Scope
All data subjects whose personal data is gathered and processed in accordance with the privacy notice and in compliance with the EU General Data Protection Regulation 2016/679 (“GDPR”) and national laws implementing GDPR and any legislation that replaces it, in whole or in part, and any other legislation relating to the protection of personal data. Note: We only collect, hold and process personal data that is pertaining to the business they represent, not “individual personal data.”
Responsibilities
Data Protection Officer is responsible for ensuring that this notice is made available to all data subjects prior to Orifarm collecting/processing their personal data.
All Employees Orifarm who interact with data subjects are responsible for ensuring that this notice is drawn to the data subject’s attention, and their consent to the processing of their data is secured.
This website is not intended for children and we do not knowingly collect data relating to children.
Media
Orifarm referred to throughout this policy, is a trading name used by Pilatus Clinical Services Ltd., which is committed to ensuring that your privacy is protected in accordance with GDPR. We are an organisation that collects personal data from you, and in turn this makes us a Data Controller. Orifarm will use your data to provide you with our services, which in turn also makes us a data processor.
With regards to why we collect the data and what we do with it, we will use your data to understand your requirements and provide you with our services.
If you are interested in acquiring our services, we will use the details you have provided us with, to allow us to fulfil your requirements.
Our Data Protection Officer / GDPR Owner and data protection representatives can be contacted at the following email address: contactCTS@orifarm.com.
What Information do we collect?
Orifarm will process your personal information to understand your needs and provide you with a better service. Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
The personal data that we collect from you is:
• Full name
• Business email
• Registered address
• Contact telephone number
• Service requirements
We collect information by:
• Telephone conversations
• Face to Face conversations
• Skype Meetings
• Emails
• Social Media Network Interactions
• Data we may have obtained at business conferences
• Data we may have collected through interacting with Trade Associations
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:
Identity Data including: first name, maiden name, last name, username or similar identifier, title, date of birth and gender.
Contact Data includes: billing address, delivery address, email address and telephone numbers.
Financial Data includes: bank account and payment card details of your business.
Transaction Data includes: details about payments to and from you and other details of products and services you have purchased from us.
Technical Data includes: internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Profile Data includes: your username and password, purchases or orders made by you, your interests, preferences, and feedback and survey responses.
Usage Data includes: information about how you use our website, products and services.
Marketing and Communications Data includes: your preferences in receiving marketing from us and our third parties and your communication preferences.
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
How do we use personal Information?
We will only use your personal data when the law allows us to. We will use your personal data most commonly in the following circumstances:
We will use your data to help us service your enquiry.
We will use your data to help us manage any service you take out with us.
If you opted in for marketing in the future in regards to products we offer, we will only contact you on your preferred method with details of products or updates from Orifarm.
What legal basis do we have for processing your personal data?
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you decided to enter into a business agreement with Orifarm, under a contract we will need to process your details to service your requirements.
We store your personal data as part of our legal obligation for business accounting and tax purposes and may also be obliged by law to disclose your personal data to a regulatory body or law enforcement agency as part of these legal obligations.
We store your data for the purposes of providing you with information about Orifarm services.
Consent
By consenting to this privacy notice you are giving us permission to process your personal data specifically for the purposes identified.
Consent is required for Orifarm to process both types of personal data, but it must be explicitly given. Where we are asking you for sensitive personal data we will always tell you why and how the information will be used.
You may withdraw consent at any time by sending us an email to: contactCTS@orifarm.com.
Disclosure
There may be occasions when Orifarm are required to pass your personal data onto a third party in order to fulfil our services.
Orifarm will not pass on your personal data to any other third parties without first obtaining your consent.
How long we keep your data
Orifarm only ever retain personal information for as long as necessary and follow the retention periods and legal requirements that is set within the industry’s regulations.
In some cases (for example, where we have your personal details for marketing related purposes) we may retain your information for a longer period; we will advise you of this at the time by confirming this by email. You also have the opportunity to opt out by emailing contactCTS@orifarm.com and confirming your instructions.
Your rights in relation to personal Data
You have the right to access any personal information that Orifarm processes about you and to request information about:
• What personal data we hold about you
• The purpose of the processing
• The categories of personal data concerned
• The recipients to whom the personal has/will be disclosed
• How long we intend to store your personal data for
• If we did not collect the data directly from you, information about the source
• Update any incomplete or inaccurate data about you
• Request that any information held is erased to restrict processing in accordance with data protection laws
If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the relevant request; this is to ensure that your data is protected and kept safe.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Safeguarding measures
Orifarm takes your privacy seriously and we take every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction which include encryptions and password protection.
Lodging a Complaint
In the event that you wish to make a complaint about how your personal data is being processed by Orifarm, or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and Orifarm ‘data protection representative, the Data Protection Officer. The details for each of these contacts are:
Data Protection Officer
Orifarm UK
Breakspear Park
Breakspear Way
Hemel Hempstead
HP2 4TZ
Tel: +44 (0) 1923 204310
Email: contactCTS@Orifarm.com