Privacy Notice
UK and EEA
Important information and who we are
Digostics Limited is the controller and responsible for your data (collectively referred to as “Digostics”, “we”, “us”, or “our” in this privacy notice. We are registered with the UK’s supervisory authority, the Information Commissioner’s Office and our registration number is ZB281144.
We have appointed a Data Protection Officer (DPO) responsible for overseeing questions concerning data protection. If you have any questions about this notice, please get in touch with the DPO using the details set out below:
Digostics Limited
Harwell Innovation Centre
Curie Avenue
Didcot OX11 0QG
Email address: dpo@digostics.com
This privacy notice relates to your interaction with Our website, www.digostics.com. We have created separate privacy notices for patients and healthcare professionals using GTT@Home.
The data we collect about you
We may collect, use, store and transfer different kinds of personal data about you, which we have grouped as follows:
- Identity Data includes salutation, first name, and last name
- Contact Data includes email address and mobile number
- Organisation Data includes organisation name (e.g., hospital, institution or company), country/region and primary area of interest
- Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology you use to access this website.
How is your data collected?
We use different methods to collect data from and about you, including through:
- Direct interactions. You may give us personal data when you contact us via the contact us form on the website.
- Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data using cookies, server logs and similar technologies. Please see our cookie policy for further details.
How we use your data
The table below describes how we plan to use your data and which legal bases we rely on. We have also identified our legitimate interests where appropriate.
|
Purpose/Activity |
Type of data |
Lawful basis for processing including basis of legitimate interest |
|
To send you a proposal; |
(a) Identity (b) Contact |
Performance of a contract with you |
|
Respond to your query or to register your interest |
(a) Identity (b) Contact |
Necessary for our legitimate interests to allow us to communicate with you regarding your query or interest |
|
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) |
(a) Identity (b) Contact (c) Technical |
Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
|
|
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you |
(a) Identity (b) Contact (c) Organisation (d) Technical |
Consent |
|
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences |
(a) Technical
|
Consent |
|
To make suggestions and recommendations to you about goods or services that may be of interest to you |
(a) Identity (b) Contact (c) Technical (d) Organisation |
Necessary for our legitimate interests (to develop our products/services and grow our business)
|
Cookies
For more information about the cookies we use, please see Cookie Policy.
Disclosures of your data
We may share your data with the following parties:
- Service providers who provide IT and system administration services.
- Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, the new owners may use your data the same way as set out in this privacy policy.
Any third party who processes your data on our behalf will have signed a data processing agreement, setting out our expectations for how they process the data.
International transfers
Our website is hosted on HubSpot, located in the United States. When you submit data via the ‘Contact Us’ form, your data will be transferred to the US.
The transfer is based on an adequacy decision, as HubSpot is registered with the US Data Privacy Framework (https://www.dataprivacyframework.gov/list). The data processing agreement we have signed with HubSpot includes the UK’s international data transfer addendum to support onward transfers.
Data security
We have achieved Cyber Essential Plus (https://registry.blockmarktech.com/certificates/d4bfa97a-900b-4b5d-bd02-f75d32c3f891/) and are in the process of implementing ISO standards 27001 and 27701.
How long will you retain my data?
The law requires us to retain your personal data only as long as necessary. Any information relating to your enquiry will be retained for two years.
Your legal rights
- These rights are available to you if you are located in the UK and Europe.
- Request access to your personal data.
- Request correction of the personal data that we hold about you.
- Request the erasure of your personal data.
- Object to processing of your personal data
- Request restriction of processing of your personal data.
- Request the transfer of your personal data to you or to a third party.
- Withdraw consent at any time where we are relying on consent to process your personal data.
- If you wish to exercise any of the rights set out above, don't hesitate to get in touch with us using the contact details provided here.
- Right to complain to a supervisory authority if you are located in the UK / Europe
- You have the right to make a complaint to your local supervisory authority at any time. If you are in the UK, you have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk).
However, we would appreciate the chance to deal with your concerns before you approach the supervisory authority or the ICO, so don't hesitate to contact us in the first instance.
Other Jurisdictions
United Arab Emirates
Digostics MEA is the Data Controller responsible for processing personal data per the UAE Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (‘UAE PDPL’).
Purpose for Processing
The table below describes how we plan to use your data and which legal bases we rely on.
|
Purpose/Activity |
Type of data |
Lawful basis for processing including basis of legitimate interest |
|
To send you a proposal; |
(a) Identity (b) Contact |
Performance of a contract with you |
|
Respond to your query or to register your interest |
(a) Identity (b) Contact |
Consent |
|
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you |
(a) Identity (b) Contact (c) Organisation (d) Technical |
Consent |
|
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences |
(a) Technical
|
Consent |
Recipients of the Data
Your data will be shared with Digostics Limited, based in the UK, which administers the website. Our website is hosted on HubSpot, located in the United States. When you submit data via the ‘Contact Us’ form, your data will be transferred to the US.
Safeguards for Cross-Border Data Transfers
At present, the UAE Data Office has not established a list of adequate jurisdictions to transfer personal data; therefore, we rely on the following derogation to transfer your data:
- The express consent of the data subject to the processing of personal data relating to him/her outside the UAE in such a manner that does not conflict with the public and security interest of the UAE.
All transfers outside the UAE are controlled via a data transfer agreement between Digostics MEA and the recipient organisation.
If you have any questions about this notice, please get in touch with the DPO using the details set out below:
Digostics MEA
PL-ELOB Office No.
Hamriyah Free Zone
Sharjah
United Arab Emirates
Email address: dpo@digostics.com