GDPR Position Statement
A new European Union personal data (PD) protection regulation – GDPR (General Data Protection Regulation) will come into force on 25 May 2018. Ergomed plc together with its affiliated companies (jointly: Ergomed plc Group Entities or EGE, see all group entities here) has always been committed to high standards of data security. In this spirit, we are now revising our policies and procedures to meet the requirements of GDPR as further elaborated.
EGE identified 15 purposes of PD processing, assigned the legal basis to each purpose as per GDPR, specified appropriate categories of PD and set up the Data Protection Impact Analysis (DPIA), which constitute the core for PD processing as per GDPR.
For most of the PD processing purposes we are the data processor, as our clients are the controller, because we process PD on behalf of the controller in order to perform under the relevant contract. The controller determines the purposes and means of PD processing regarding the regulatory obligations and controller’s business needs. The controller may pass some of its obligations on its processor and such obligations have to be specified in the contract between the controller and the processor.
We involve service providers for some business services, which are our processors (processors of deeper level or sub-processors). It is our responsibility to determine the means of PD processing in a contract with each our vendor (sub-processor). We will take care to impose the same data protection obligations on our vendors as set out between us and the controller, in contracts with our vendors.
We are the controller for some of our PD processing purposes such as for employee’s and independent contractor’s PD processing.
Ergomed plc appointed its Data Protection Officer (DPO) for all EGE who may be contacted at DPO@ergomedplc.com. DPO will coordinate his activity in specific PD processing (clinical trials, pharmacovigilance service, etc.) with EGE’s clients’ and vendors’ data protection officers.
Ergomed plc decided that the Information Commissioner’s Office, UK will act as the Lead Supervisory Authority for Supervisory Authority related obligations.
We are in the process of updating the contracts with our controllers as well as with our sub-processors (sites, investigators, etc.) to include GDPR obligations / provisions.
We are also finalizing our forms, templates and procedural documents used in our services to be GDPR compliant (investigator/reporter-related as well as the patient-related). We implement a correct PD processing also in cases when the controllers and/or recipients of personal data e.g. our EGE, clients and vendors are located outside the EEA in countries which do not ensure an adequate level of the PD protection by GDPR Article 45.
The current business processes will not be changed. We will raise the protection and security of the PD in the processing to GDPR requirements including the identification of data subjects and their PD processed. We combine regulatory laws obligations regarding PD protection with new GDPR obligations in PD processing. We are ready to respond to data subject’s requests to exercise their rights. Our procedural documents specify the processes for data breach notification.
We also train our staff in terms of both data protection policies and security risks.
Our current activities focus on GDPR compliance in line with the established requirements. Our security measures regarding PD processing have always been on high level but we continue working on additional improvements of PD processing methods.
We concentrate on highly sophisticated automation tools in fulfilling GDPR obligations as well as on the security improvements using up-to-date cyber security and physical security technology.
We understand that meeting the GDPR requirements will take a lot of time and effort and as your partner we want to assure you of our commitment to continuous compliance including GDPR.
Please do not hesitate to contact our DPO with any questions that you may have.
Date: 16 May 2018
1 Occam Court
Surrey Research Park
Phone: +44 (0)1483 307920
Ownership of Site, Copyright © and Trademarks
The Site and all its contents including, but not limited to all text, images, graphics, sound files, animation files, video files, button icons, software and their arrangement (further: “Content”) are exclusively owned and protected by copyright of ERGOMED Group and international copyright laws. The Site also contains images that are subject to the copyright rights of their owners.
Content may be used solely for non-commercial and personal information purposes. Any other use of Content including copying, modification, distribution, transmission, republication, display, performance and reposting to other sites without previous written approval of ERGOMED Group is strictly prohibited. The Site shall not be used for any unlawful purpose or in violation of applicable law or regulation. The users are prohibited from reverse engineering, decompiling, disassembling, or attempting to derive source code from any part of the Site.
All trademarks, logos and service marks on the Site are proprietary trademarks, logos or services marks of Ergomed Group and its business partners and the user may not use any of them without the written permission of the owner.
Any violation of Content’s copyright or other intellectual property right is subject to legal sanctions imposed by intellectual property laws in any jurisdiction, including criminal prosecution.
No Warranties or Representations
The information contained in this Site is for general information purposes only. The Content of the Site is provided on “as is” basis. While we endeavour to keep the information up to date and correct, ERGOMED Group makes no representation or warranty of any kind, expressed or implied, as to the operation of the Site or its Content, including but not limited to, any implied warranties of merchantability, fitness for any particular purpose, or non-infringement. ERGOMED Group neither warrants nor represents that your use of any Content will not infringe the rights of any third parties nor that Content is accurate, complete or up to date.. Any reliance you place on the Site is therefore strictly at your own risk. In no event, ERGOMED Group assumes liability for any loss or damage including without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever arising from loss of data or profits arising out of, or in connection with, the use of this Site, omissions or errors (including, without limitation, typographical errors and technical errors) in the Content which is subject to change without notice.
This Site contains third-party information and links to other websites over which ERGOMED Group has no control over and does not guarantee for the nature, content and availability of these websites. Wherever practical, in our opinion, such information is marked accordingly. ERGOMED Group is not responsible for the content, reliability and security of the linked websites. ERGOMED Group does not endorse the content, or any products or services of any kind available on such sites.
Every effort is made to keep the Site up and running smoothly. However, ERGOMED Group takes no responsibility for, and will not be liable for, the Site being temporarily unavailable due to technical issues beyond our control.
The Site contains forward-looking statements based on beliefs of ERGOMED Group management including, but not limited to, expected development of ERGOMED Group’s business; ERGOMED Group’s growth strategy; sale of shares being offered. When used in the Site, words such as “anticipate”, “believe”, “estimate”, “expect”, “intend”, “plan”, “seek” and “project” are intended to identify forward-looking statements. Such statements reflect the views of ERGOMED Group as of the date made with respect to future events and are subject to certain risks and uncertainties that could cause actual results to be materially different from those projected herein, including, among others, regulatory and legal changes, changes in general economic and business conditions, changes in currency exchange rates and interest rates, introduction of competing products, lack of acceptance of new products or services, our ability to penetrate developing and emerging markets and changes in business strategy. You should not place undue reliance on forward-looking statements which ERGOMED Group management believes are reasonable assumptions as of the date they are made. ERGOMED Group undertakes no obligation to publicly update or revise any forward-looking statements.
+44 (0)1483 307920
(+1) 781 703 5540
United Kingdom (Head Office)