Privacy

Ervaxx Limited Privacy Notice

Ervaxx (“we”, “us”, “our”) place great importance on the protection of your personal data and is committed to comply with all applicable data protection and regulations.

The following Privacy Notice will provide you with information about the personal data we collect, process and use when you visit the Ervaxx website.

1. Who is responsible for the processing of your personal data?

The responsible data controller; meaning the entity deciding why and how to process your personal data is:

Ervaxx Limited

71 Kingsway

London

WC2B 6ST

2. What personal data do we collect?

We collect information from you when you use our website or complete our ‘Contact Us’ form. The personal data we collect might include first name, surname, post code, address, email address, phone number, or your IP address (as outlined in Section 7).

3. For which purposes do we process your personal data?

We process data for the following purposes:

  • Communicating with you, upon your request through the ‘Contact Us’ form:
  • Compliance with our terms and policies, for example, to prevent or detect fraud or other crimes.

4. Who has access to your personal data?

We will disclose your personal data to our third-party service providers for the purposes of hosting our website. We may also disclose your personal data to legal consultants or similar third parties where this is necessary for our legitimate interests, for example for the prevention or detection of fraud or other crimes.

Whenever we share your personal data with third parties, we disclose only the personal information that is necessary for the respective purposes and we generally have contracts that require them to keep your information secure and not to use it for their own purposes.

Where we are required by applicable laws, we will also disclose your personal data to law enforcement, government authorities or courts.

5. On which legal basis do we process your personal data?

We will process your personal data on the following legal bases:

  • Legitimate business purposes: Where the processing is necessary for our legitimate interests (such as communicate with you, after you have contacted us; to protect us from harm by preventing or detecting illegal activities, fraud or similar threats; to exercise or defend against legal claims, unless we determine in a case-by-case assessment that our interests are overridden by your interests or rights.
  • Consent: To deliver to you, upon your subscription, latest news on our website.
  • Legal obligations: To comply with legal obligations to which we are subject (for example, where we are requested by a court to disclose your data).

6. Where will your personal data be processed?

Your personal data that is collected through the Ervaxx website will be processed in Europe. In case information is shared with third parties as described in Section 4 above, this may entail a transfer to another country, dependent upon the location of the third party.

Please note that the laws and rules that protect your personal data in other countries where third parties may process your personal data as described in this privacy notice can be different (or less protective) from those in the country in which you live.

7. Cookies

We may obtain anonymous information about your general website usage by using a cookie file which is stored on your browser or the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. They help us to improve the site and to deliver a better and more personalised service. Some of the cookies we use are essential for the site to operate.

Cookie Domain Purpose

_utma

_utmb

_utmc

_utmz

by Google Ervaxx Website Ervaxx uses Google Analytics, which sets a cookie in order to anonymously identify when users return to specific websites. Google uses the information sent with this cookie to store a history of website pages visited in a user’s session. This data will not be used to associate any part of your identity, anonymous or not, with any other data held by Google. Further information about how to opt-out of this cookie can be found athttp://www.google.com/intl/en/privacypolicy.html

8. How do we protect your personal data?

We maintain appropriate technical and organisational security measures designed to protect your personal data against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.

Non-sensitive details (your email address etc.) are transmitted normally over the internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal data, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your personal data, we make our best effort to ensure its security on our systems.

9. How long do we store your personal data?

We will retain your personal data no longer than necessary to fulfil the purposes that it was collected for or to fulfil our legal obligations. Afterwards, we will delete your personal data.

If you wish to receive further specific information on the applicable retention periods, please contact us under the contact details mentioned in Section 11.

10. What are your rights in respect of your personal data?

To the extent permitted by applicable data protection laws and regulations, you have the right to access the personal data that we hold on you, to update or correct your data so that it is always accurate and to request the deletion of your personal data if it is no longer needed for the purposes above. Additionally, you have the right to withdraw the consent that you have provided to us to receive news (by clicking the unsubscribe link in our emails), to restrict the processing of your data in certain circumstances (for example, where you have contested the accuracy of your data, for the period enabling us to verify its accuracy) and to obtain a copy of your personal data (including in an electronic, machine-readable format).

Please note that legal exceptions (such as mandatory retention periods or rights of third parties) may limit your rights.

To exercise your rights, please contact us via the details in Section 11. You also have the right to lodge a complaint with a competent data protection supervisory authority in your jurisdiction, which is the Information Commissioner in the UK.

11. How can you contact us?

We welcome any queries and complaints you may have regarding how we process your personal data via the ‘Contact Us’ form.

12. How often do we update this privacy notice?

This privacy notice will be updated to reflect changes either regarding the way in which we process your personal data or changes to data protection legislation. We will bring any significant changes to your attention by updating this information and making it available on our website. To make sure that you keep up to date, we suggest that you revisit this notice from time to time. In addition, we will examine whether in individual cases there is an obligation to provide other notification in the event of any changes to this information and in this case, we will comply with the existing notification obligation.

This Privacy Notice was last updated in September 2019.