Who we are
This page will provide you with details of Rebus Medical Ltd’s (Rebus) privacy policy. This privacy notice tells you how your personal information may be used by Rebus.
It is important that you read this privacy policy together with any other information you may be provided relating specifically to research studies you may choose to participant in, such that you are fully informed of how the data collected will be used.
If you have any questions relating to data privacy, including requests to exercise your legal rights, please contact us at Data-Privacy@rebus-medical.com
What is Personal Data?
‘Personal Data’ means any information about an individual from which that person can be identified. It does not include data where the identity has been removed.
Why & How Rebus use your information
Rebus collects Personal Data in different ways when providing services to our clients. This includes where Rebus conduct research studies on behalf of their clients, in this situation, the Client is the Data Controller and Rebus is a Data Processor. Rebus may also work with third-party suppliers, such as recruitment agencies for research studies, who will act as sub-processors of data.
Where Rebus conduct research for their own purposes (e.g., internal research projects), Rebus is the Data Controller for the Personal Data being collected.
Rebus also collects Personal Data and is Data Controller for purposes pertaining to the management and operational activities of the company. For example, collecting and processing Personal Data from job applicants, and collecting and processing personal data from Clients.
This Privacy Policy applies to Personal Data we collect through the following processes:
- Visitors to our website
- People who contact us via social media
- Job applicants
- Research study participants
- Clients who use our services
Visitors to our website
When someone visits www.rebus-medical.com we use third party services, Google Analytics, to collect standard internet log information and details of behaviour whilst browsing the site. No attempt to identify those who visit our website is made by us. For further information on our use of Cookies please see our Cookie Policy.
People who email us
We monitor all emails sent to us including file attachments for potential viruses and malicious software. Personal information you may share with us over email will not be shared with any other organisations.
People who contact us on social media
If you contact us, either via private or direct messaging via social media the message will not be shared with any other organisation.
People who apply for jobs with us
Before submitting any personal data to Rebus Medical related to job vacancies you should read the following statement to ensure you understand the way in which your personal data will be processed.
What information will be collected?
We may collect information about you in relation to applying for prospective job vacancies. This may include, but may not be limited to:
- your name, address, contact details, email address and phone number
- details of qualifications, skills, employment history and experience
- current and expected levels of remuneration, including benefits packages
- health information including details of disabilities which Rebus Medical may need to make reasonable adjustments for during the recruitment process
- evidence of entitlement to right within the UK
This information may be collected through a variety of means, including but not limited to CVs, covering letters, telephone interviews, application forms or through interview. Rebus Medical may also receive and collect personal information about you from third parties such as recruitment consultants / agencies, referees and information available through criminal records checks where applicable to the role.
Who has access to this data?
Data will be stored primarily in your application record, in the HR Management system and other IT systems (i.e. email). The data shall be stored securely and only accessible to those within the organisation who are involved in the recruitment process. Rebus Medical shall only disclose your personal data outside of the organisation if we reasonably believe we are obliged to do so for legal reasons (i.e. to HMRC for purposes of tax collection or in connection with a criminal investigation).
Why do we collect this data?
Rebus Medical need to collect and process this data to support the necessary steps involved in the recruitment process. Data provided in relation to a job vacancy will not be used for any other purposes than the recruitment process.
How long will this data be retained for?
If your application for employment is unsuccessful, Rebus Medical shall retain your data for a period of 6 months after the end of the recruitment process for the applicable position(s). At the end of this period your data shall be deleted and / or destroyed. If your application for employment is successful, Rebus Medical shall transfer all personal data gathered through the recruitment process to your HR file and be retained for the duration of your employment. Further information on how this data will be processed and stored is detailed in the HR Privacy Notice.
Your rights
As a data subject you have the following rights:
- access to a copy of your data on request
- request Rebus Medical amend any incomplete or incorrect data being held
- request Rebus Medical delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing
- object to the processing of your data where Rebus Medical is relying on its legitimate interests as the legal ground for processing.
To exercise your rights listed above please contact Data-Privacy@rebus-medical.com
Clients who use our services
It is necessary for Rebus Medical to collect and process personal data relevant to our clients in order to allow us to fulfil the services of our contract. Rebus Medical collects the following information about you:
- your name, company, contact details including email address and telephone number,
company address.
Data collected will be stored in our management information system. Rebus Medical will not share your data with third parties. Rebus Medical will not transfer your data outside of the European Economic Area (EEA). Rebus Medical will keep your data whilst you are a client and for a period of five [5] years after your last
interaction with us as a client.
User study participants
Rebus Medical frequently carries out research studies to inform the development of new products and services. If you take part in a trial we are conducting you will typically have been recruited via a trusted third-party recruitment partner who are responsible for keeping your personal data secure.
When Rebus Medical collects personal data for studies, the information is held securely with restricted access and is not shared with any other organisation unless prior written consent has been obtained by you. The Client on whose behalf Rebus is conducting the research on shall be Data Controller and Rebus shall be a Data Processor.
People who subscribe to marketing information
Rebus Medical want you as a potential client or an existing client to be kept up to date with our latest news and business information. You will always be asked to opt in to receiving information from us before you will receive anything. You will always be given the option to opt-out (unsubscribe) of receiving further information if you change your mind.
Subject Access Requests and Rights to Amendment / Erasure
Individuals can find out if we hold any of their personal data by making a ‘subject access request’ in writing to Data-Privacy@Rebus-Medical.com. If we do hold information about you we will:
- give you a description of the data held
- give an explanation for the reason we are holding it
- tell you who it has been / could be disclosed to
- let you have a copy of the data being held
You may also request that data is amended to keep it up to date or the ‘right to erasure’, when we will delete any data we hold on you or put it beyond use, unless a regulatory or legal reason prevents this. Proof of identification will be required for all ‘subject access requests’.
Complaints
Rebus Medical Ltd takes pride in ensuring we meet the highest standards when collecting and processing personal data. Please contact us if you have any concerns or require further information about how we process your data. If you wish to make a complaint about the way we have processed your personal data, you can contact the office of the Information Commissioner at www.ico.org.uk/concerns.
Rebus Medical Ltd. All rights reserved. Privacy Policy