You may also contact our data protection officer responsible for your country or region, if applicable, by email at: firstname.lastname@example.org.
For submitting your privacy right requests: please contact us via: UKBusinessAnalytics@its.jnj.com.
For updating your marketing communication and/or reminder preferences: please contact us via: email@example.com.
Unless we expressly request it, we kindly ask you not to provide us with personal information of individuals considered as minors in your country of residence. In cases where the collection of Personal Information from minors is required, we will collect the prior consent of the parent or legal guardian, in such event, instructions for obtaining the parents’ or legal guardian’s consent will be provided separately.
We collect and process different types of information. Some of the information we collect (e.g. your first name, last name or address) will be Personal Information (also known as ‘personal data’ and ‘personally identifiable information’). In addition, where allowed by applicable law, we may use and disclose information that is not in personally identifiable form for any purpose. If we combine information that is not in a personally identifiable form with information that is identifiable, we will treat the combined information as personal information.
Unless we specifically request or invite it, we ask that you not send us, and you not disclose, any special categories of personal information also known as sensitive personal information (e.g., Social Security numbers, information related to racial or ethnic origin, political opinions, religion or philosophical beliefs, health or medical conditions, sex life or sexual orientation, criminal background, or trade union membership, or biometric or genetic data) on or through our services or otherwise to us.
Please note that, to provide our services and for identity verification purposes or other specific purposes which we will inform you about and ask for your prior and explicit consent, we may expressly ask you submit government identifiers, medical practitioner registration numbers, credentialing photographs, race/ethnic origin, and trade-union memberships, if applicable.
We may collect information from you, from publicly available sources, receive it from third-parties and/or our affiliates, or we and/or our service providers may collect information automatically as you navigate around our services:Click for more detail on our information collection
We use and disclose the information you provide to us as described to you at the point of information collection.
Depending on the applicable law, we may rely upon your consent, our legal and contractual obligations and/or our legitimate interests to process your personal information. We will ask for your consent separately for any processing that is based on consent. The following paragraphs contain further details:Click for more detail on why we collect your information
We may disclose your information with third parties. Disclosure of your information to third parties may involve cross-border transfer of your information where third parties are located in a different country. Some of the said third parties may be located in the US. Please see the "International Transfer of Your Information" section for more information. The types of third parties we may share your information with include:Click for more detail on the third parties with whom we may share information
Your personal information may be stored and processed in any country where we have facilities or service providers, and by using our services or by providing consent to us (where required by law), your information may be transferred to countries outside of your country of residence, including to the United States, which may provide for different data protection rules than in your country. Nonetheless, appropriate contractual and other measures are in place to protect personal information when it is transferred to our affiliates or third parties in other countries.
Some countries outside your country of residence are recognised as providing an adequate level of data protection. The full list of these countries is available here for the UK or here for the European Economic Area (EEA). For transfers to countries not deemed adequate, we have ensured that adequate measures are in place, including by ensuring that the recipient is bound by Standard Contractual Clauses, to protect your Personal Information. You may obtain a copy of these measures by contacting our data protection officer in accordance with the “Contacts” section above.
We will retain your personal information for as long as needed or permitted considering the purpose(s) for which it was obtained. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide our services to you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable considering our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).
We seek to use reasonable organizational, technical, and administrative measures designed to protect personal information under our control. However, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you have with us has been compromised), please immediately notify us in accordance with the “Contacts” section above.
To the extent that these rights are provided to you depending on the applicable law of your country, you have the following privacy rights:
When processing is based on the basis of your consent, you have the right to withdraw your consent at any time. In particular, you may opt out of or, if applicable, withdraw your consent to:
While we highly value your individual rights, there are some circumstances where it may not be possible for us to do what you have asked. For example, if we are unable to authenticate the identity of the person submitting a request, we will not be able to validate effect to your requests. In addition, there are statutory and contractual requirements that may mandate us to continue to process and store your information. In these circumstances, we are bound to fulfil these legal obligations and will be unable to fulfil your request. In this case, you will be provided with an explanation why we cannot fulfil your request.
Making a request
If you wish to make a request regarding your rights, please see the "Contacts" section. If you are using our online service, you may also log on to your account to update your profile.
We will respond to your request as soon as reasonably practicable and no later than one month after receipt. If circumstances cause any delay in our response, you will be promptly notified and provided with a date for our response.
You may lodge a complaint with a supervisory authority competent for your country, habitual residence, or region, your place of work or the place of the alleged infringement. Please click here if you need the contact information for such authorities.
Date of Preparation: July 2023