Who collects your personal data
MDRx is the controller for the personal data we collect for research. “Personal data”, “processing” and “controller” are all used in this notice according to their definitions in the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
If you need further information about how MDRx uses your personal data for research, you can contact MDRx at mdrx.research@mdrx.tech.
What personal data we collect and how it is used
MDRx may collect your:
- Name and contact details
- Views and experiences of a topic
- Internet protocol (IP) address, if recorded
- Device type
We may sometimes ask for more sensitive personal data such as your:
- Age education or skills
- Health or disability
- Level of income
- Location
- Observed behaviour
- Race and ethnicity
Your personal data may be used as part of the research that MDRx carries out.
MDRx will give details of what personal data is collected and how it is used when it invites you to take part in the research.
Legal basis
The legal basis for processing your personal data for research is normally your consent.
MDRx may also use legitimate interest as a legal basis once incorporated into our analysis.
The legal basis for processing your special category personal data for research is your explicit consent.
Consent to process your personal data
Where the processing of your personal data is based on consent, you can normally withdraw your consent, and have personal data removed. You can do this using the contact details provided by MDRx when you take part in the research. However, you may not be able to withdraw your consent once MDRx has incorporated it into its analysis.
Who we share your personal data with
MDRx does not normally share your personal data with third parties.
Your anonymised information may be shared in the form of:
- academic publications
- presentations
- processed data reports
- video clips
We may securely store and/or process your data on servers controlled and/or owned by third party providers and whose software or systems we use to provide our services but MDRx does not otherwise normally share your personal data with third parties.
How long MDRx holds personal data
Personal data will be deleted if no longer needed for research purposes. Data that has been made anonymous may be kept for longer.
Transfer of your personal data outside of the UK
MDRx will only transfer your personal data to another country that is deemed adequate for data protection purposes.
Your rights
You have the right to:
- request from us access to, and rectification or erasure of, personal data
- request that we restrict processing concerning you
- object to our processing of the data
- data portability, where applicable
To view our website’s Cookies & Privacy policy please click here.
You also have the right to complain to the Information Commissioner’s Office about the manner in which, or otherwise, in which we process your personal data.
