection and Digital Rights Laws, UK Cell Therapy Group Limited may be considered a CONTROLLER of your personal data. By acting as a Controller, UK Cell Therapy Group Limited determines the purposes and means by which the processing of your personal information is collected. However, before collecting your information, the Company will request your consent during registration, as it is required by legislation before the continuation of registration.
1.3. Minimum age requirement to access and use website information
Our web services are intended for individuals who are at least 18 years old. By accessing or using our website, you represent and warrant that you meet the minimum age requirement and that you have the legal capacity to give digital consent and to use the information available on this website. If you are accessing or using our services on behalf of a minor, you further represent and warrant that you are the parent or legal guardian of the minor and have the authority to bind them to these terms.
UK Cell Therapy Group Limited does not collect, process, or maintain personal data of individuals under the specified minimum age. If you do not meet these age requirements or do not have the necessary legal representation, you must not access or use our web services.
2. DATA PROTECTION CONTACT
UK Cell Therapy Group Limited has a Data Protection Officer based in the UK who is well versed in the relevant Data Protection Regulations. Users may contact them at the following email address: enquiries@ukcelltherapy.co.uk. If you have any questions or concerns regarding this Policy, please don’t hesitate to contact our DPO.
3. PERSONAL DATA PROCESSED BY VISITING AND USING OUR WEBSITE
When you visit our website and/or use our online services, your visit will be logged, and the following data may be collected:
Date and time
IP address currently used by your device
Browser type and operating system of your device, and pages accessed
The time you spend on those pages
Device identifiers and other assessment data.
Similarly, the data we request from you in the forms on our website is appropriate and strictly necessary for the following purposes:
To provide and maintain our service, including to monitor the usage of our service.
To manage your account: to manage your registration as a user of the service. The personal data you provide can give you access to different functionalities of the service that are available to you as a registered user.
For the performance of a contract: the development, compliance, and undertaking of the purchase contract for the services you have purchased or of any other contract with us through the service.
Handling and responding to your contact, query, and/or complaint requests.
Send you communications that include relevant information about the contracted service.
Registering for our webinars
Managing your subscription to our email newsletter.
The processing is legally based on legitimate interest, i.e., it is in our legitimate interest to protect our website and to improve the quality of our services. The purpose of collecting this data is optimizing and improving our website as well our online services.
UK Cell Therapy Group Limited has taken appropriate measures to ensure that the data provided to us during is adequately protected in accordance with data protection regulations. Your personal data is only recorded if you provide it to us on your own account, e.g., as part of a registration, a survey, or an online application.
If you decide to subscribe to our newsletter, we inform you that your personal data will be processed until you unsubscribe from the newsletter by sending an email to enquiries@ukcelltherapy.co.uk. Please be advised that you will not receive any more newsletters from us after you unsubscribe. This subscription will have a duration of 2 years, after which period we will send you an email requesting the renewal of this subscription.
The personal data you have provided in the registration form will only be processed to respond to your request and further support you in using our services. Filling out and submitting the contact form indicates an affirmative action by which you have given your consent for the data processing.
The following personal data will be collected:
Full name;
Phone number;
Email;
Company;
Role (optional); and
IP address.
Medical information
You can also let us know your areas of interest and you can leave a message with suggestions or questions. Note: In this field, please do not provide additional personal data, only those listed above in the appropriate fields.
The information that you provide when completing your profile on our website will only be processed for creating and maintaining your customer account. Your personal data will only be recorded until you cancel your subscription. If you proceed with the cancellation, your personal data will be deleted without undue delay except where we are legally obliged by law to further store your data. Please note that you will no longer be able to use your customer account after it has been deleted. If you change your mind later, please proceed with a new registration.
4. LEGITIMACY FOR DATA MANAGEMENT
Regarding the processing of user data by UK Cell Therapy Group Limited, it will be legitimized by the explicit consent given by the interested party for the processing of his/her personal data with the intended purposes. The unequivocal and independent consent for each processing purpose is manifested when accepting the Privacy Policy.
Furthermore, by using our services and providing your personal information, including but not limited to sensitive data such as health-related information or biometric data, you expressly consent to the collection, storage, and processing of such information by UK Cell Therapy Group Limited. We may use this sensitive data for the purposes of providing and improving our services, conducting research, complying with legal obligations, and as otherwise described in our Privacy Policy.
5. COOKIES
When you visit our website, we use ‘cookies’ to make your visit more enjoyable, in addition to allowing you to use certain functions, in accordance with GDPR and the ePrivacy Directive (Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002).
Cookies are small text files that websites store/place on your device (such as a laptop or smartphone) as you are visiting a website. These files contain information about the user’s interactions with the website, preferences, and other data. They are processed and stored by your web browser. Cookies serve various purposes, including improving the user experience, enabling website functionality, and providing analytics to website owners. Don’t forget that you can generally easily view and delete the cookies.
Some of the cookies we use are deleted after your browser session ends. However, other cookies can remain on your device and enable us or our partner companies to recognize your browser on your next visit. It is possible to configure your browser so that you can be informed about all kinds of cookies that are in use. In this way, you can individually allow access to certain cookies while excluding the other ones. If you do not accept certain types of cookies, it is possible that certain functionality on our website will be limited.
To find out more, see the help function of your internet browser. In addition, for more information about your rights under the e-Privacy Directive click on the following link: EUR-Lex – 32002L0058 – EN – EUR-Lex
6. INTERNATIONAL DATA TRANSFER AND DATA LOCATION (RECIPIENTS)
Third-party service providers who process your personal data may be located in countries within and outside the European Union (EU) and the European Economic Area (EEA). Whenever possible, we aspire to ensure that these providers have an adequate level of data protection, even if personal data is transferred to a country outside the EEA for which there is no EU Commission Adequacy Decision.
Please note that transfers of personal data to other recipients are not carried out, except when we are required to do so by law. Your data may also be disclosed to public authorities or other organizations for the purpose of meeting our legal obligations.
If you need more information about appropriate safeguards for international data transfer or a copy of them, please contact our DPO, who can be contacted through the channels provided above in item 2.
We would like to emphasize that your information is processed and stored only in the EEA and the UK in the company’s internal system. We emphasize that we have a hosting for the website; however, no personal information is collected and processed by this hosting.
We will comply with applicable data protection laws in the event that we need to transfer your personal data outside the EEA. Below are some of the mechanisms we may use when transferring your personal data abroad:
Your personal data is transferred to a country the European Commission officially recognizes as ensuring a suitable level of personal data protection.
We reserve the right to use specific contracts approved by the European Commission which afford personal data the same protection as they have in Europe (known as EU Standard Clauses).
7. DATA RETENTION
Your personal data provided to us via our website will only be stored until the purpose for which it was processed has been fulfilled or until you withdraw your consent. Retention periods under commercial and tax law must be observed in accordance with the customs and laws of your locality.
In general, your data will be recorded in our internal system for subscription and/or registration for two years, after which period we will send you an email requesting the renewal of this subscription and/or registration. However, storage periods may also be amended due to our legitimate interest (e.g., to guarantee data security, to prevent misuse or to prosecute criminal offenders) to the exercise or defense of legal claims under applicable law. This period will in any case be limited, and we will contact you to have your registration/subscription renewed.
8. YOUR RIGHTS AS A DATA SUBJECT
As a data subject, you have rights that you may request and that UK Cell Therapy Group Limited highly respects, according to the following descriptive list:
Right to receive information about the data processing.
Right to access information about your personal data that we hold about you;
Right to demand the rectification of inaccurate data or incomplete data, in addition to changes to your personal data. Nevertheless, you may also update your personal data directly in your account settings whenever is possible;
Right to request the erasure of your personal data (the right to be forgotten) you can ask to delete your personal data, after they have been blocked;
Right to demand us the restriction of the data processing under certain circumstances;
Right to data portability and receive the personal data concerning the data subject in a systematic, commonplace and machine-readable format and to demand the transmittance of these data to another controller;
Right to object you can withdraw your consent to our data processing of your personal data by objecting to the further procedure.
Right to withdraw a given consent at any time to stop a data processing that is based on your consent; and
Right to file a complaint with the competent supervisory authority according to your location.
You can exercise your rights by writing to UK Cell Therapy Group Limited by emailing enquiries@ukcelltherapy.co.uk.
However, we recall that depending on the circumstances and the nature of your request it may not be possible for us to do what you have asked. For example, where there is a statutory or contractual requirement for us to process your personal data, it would interfere with our legal obligations if we were to stop.
8.1 PROCEDURE
Any requests to exercise the data subject’s rights should be sent to the DPO via email to enquiries@ukcelltherapy.co.uk.
Prior to fulfilling the request of the individual, UK Cell Therapy Group Limited may require them to:
Specify the categories personal information to which he or she is seeking access;
Indicate, to the extent reasonably possible, the system in which the individual’s data is likely to be stored;
Specify the circumstances in which UK Cell Therapy Group Limited obtained their information;
Provide proof of your identity when UK Cell Therapy Group Limited has reasonable doubts concerning it, or provide additional information enabling your identification;
In case of a request for rectification, deletion, or restriction, specify the reasons why the personal data is incorrect, incomplete, or not processed in accordance with UK Cell Therapy Group Limited policies or data privacy legislation.
8.2 RESPONSE PERIOD
Within one calendar month of UK Cell Therapy Group Limited receiving the request, the Company shall inform the individual in writing or electronically either:
of ours position regarding the request and any action the UK Cell Therapy Group Limited has taken or will be taking in response; or
of the ultimate date on which you will be informed of UK Cell Therapy Group Limited position and the reasons for the delay, which shall be no later than two calendar months after the original one-month period.
8.3 DENIAL OF REQUESTS
UK Cell Therapy Group Limited may deny your request if (listed but not limited):
the request does not meet the requirements of the item (1) above;
the request is not sufficiently specific;
the identity of the relevant individual cannot be established by reasonable means, including additional information they provided; or
we can reasonably demonstrate that the request is manifestly unfounded or excessive.
9. PRIVACY POLICY EXTENSION
This Privacy Policy refers only to the data collected and processed by our website and its subdomains and applies to the entire company, including all subsidiaries. If you are one of our workers, employees, service providers, contractors, subcontractors or otherwise maintain a contractual relationship with UK Cell Therapy Group Limited, please contact your manager or the responsible parties, as per our contractual relationship and/or consult our internal (and/or local) privacy policies related to your area of expertise or partnership, which can be found through the channels you have access to.
10. DISCLOSURE OF YOUR PERSONAL DATA
UK Cell Therapy Group Limited may share your personal information in the following situations:
With third-party service providers: We may share your personal information with Service Providers to monitor and analyze the use of our Service. We will seek to share the minimum amount necessary. We may use third-party tools to monitor and analyze the use of our websites, and to automate certain processes related to the development and operation of our websites.
With affiliates: We may share Your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with us.
With business partners: We may share your information with our business partners to offer you certain products, services, or promotions.
With your consent: We may disclose your personal information for any other purpose with your explicit consent.
Law enforcement: Under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (eg, a court or a government agency).
Other legal requirements: we may disclose your personal data in the good faith belief that such action is necessary to: (i) Comply with a legal obligation; Protect and defend the rights or property of the Company; (ii) Protect vital interests of the data subject or of another natural person; (iii) Prevent or investigate possible wrongdoing in connection with the Service; (iv) Protect the personal safety of users of the service or the public; Protect the public interest or to exercise official authority; (v) Protect against legal liability.
11. GOOGLE ANALYTICS
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.
You can opt-out of having made your activity on the service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.
12. SOCIAL MEDIA
UK Cell Therapy Group Limited may have profiles on the main social media sites (LinkedIn, Instagram, Facebook, Twitter, YouTube, and Blog) and acknowledges that it is the controller for processing the data of its users, followers and people who post comments on these sites. Equally, it disclaims any liability whatsoever for comments made by users and followers on its social media profiles.
UK Cell Therapy Group Limited may use the profiles specified above to share information with its customers and other stakeholders on topics it thinks they may be interested in.
13. LINKS TO OTHER WEBSITES
Our website may contain links to other websites that are not operated by us. If You click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.
14. SECURITY MEASURES IN PLACE FOR PROCESSING AND STORAGE
UK Cell Therapy Group Limited ensures the implementation of the appropriate technical and organizational measures to ensure the safety and protection of personal data, and to prevent the unauthorized or unlawful processing of personal data, and against accidental loss, destruction, or damage. To ensure these measures are met, UK Cell Therapy Group Limited will undertake regular risk assessments, internally and with third-party processors, to identify any potential threats and vulnerabilities and adapt their security measures accordingly.
15. UPDATES TO THIS PRIVACY POLICY
We may update our Privacy Policy from time to time.