Privacy

The information we collect

This notice applies to all information collected or submitted on the Bioclinica website, www.Bioclinica.com. We collect information in several ways, which are described below:

On some pages, you can register to receive information on an automated, “alert” basis. The type of information that you can register to receive on an automated basis includes general information about Bioclinica, such as:

• Press releases
• News and presentations
• SEC reports
• Investor Relations calendar updates
• Annual Report / Other financials
• Video / Audio archives from our Broadcast Center

The personal information collected when you register to receive information on an automated basis is your email address. Each time you receive an automated email alert, you have the option of canceling your registration and removing your email from the database by simply clicking on the unsubscribe link at the bottom of each email alert message.

On some pages, you may opt to provide us information about yourself if you are interested (a) in serving as a Radiologist in a clinical trial; or (b) in an employment opportunity at Bioclinica. The information requested from you will be based on your area of interest.

On some pages, you can register to receive customized information. This information is generally collected on “Contact Us” forms where you can ask a Bioclinica representative to contact you in order to answer questions or provide specific information. The personal information you provide on these forms may include your name, title, company name, address, contact numbers, and email. However, only your name and email are required in order to meet your request.

On some pages, you can choose to register to receive access to webcasts, periodic newsletters, or information on a specific Bioclinica product or service. Generally, the personal information collected when you register to receive this type of information is your name, company, affiliation, and email address. This information is collected for qualification and aggregate measurement purposes only.

The Way We Use Information

We store the information you provide about yourself in a secure database in order to provide you with the information, products, and/or services you request. The information is stored for the lifetime of the database unless you request that it be removed. The information you provide us about yourself will be shared with Bioclinica employees to the extent necessary to accommodate your request. You must consent for us to share your identifiable information with third parties, who would be bound by a confidentiality agreement.

For example, if you provide your name, mailing address, telephone and email address and request more information about Bioclinica services; this information will be shared with appropriate Bioclinica personnel to fulfill your request. This information will not be shared with any outside third parties without your consent.

We use non-identifying and aggregate information about the use of our Web site to improve the navigation, content, and design of our site. This information may include, for example, the most and least requested pages and the number of users from the U.S. and other countries, among other things.

Finally, unless otherwise excepted below, we would not use your personally identifiable information provided to us online for purposes other than those you requested without also providing you an opportunity to agree or otherwise limit such unrelated purposes.

Exceptions

Except as described above, we will not otherwise use or disclose any of your personally identifiable information, except to the extent reasonably necessary: (i) to correct technical problems and malfunctions and to technically process your information; (ii) to protect the security and integrity of our Web site; (iii) to protect our rights and property and the rights and property of others; (iv) to take precautions against liability; (v) to the extent required by law or to respond to judicial process; or (vii) to the extent permitted under other provisions of law, to provide information to law enforcement agencies or for an investigation on a matter related to public safety, as applicable.

Our Commitment to Data Security

To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online.

Cookies

A cookie is a piece of data stored on the hard drive of your computer. Usage of a cookie is in no way linked to any personally identifiable information while on our site. Bioclinica uses cookies on our Web site in order (a) to allow site visitors to personalize their experience by accessing information, products, and services relevant to their areas of interest, (b) to track a user session within a subscribed product, and (c) to allow site visitors to vote only once in periodic opinion polls.

We receive IP addresses in the normal course of the operation of our Web site. An IP address is a number assigned to you by your Internet service provider so you can access the Internet. Although we do receive IP addresses, we do not use them to identify you personally or disclose them to others.

Our Commitment to Children’s Privacy

Protecting the privacy of the very young is especially important. For that reason, we do not collect or maintain information at our Web site from those we know are under 13 years of age, and no part of our Web site is structured to attract anyone under 13.

This policy outlines Bioclinica’s approach to maintaining regulatory compliance with international data protection law and guidance as relevant to its business and clinical trial support services. 

Bioclinica complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States.  Bioclinica has certified to the Department of Commerce that it adheres to the Privacy Shield Principles.  If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern.  To learn more about the Privacy Shield program, and to view our certification, please visit privacyshield.gov.

Bioclinica is an EU-US Privacy Shield certified entity and is required to ensure 1) subject Protected Health Information (PHI) 2) trial participant Personally Identifiable Information (PII) 3) employee, sponsor personnel,  investigative site and vendor contact information is confidential and their identities remain private.  The EU-US Privacy Shield is a framework for transatlantic exchanges of personal data between the European Union (EU) and the United States (US).  One of its purposes is to enable US companies to more easily receive personal data from EU entities under EU privacy laws meant to protect European Union citizens.

As an EU-US Privacy Shield certified entity, Bioclinica adheres to the following principles:

Notice - Individuals must be informed that their data is being collected and about how it will be used.

Choice - An organization must offer individuals the opportunity to choose (opt out) whether their personal information is used.

Accountability for Onward Transfer - Transfers of data to sub-processors or third parties may only occur to other organizations that follow adequate data protection principles.

Security - Organizations creating, maintaining, using or disseminating personal information must take reasonable and appropriate measures to protect it from loss, misuse and unauthorized access, disclosure, alteration and destruction.

Data Integrity - Consistent with the Principles, personal information must be limited to the information that is relevant for the purposes of processing.

Access - Individuals must have access to personal information about them that an organization holds and be able to correct, amend, or delete that information where it is inaccurate, or has been processed in violation of the Principles, except where the burden or expense of providing access would be disproportionate to the risks to the individual’s privacy in the case in question, or where the rights of persons other than the individual would be violated.

Resource, Enforcement and Liability - Effective privacy protection must include robust mechanisms for assuring compliance with the Principles, recourse for individuals.

Personally identifiable information (PII), or sensitive personal information (SPI), as used in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. When identification is impossible, i.e. where the data can be anonymized by permanently disassociating the information from the individual, such data is not considered to be personal data and therefore not subject to data protection rules.  Bioclinica does not disclose personal information to third parties unless requested to or supported by trial contract.  Bioclinica is subject to the investigatory and enforcement powers of the Federal Trade Commission and Food and Drug Administration.  If there is an occurrence where a Bioclinica employee learns of any breach of Client Confidentiality, trial participant PHI, or PII, investigative site, employee or vendor personnel contact information breaches, it is the responsibility of that employee to immediately follow critical issue escalation procedures.

In compliance with the Privacy Shield Principles, Bioclinica commits to resolve complaints about our collection or use of personal information.  EU individuals with inquiries or complaints regarding Bioclinica’s Privacy Shield policy should first contact Bioclinica at 2005 S. Easton Rd Suite 304, Doylestown, PA 18901 or see Contact Us.

Bioclinica has chosen the EU DPAs to serve as an independent recourse mechanism (IRM) for dispute resolution (i.e., have agreed to participate in the dispute resolution procedures of the panel established by the EU DPAs to resolve disputes pursuant to the Privacy Shield Framework).  Bioclinica has further committed to cooperate with EU data protection authorities (DPAs) with regards to unresolved Privacy Shield complaints concerning human resources data transferred from the EU in the context of the employment relationship.  Bioclinica maintains liability in cases of onward transfers to third parties if not supported by informed consent or contract.  However, Bioclinica may be required to provide personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.  If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact the EU DPAs for more information or to file a complaint.  The services of EU DPAs are provided at no cost to you.  There is a possibility, under certain conditions, for individuals to invoke binding arbitration.  Bioclinica Quality Assurance and Regulatory Compliance will follow Bioclinica’s standard compliance reporting strategy to ensure each incident, associated resolution and disposition pathways are documented.

How You Can Access Or Correct Your Information

You may update or remove the information you provided to us by contacting us - see Contact Us. To protect your privacy and security, we will also take reasonable steps to verify your identity before updating or removing your information. The information you provide us may be archived or stored periodically by us according to backup processes conducted in the ordinary course of business. Information stored as part of this backup process will be deleted in due course on a regular schedule.

Links To Other Websites

Our Web site may contain links to other Web sites. You should carefully review the privacy policies and practices of other Web sites, as we cannot control or be responsible for their privacy practices.

Notification Of Changes

As we provide more services on our Web site and as privacy laws and regulations evolve, it may be necessary to revise or update our Privacy Policy without notice, but we will post those changes on our Web site’s home page so our users are aware of what information we collect, use and disclose. However, we will continue to protect your identifiable information.