Market Research Privacy Policy

Market Research Privacy Policy

Introduction:

This Research Privacy Policy (the “Policy”) provides information about what personal information pharma-insight collects about you and how it is used.

This Policy describes how we may obtain personal information, the types of personal information we may obtain, how we use, share and protect personal information, the rights of data subjects in relation to their personal information, and how they relate to our privacy practices can contact us.
This policy applies only to personal information related to research. For information about the privacy policies of employees or agents of our customers, vendors and other entities with whom we do or may do business, see our Business Partner Privacy Policy.

This Privacy Policy is subject to change at any time without specific notice to you. You are responsible for regularly reviewing the Policy. Your use of the Sites following the posting of any changes constitutes your acceptance of, and your obligation to comply with, such changes.

This privacy policy was last modified on April 24, 2023.

Information about pharma insight:

pharma-insight is the trading name for the market research activities conducted by M3 USA Corporation and its affiliates, including M3 (EU) Ltd, Qualitative and Quantitative Fieldwork Services AB (QQFS), Ekas Marketing Research Services (Ekas), M- Panels Research Services Private Limited (m360 Research), pharma-insight GmbH, Med Planet and Michael Allen Company.

pharma-insight maintains a board whose members participate in “activities” (including market research, non-interventional studies, observational studies and other surveys) on behalf of our customers. This privacy policy applies to the products and services offered by pharma-insight.

The types of personal data we may collect and process:

pharma-insight collects personal data about its members and the people involved in our activities. We use this personal information to provide you with services as described below. We do not sell personally identifiable information and we only share it with third parties who help us provide our services, unless you give us additional permission.

Personal information about you that you provide to us upon registration:

We collect the personal information you provide on the registration form: your name, address, phone number, email address and, if you are a healthcare professional, information about your professional activity so that we can tailor invitations to participate in activities can be sent in a targeted manner. (See “Personal Information You Provide to Us in Your Member Profile” for more information on how we select activity invitations for you.)

We verify your identity through our partner company Yoti (https://www.yoti.com/) who collects an ID and a biometric self-portrait. This is part of the registration process. We also use your information about your employer to contact them as part of the screening of healthcare professionals.

Personal data that you provide to us in your member profile:

Before starting activities or on the member website, pharma-insight collects additional personal data from you. These are used to invite you to participate in activities that you are most likely to be interested in and eligible for. For example, for doctors, this is information about their medical experience and the types of patients they treat. For patients, this data includes information about your medical condition(s), which may also include sensitive personal data (i.e. personal data belonging to special categories).

 

Personal data that you provide to us as part of and immediately before or after online activities:

During the activities you should not be asked to provide personal data. However, pharma-insight maintains systems that control access and determine outcomes (e.g. whether you have completed the activity or not) and therefore we need to collect personal data before and/or after the activity. This type of data is not directly associated with Activity Data and is only shared with third parties with your express consent and/or as set forth in this Policy. (See also “Payment Details You Provide Us for Compensation Payments” and “Personal Information We Retain Long-Term.”)

Online activities performed for pharma-insight may use websites provided by pharma-insight or by third parties. In the latter case, the personal data collected will be governed by the privacy policy of the operating company. If you participate in other types of market research with pharma-insight, for example discussion groups or telephone surveys, you will be specifically asked for your consent prior to the necessary processing of your personal data.

Personal data related to your previous involvement in activities:

We collect and store records of activities that you have been invited to participate in, whether you have answered, are eligible, or have completed all or part of them. We retain this information so that we can make it available through the Sites and respond to member inquiries. From time to time, we may also send you invitations to new jobs based on your participation in previous jobs.

We use this data in aggregate form to better understand how many individuals of certain types may participate in future activities and to gain insight into participation trends and patterns.

In addition, we keep records of any data quality issues in the information you provide in the context of an activity so that we can control the quality of the data we provide to clients. This may affect your invitations to future activities.

Payment details you provide to us for compensation payments:

We collect and use specific personal information to enable us to process the payment of your remuneration for work. The personal information we require depends on the payment method, but bank account information, your name, postal address and email address may be collected. This information is only used to process those payments, but it may be shared with partner companies that process payments for us. (For example, we need to provide our bank with information about your bank account in order to make transfers to your account.) This personal information is also retained for financial reporting, auditing and tax purposes.

Personal data we receive from third parties:

Sometimes clients give us lists of healthcare professionals that clients want us to include or exclude from specific activities. We also subscribe to various lists of healthcare professionals against which we validate registrations and assign different unique identifiers to help handle duplicate registrations, match against client lists and comply with legal (in France) reporting obligations. Lists of healthcare professionals are also used for direct marketing outside the EU.

Our partner company Yoti provides us with detailed information that it collects as part of the verification process during registration. This includes, for example, information such as date of birth, gender, citizenship, address and identification documents.

Personal data that we keep long-term:

In order to conduct its business, pharma-insight needs to keep certain personal data about former members on a long-term basis. We have limited the personal information retained and the circumstances in which it is needed to the following:

  • Instructions from people not to email them
  • Instructions from people that pharma-insight is not allowed to contact them
  • Persons who have objected to the processing of their personal data by pharma-insight (if there is no overriding interest that we continue to do so)
  • Individuals who have violated the Sites Terms of Use, including those suspected of engaging in fraudulent behavior

This personal information will not be shared with others and will only be used to comply with your instructions or to prevent future participation in activities.

Personal data that we assign to you:

We use various public information sources to compile data about healthcare professionals who we believe may be suitable for participation in certain activities or who may wish to become a member of pharma-insight. Such information includes, for example, your name, contact information (address, telephone number(s) and e-mail address) and your medical specialty.

Personal Data generated from your use of Third Party Platforms:

Your personal data may become known through your use of the websites and services of third parties connected to pharma-insight. These websites are not under our control and you should read their privacy statements: LinkedIn, Twitter, Facebook, pharma-insight Blog (WordPress)

Purpose and legal basis for processing your personal data:

This data is used to manage our contact with you, for example to avoid multiple attempts to contact you in relation to the same services or to ensure that you are not contacted again after you have informed us that you are not participating in our services are interested.

We rely on the following legal bases when providing these services to you:

  • Where we have a legitimate interest (i.e. a valid business reason) and where we have carefully balanced your individual rights against these needs:
  • to fulfill a contractual obligation we have to you and/or
  • Your Consent to Direct Marketing.

We will only process your personal data for the purposes for which it was initially collected. If we process the personal data for a new purpose, we will ensure that it is either compatible with your original purpose or, alternatively, obtain your consent.

How we use the personal data we receive:

We may use the personal data received for the following purposes:

  • managing our existing and prospective relationships;
  • Communication with participants in market research projects for marketing and for sending newsletters and current information about the company;
  • Processing of remuneration payments;
  • protecting and defending the interests of pharma-insight;
  • Compliance with relevant legal regulations, industry standards and our policies.
How we may share personal information:
  • Affiliates of pharma-insight where it is reasonably necessary or desirable for pharma-insight to pass on the personal data to them
  • Service providers commissioned by pharma-insight to provide services, in particular IT service providers. Service providers may not use the personal data for their own purposes and may not pass on the data unless written consent has been given in each individual case.
  • Law enforcement and other governmental authorities where required by law or equitable to protect our rights, property and safety or those of others. This includes lawful requests by public authorities, including for national security or law enforcement purposes.
  • Our customers or carefully selected partners who, if possible, only receive anonymous data. No personally identifiable information will be shared without your consent.
Links to other websites:

Our websites may contain links to other websites. However, if you have used these links to leave our website, you should note that we have no control over those other websites. Therefore, we cannot be responsible for the protection and privacy of any information which you provide while visiting other websites and such other websites are not governed by this privacy policy. You should exercise caution and read the privacy statement of the website in question.

International Data Transfer:

Within pharma insight:

pharma-insight strives to maintain appropriate safeguards to ensure the privacy and security of your personal information and will only use it in ways consistent with your relationship with pharma-insight and the practices outlined in this Privacy Policy. Because we do business worldwide, it may sometimes be necessary to transfer your personal data to a country outside of your country of residence.

pharma-insight uses physical and cloud servers in the UK, EU, US, India and Australia. Personal data in the UK and EU will only be stored and processed in the UK, EU or US.

Standard Contractual Clauses:

For transfers outside the EEA and UK, pharma-insight uses EU Standard Contractual Clauses or UK International Data Transfer Agreements to provide additional protection for data transferred from the EEA and UK to countries outside of these locations.

To customers and partners:

As explained in this Privacy Policy, we may from time to time share limited information with our customers or carefully selected partners. In doing so, your personal data may be transferred to countries outside the EEA, the United Kingdom or Switzerland. In this case, the legal restrictions of the General Data Protection Regulation (GDPR) are complied with and pharma-insight retains control over the data on a contractual basis, including through standard contractual clauses.

How we protect personal data:

We maintain appropriate technical and organizational safeguards to protect Agents’ personal information against accidental, unlawful or unauthorized destruction, alteration, disclosure or use, or accidental, unlawful or unauthorized loss of or access to it. We continually update and test our security technology. We limit access to your personal information to those employees who need such access to provide you with benefits or services. In addition, we train our employees to make them aware of the importance of maintaining confidentiality and ensuring the confidentiality and security of your personal data.

How long we keep your personal data:

We retain personal information for as long as is necessary to fulfill the purposes for which it was collected (see “How we use the personal information we receive”), unless a different period is required by law. Your personal data can be kept for ten years after the end of the employment relationship.

Privacy Policy changes and updates:

Because our organization, membership, and benefits change from time to time, it is to be expected that this Privacy Policy and our Terms of Use will change as well. We reserve the right to change the Privacy Policy and Terms of Use at any time and for any reason without notice to you other than by posting the revised Privacy Policy and Terms of Use on this website. We may periodically email reminders of our Policy and Terms of Use, and we will notify members of material changes thereto by email. However, you should frequently review our website for the most current Privacy Policy and Terms of Use and any changes that may have been made thereto.

Your rights:

The European Union General Data Protection Regulation, the UK Data Protection Act, the California Consumer Privacy Act and the data protection laws of other countries grant certain rights to data subjects in the EEA, the United Kingdom, the United States and Switzerland. A statement of these rights is available at the following locations (in English): (i) the EU GDPR website, (ii) the UK Information Commissioner’s Office, (iii) the website of the California Department of Justice and (iv) on the website of the Federal Data Protection and Information Commissioner

Additional information for California residents can be found in our California Privacy Policy.

If you want to be sure that pharma-insight is processing your personal data, or if you want to see the personal data that pharma-insight may have about you, please contact our data protection officer.

You can request information about:

  • the purpose of the processing;
  • the legal basis for this processing;
  • the categories of personal data and the data subject;
  • information about the nature or identity of third parties with whom your information may be shared and how that information is protected;
  • the source of the personal information (unless you have provided it directly to us); and
  • how long the data is kept.

You have the right:

  • to obtain information about your personal data
  • to have incorrect personal data corrected
  • request the erasure of personal data
  • restrict the processing of your personal data
  • to object to the processing of your personal data
  • on data portability
  • to refuse the transfer of data to third parties, unless there is a legal reason for doing so (see “How we may share personal data”)
  • refuse direct mail
  • reject automated decisions

If you wish to exercise your rights, please contact the data protection officer in writing at [email protected].

Upon request, we will provide you with appropriate information about your personal data free of charge. pharma-insight will provide you with the information within a reasonable period of time. If you are denied access for any reason, pharma-insight will tell you why access was denied.

Contact information:

If you have any questions about this privacy policy, please email pharma-insight’s Data Protection Officer at [email protected].

For any other questions about your account, changing preferences, survey fees, or our services, please email [email protected].