1. Who is responsible for your data
2. Personal data we collect about you
2.1 Sensitive personal data
3. How and why we use your personal data
We use your personal data for the following purposes:
- To provide our services to you: for example, to issue your ‘MyCIRM’ access details;
- To communicate with you and manage our relationship with you: for example, add you to appropriate working group email distribution lists and contact you directly about matters that relate to your membership of CIRM and the areas of interest that you indicated in the membership application form;
- To improve our services, fulfil our administrative purposes and protect our business interests: for example: accounting, billing and legal purposes.
PLEASE NOTE: To change or remove your membership of any CIRM distribution list, send an email to the CIRM Secretariat detailing the required changes.
4. Individual’s rights and Subject Access Requests
You have a right to request access to the personal data that we hold about you. A Subject Access Request (SAR) is a written request made by or on behalf of an individual for the information which he or she is entitled to ask for. On request, CIRM will:
- list what information is held on an individual (the right to be informed);
- provide all information held on an individual (the right of access);
- amend the information held on an individual (the right to rectification);
- delete information held on an individual (the right to erasure);
- suppress processing of information held on an individual (the right to restrict processing);
- provide a file containing the information held on an individual, in a commonly used format such as comma separated value (.csv), Excel (.xsl), or plain text (.txt) (the right to data portability);
- respond to objections regarding information held on an individual, and act as appropriate (the right to object).
SARs should be sent to the CIRM Secretariat. CIRM will deal with SARs within a month of the request being received. A refusal or charge will be made for requests that are clearly unfounded or excessive. If a request is refused, the individual will be told why and that they have the right to complain to the supervisory authority and to a judicial remedy.
Regarding the right not to be subject to automated decision-making including profiling, CIRM does not use any automated decision-making or profiling systems.
5. Security of your personal data
We are committed to taking appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage to personal data.
The information that you provide to us is held in our systems, which are located on our premises and those of third parties appointed by CIRM.
We will never disclose your personal data to third parties without your specific consent.
6. Cookies or other tracking technologies
Cookies are small pieces of information stored by your browser on your computer's hard drive. They enable you to navigate on our website and allow us to provide features such as remembering aspects of your last visit to our website to make subsequent visits faster. You can delete cookies if you wish.
To improve our services, to provide you with more relevant content and to analyse how visitors use our website we use Third-Party cookies (Google Analytics). Please be aware that we will not be able to directly identify you from the information we collect using these cookies.
8. Contact information