Clinical Trials Cambridge
0800 3284 195
Clinical Trials
Cambridge
0800 3284 195
Privacy Notice
GSK Clinical Unit Cambridge
Last updated: 28 June 2022
GlaxoSmithKline (GSK or we) value your privacy and care about the way in which your personal information is treated.
We want you to understand:
- what personal information we collect about you;
- how we obtain your personal information;
- how we use your personal information;
- on what basis we use your personal information;
- how long we keep your personal information;
- with whom we share your personal information;
- the countries to which we transfer your personal information;
- how we protect your personal information; and
- your rights regarding your personal information.
If you have any questions, feel free to get in touch via one of the methods set out in the Contact us
section below.
What personal information do we collect about you?
- Your basic information - such as name (including name prefix or title), gender, ethnicity, age, date and place of birth, NI number;
- Contact information - such as home and work address, email address, phone number(s);
- Professional details - such as your education, occupation, photographic ID and/or government issued identification (ID);
- Health-related information - such as personal physician information, medical diagnostic data; prescription data; biological samples, other health related information provided (e.g. health information, health risk factors including family medical history, next of kin, personal exposure and surveillance data (photographs);
- Technical Information - information from your visits to our websites (including things like the type of browser and operating system you use, access times, pages viewed, URLs clicked on, your IP address and the page you visited before navigating to our websites);
- Physical characteristics – such as your height and weight;
- Lifestyle information – such as whether you are a smoker.
How do we obtain your personal information?
We gather information about you when you provide it to us, or interact with us directly; e.g. when you complete one of our volunteer health questionnaires,
get in touch for customer support or to provide feedback, when you engage with one of our representatives or when you your register on one of our digital platforms.
Otherwise, we collect your personal information while monitoring our technology tools and services, including email communications sent to and from GSK.
How do we use your personal information?
- Determining your eligibility to participate in clinical trials
- Responding to and dealing with your queries or requests
- Performing analytics
- Direct Marketing Communications
We use automated decision making to determine your eligibility to participate in our clinical trials. This helps us to make decisions which are quick and efficient, based on the information provided by you meeting our clinical trial criteria.
You can object to an automated decision we have made, and ask that a person reviews it. Please refer to the ‘Your rights’ section for more information.
On what basis do we use your personal information?
We use your personal information because you have given your consent. Based on your consent you allow for use of your information
for the purposes of the study, further research and direct marketing. Your information is also needed to comply with legal
requirements associated with the study and to carry out scientific research.
At times we may ask for your consent to allow us to use your personal information for one or more purposes. See the Your
rights section for information about the rights that you have if we process your information on the basis of your consent.
We also use your personal information for business purposes. Your personal information helps us to operate and improve our
business and minimise any disruption to the services that we may offer to you. It also allows us to make our communications
with you more relevant and personalised to you, and to make your experience of our products and services efficient and effective.
How long will we keep your personal information?
- GSK informs me that my name has to be withdrawn
- GSK are unable to contact me by telephone, email or post
- you are not currently, or no longer, deemed suitable to join the volunteer panel, but may be able to take part in future clinical studies
- If you wish to leave the panel
As an inactive member, your data will remain for a maximum period of 3 years following inactivation. If you participate in a clinical trial your data will be stored for a minimum of 30 years.
If you are not eligible to join the panel based on the information you have provided, GSK will not retain your data.
We will also keep your personal information when we need to do so in connection with legal action or an investigation involving GSK.
At times we may ask for your consent to allow us to use your personal information for one or more purposes. See the Your rights section for information about the rights that you have if we process your information on the basis of your consent.
With whom do we share your personal information?
- members of the GSK group of companies; and
- the following trusted third parties:
- our data centre provider
- Adobe, our analytics provider
See the Protecting your personal information section for information on how we keep your personal information secure when sharing it with others.
Transfers of your personal information outside of your home country
Your personal information may be processed by GSK, its affiliated companies and GSK's trusted third party suppliers anywhere in the world, including in countries where data privacy laws may not be equivalent to, or as protective as, the laws in your home country. These countries include the United States.
We will implement appropriate measures to ensure that your personal information remains protected and secure when it is transferred outside
of your home country, in accordance with applicable data protection and privacy laws.
These measures include data transfer agreements implementing standard data protection clauses,
or GSK's Binding Corporate Rules. You can find more information about data transfer agreements
at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en, and more information
about GSK's Binding Corporate Rules at https://www.gsk.com/en-gb/about-us/policies-codes-and-standards/binding-corporate-rules/.
Protecting your personal information
We use a variety of security measures and technologies to help protect your personal information from unauthorised access, use, disclosure, alteration or destruction consistent with applicable data protection and privacy laws.
For example, when we share your personal information with external suppliers, we may put in place a written agreement which commits the suppliers to keep your information confidential, and to put in place appropriate security measures to keep your information secure.
Your rights
- ask GSK about the processing of your personal information, including to be provided with a copy of your personal information;
- request the correction and/or deletion of your personal information;
- request the restriction of the processing of your personal information, or object to that processing
- withdraw your consent to the processing of your personal information (where GSK is processing your personal information based on your consent);
- request receipt or transmission to another organisation, in a machine-readable form, of the personal information that you have provided to GSK; and
- complain to your local supervisory authority if your privacy rights are violated, or if you have suffered as a result of unlawful processing of your personal information.
Where you are given the option to share your personal information with us, you can always choose not to do so.
If you object to the processing of your personal information, or if you have provided your consent to processing and you later choose to withdraw it, we will respect that choice in accordance with our legal obligations.
This could mean that we are unable to perform the actions necessary to achieve the purposes of processing described (see 'How do we use your personal information?') or that you are unable to make use of the services and products offered by us.
After you have chosen to withdraw your consent GSK may be able to continue to process your personal information to the extent required or otherwise permitted by law, in particular in connection with research activities
If you would like to exercise your rights, please let us know by getting in touch via UK.Ireland-CPA@gsk.com
Contact us
If you have questions or requests about the processing of your personal information, or need additional
information, you can contact the Local Country Privacy Advisor at UK.Ireland-CPA@gsk.com
Data controller
GlaxoSmithKline Research & Development Limited is the controller of your personal information.
21/GR/17 V6 28 June 2022