Notice on the processing of personal data
This website is owned, operated, and provided by Veeda Clinical Research Limited, a company within the meaning of the Companies Act, 2013 and having its Registered Office at Shivalik Plaza-A, 2nd Floor, Nr. I.I.M., Ambawadi, Ahmedabad – 380 015 Gujarat, India (hereinafter referred to as “Veeda”, “Company”, “we”, “us”, “our”); who is also responsible for operating and managing it.
The use of the website www.veedalifesciences.com (hereinafter the “Website”) is subject to the present Data protection notice (hereinafter the “Data protection notice”).
References in this Data protection notice to “you” or “your” are references to individuals whose personal data we process, i.e., users (natural persons browsing or using the Website).
In this Data protection notice, “personal data” means any information that enables you to be identified, directly or indirectly, as an individual, in particular by reference to an identifier, such as your name, location data, an online identifier (e.g., your IP address), etc.
We comply with applicable regulations on personal data protection, including with the General Data Protection Regulation EU 2016/679 (the “GDPR”), Directive 2002/58/EC of the European Parliament and of the Council concerning the processing of personal data and the protection of privacy in the electronic communications sector, as well as with directives and guidelines of the European Data Protection Board.
By using the Website you declare and acknowledge that you have been informed about the processing of your personal data in the context of the use of our Website as described in the present Data protection notice.
We may update this Data protection notice from time to time (e.g., to reflect a change in the applicable legal framework or a change in our practices) and will revise the date at the top of this document to reflect the date when such update occurred. You should check frequently for updates. By accessing the Website after the effective date of the Data protection notice, you are deemed to have reviewed and accepted to our then-current Data protection notice.
Company is committed to respecting and protecting your personal data. The Data protection notice describes how the Company, under its capacity as controller (within the meaning of the GDPR), processes your personal data when you contact us or use the Website or one of the Company services.
When you visit and use the Website we collect and process certain personal data, to be able to offer access to the Website and its functionalities and to offer the Company services via the Website.
The personal data that we collect and further process about you, are collected directly from you and the types of personal data depend on the context of your interaction with us and the Website.
The Company collects and further processes personal data through the Website for the following purposes:
We may also process aggregated data, such as statistical or demographic data, for any purpose, including for service/ product improvement and development. While aggregated data may be derived from your personal data, these are not considered personal data, as they do not directly or indirectly reveal your identity (e.g., we may aggregate your usage data to calculate the percentage of users accessing a specific Website feature); however, if we combine aggregated data with your personal data so that it can directly or indirectly identify you, we shall treat the combined data as personal data, which will be used in accordance with this Data protection notice.
We process your personal data when we have a legal basis for such processing, only if and to the extent that at least one of the following applies:
How we use your personal data depends on which functionalities of our Website you use, how you use those functionalities. We use the data that we collect about you to provide and personalize the Company services. We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or otherwise significantly affecting you.
Where we have a statutory duty to collect your personal data (for instance, for purposes of compliance with applicable legislation) or under the terms of a contract that we have with you and you fail to provide the personal data when requested, we may not be able to perform the contract and offer you access to the Website functionalities and the Company services.
We engage external service providers, who act as processors on our behalf and under our instructions, to provide certain services, including IT and system administration services, for instance, data hosting services, marketing communications services, IT support services.
To the extent required, we may share personal data with law enforcement authorities, government authorities, competent independent regulatory/ supervising authorities, competent courts and other judicial authorities, our professional external advisers, counsels or consultants, including lawyers, auditors, accountants and insurers providing relevant services to us. To the extent required and permitted by applicable legislation, in case of a merger or acquisition, your personal data may be shared with third parties being involved in the merger or acquisition or in a commercial transaction, where we are seeking financing, investment, support or funding.
Your personal data processed for the aforementioned purposes will generally be retained for as long as it is necessary to fulfil the purposes we collected it for, e.g., for as long as needed to provide you with Website functionalities. Once the data processing purpose is completed, we will either delete or anonymize your personal data, unless statutory retention requirements apply (e.g., to comply with regulatory and accounting requirements, or for the establishment or defense of legal claims). Where the legal basis for processing your personal data is your consent, upon withdrawal of your consent, your personal data will be deleted or anonymized, unless statutory retention requirements apply (e.g., for the establishment or defense of legal claims).
Considering the state of the art, the costs of implementation and the nature, scope, context and purposes of processing, as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing.
Under the conditions provided in the relevant legislation, you have the following rights regarding the protection of your personal data:
Right of access: You may contact us in order to be informed and receive explanations as to whether we process personal data that concern you, the categories of such data, as well as how we process them. You can also request a copy of your personal data which we process.
Right to rectification: If you believe that your data are inaccurate or are incomplete, you have the right to request the rectification or the completion thereof.
Right to erasure: Under appropriate circumstances, such as, when the data are no longer necessary or if you have withdrawn your consent, you can request us to proceed with erasure of the data.
Right to restriction of processing: If you believe that your data are inaccurate or that processing is unlawful or that we no longer need the data or you have objections to the automated processing (if applicable), you have the right to request the restriction of processing.
Right to object: You may object to the processing of your personal data by the Company on grounds that concern you and relate to your particular situation, unless, inter alia, there are compelling legitimate grounds for the processing which override your interests, rights and freedoms. You also have the right to object when a decision concerning you is based solely on automated processing, including profiling, and this decision produces legal effects concerning you or significantly affects you (exceptions provided by law).
Right to data portability: You may request to receive the data concerning you in a structured, commonly used and machine-readable format, as well as to transfer those data to another organization (controller), which you will indicate to us.
Right to withdraw your consent: You may withdraw your consent at any time, without your withdrawal affecting the lawfulness of the processing based on your consent before its withdrawal.
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with regard to matters that concern the processing of your personal data by Company, before a supervisory authority in the European Union, in particular in the Member State of your habitual residence, your place of work, or where the alleged infringement occurred. A list of supervisory authorities and their contact details can be found here: edpb.europa.eu/about-edpb/about-edpb/members_en
If you have concerns or questions regarding this Data protection notice or if you want to exercise any of your rights mentioned in the “Your rights” section, please contact us at dpo@veedalifesciences.com.