P1V-GAINS-IN02 Study

P1vital Products Limited (P1vital) is the sponsor of P1V-GAINS-IN02 study (REC reference: 22/WA/0277) and the data controller when you provide personal data via p1vital-gains.com.

There are many ways you can contact us, including phone, email and post. You can find out more about how we use your information at www.p1vital.com/privacy-notice/.

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the DPO using the details set out below.

DPO contact details

• Email address: [email protected]
• Postal address: Manor House, Howbery Park, Wallingford, Oxfordshire OX10 8BA
• Telephone number: +44(0) 1865 522030

General information:

Personal data as identified by UK’s Data Protection Act (DPA) 2018 and EU’s General Data Protection Regulations (GDPR): “any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”

The data we collect about you

You directly provide us with the data we collect. P1vital collects and processes the following data that you directly provide:

• Personal identification information (first name, last name, email address, telephone number)
• Special category health data (when you complete eligibility questionnaires)

How we use your data

We use personal data we collect from you to assess your eligibility to take part in the study and to contact you to arrange a time to gain your consent to take part in the study.

Processing your data

P1vital stores your information in a secure manner within P1vital’s technology.

International transfers

Personal data controlled by P1vital and collected in the UK may be disclosed/transferred outside of the UK subject to UK ‘adequacy regulations’ in relation to the country or territory where the receiver is located (i.e. a decision that a particular non-UK country’s laws provide an adequate level of protection for personal data) or subject to ‘appropriate safeguards’ being put in place such as a legally binding and enforceable instrument, UK Binding Corporate Rules, Standard Contractual Clauses etc., and subject having unambiguously consented to the disclosure/transfer.

Disclosure of your personal data

Use of data processors by P1vital - Data processors are third parties who provide elements of our services for us. We have contracts, terms and conditions and / or data processing agreements in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us without our consent and only then on the basis that we are satisfied that the sub-processors they use are subject to equivalent obligations relating to the security of your data and subject to a UK DPA and EU GDPR compliant Data Processing Agreement. They will hold it securely and retain it for the period we instruct.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your legal data protection right

Under certain circumstances, you have specific rights as a ‘data subject’ under Chapter III (Articles 14-25) of Regulation (EU) 2018/1725:

• Right of access to your personal data (commonly known as a “Data Subject Access Request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• Right to rectification of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Right to erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
• Right to restriction of processing of your personal data where you are concerned about the accuracy of the data or how it is being used. If necessary, you can also stop us deleting your data.
• Right to object to processing of your personal data, under certain conditions.
• Right to data portability of your personal data to you or to a third party.

If you would like to exercise any of these rights or if you wish to raise a complaint on how we have handled your personally identifiable data, you can contact our DPO who will investigate the matter. If you are not satisfied with our response or believe we are processing your personally identifiable data in a way that is not lawful you can complain to the Information Commissioner’s Office (ICO).

You can find out more about how we use your information at www.p1vital.com/privacy-notice/.

We keep our privacy notice under regular review. This privacy notice was last updated on 27 April 2023.