Privacy & Security
Edinburgh bioquarter’ PRIVACY & security POLICY
Edinburgh BioQuarter (“Edinburgh BioQuarter”, “we”, “us” or “our”) is committed to protecting the privacy and security of your personal information.
What is the Purpose of this Policy?
This policy (together with our Website Terms and Conditions describes how we collect and use personal information about you in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and any other national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK (Data Protection Legislation).
Please read the following carefully to understand our practices regarding how we handle information we collect from you or that you provide to us or which we otherwise learn about you from our relationships with you, and/or your use of our Website.
Who are We?
Edinburgh BioQuarter is the owner and operator of the website at www.edinburghbioquarter.com.
Our contact details are:
Address: NINE – Life science Innovation Centre, 9 Little France Road, Edinburgh, EH16 4UX
Tel: 0131 651 7899
How We Collect Your Personal Information
We obtain information about you when you use our Website, for example:
- when you fill in forms on our Website or book a space at an event published on our Website;
- when you subscribe to our blogs and newsletters, or when you subscribe to or participate in any other service;
- if you contact us, we will keep a record of that correspondence (for example, when you send us an enquiry or report a problem with our Website);
- if you participate in a survey that we use for research purposes, although you do not have to respond to them; and
- details of your visits to our Website including time, traffic data, communication data, location data, your IP address and your browser type and operating system.
We may also collect and aggregate information about your computer for system administration and website analytics. This is statistical data about our users’ browsing actions and patterns and does not identify any individual.
We obtain information about you when you contact us
- if you contact us, we will keep a record of that correspondence
- if you participate in a survey that we use for research purposes, although you do not have to respond to them; and
- we may store information on your collecting interests so that we can inform you of relevant products and services.
We may obtain information about your general internet usage by placing certain bits of information called “cookies” in your web browser software or the hard drive of your computer. Cookies are sent back only to the website that placed them when a visitor returns to that site.
Cookies help us to:
- estimate our audience size and usage pattern;
- store information about your preferences, and so allow us to improve our Website and to deliver a better and more personalised service; and
- remember your session identification, thereby maintaining your session while you are logged in to our site.
Some of the cookies we use are essential for our Website to operate.
The Information We Hold About You
The personal information we collect might include:
- Identity Data (includes first name, last name, username or similar identifier, title, date of birth, gender, and image).
- Contact Data (includes postal address, email address and telephone numbers).
- Technical Data (includes internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on devices used to access the Website).
- Usage Data (includes information about how you use the Website and our Services).
- Marketing and Communications Data (includes your preferences in receiving marketing from us and our third parties and your communication preferences).
We may collect information about you from other sources, including through interactive applications (such as mobile devices/applications and third-party services) and from commercially available sources (such as data aggregators and public databases). For example, if you access third-party services (such as Facebook Connect) through or in connection with our Website, we may collect information available about you through those services, including personal information as well as publicly observable data, such as activities on blogs, videos, and other online postings. We may also collect personal information from you at events, from telephone calls, surveys and/or other correspondence with you.
We do not collect any special categories of personal data about you, such as details about your race or ethnicity, or about your health; nor do we collect information about criminal convictions and offences.
The Ways We Use Your Information
The Purposes for which we will use your personal information
We may use your information in order to:
- ensure that content from our Website is presented in the most effective manner for you and for your computer;
- carry out our obligations arising from any agreements entered into between you and us;
- provide you with information, products or services that you request from us or which we feel may interest you, where you have consented or otherwise agreed to be contacted for such purposes;
- if you choose to provide information to us regarding your interests and/or preferences we may send you content based on the information that you have provided to us. We may use the information provided by you to display information about products and services that we believe may be of interest to you. We do not share this information with any other third party;
- notify you about changes to our services;
- seek your opinions on our services;
- in connection with legal and regulatory matters that we need to deal with.
We will not pass your details on to third parties for marketing purposes, full stop.
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances (for example when we collect statistical data about our users’ browsing actions and patterns) we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
Change of purpose
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Lawful Basis for Use of Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data on one of the following lawful bases:
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
Why might we share your personal information with third parties?
We will share your personal information with third parties where required by law, where it is necessary to administer our relationship with you or where we have another legitimate interest in doing so. We are not in the business of selling your personal information to third parties!
Which third-party service providers process my personal information?
Where permitted by the provisions of applicable law, Edinburgh BioQuarter may share such information from time to time with the following third parties:
- Our other group companies including the employees, directors and managers of those companies who have a need to access your personal information in carrying out their responsibilities; and
- Any agent, contractor, supplier, vendor, or third party service providers who provides administration, logistics or other services to Edinburgh BioQuarter which are relevant to the services which we provide to you or who otherwise assist us in conducting our business, such as printers, storage facilities, communications software, data hosting, and email management services.
Who are the third-party service providers? Please see the information in this section, headed Edinburgh BioQuarter Third Party Data Processors.
What about other third parties?
Transferring information outside of the EEA
We will not transfer the personal information we collect about you outside of the European Economic Area and accordingly your information will also be protected by the Data Protection Legislation.
We have appropriate security measures in place to protect against the accidental loss, misuse, access and/or alteration of the information you provide. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
Rights of Access, Correction, Erasure, and Restriction
Your duty to inform us of changes
It is important that the personal information we hold about you is accurate and current. Please keep us informed of any changes to your personal information of which we need to be made aware.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
- Request access to your personal information. This enables you to receive details of the personal information we hold about you and to check that we are processing it lawfully.
- Request the correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
- Request the restriction of the processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
- Request the transfer of your personal information to another person.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if any request made by you is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
Right to Withdraw Consent
In those circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose (for example, in relation to direct marketing that you have indicated you would like to receive from us), you have the right to withdraw your consent for that specific processing.
Changes to this Policy
Questions and Complaints Regarding this Policy
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
Our contact details are:
Address: Edinburgh BioQuarter, NINE – Life science Innovation Centre, 9 Little France Road, Edinburgh, EH16 4UX
Tel: 0131 651 7899
Edinburgh bioquarter’ THIRD PARTY DATA PROCESSORS
Edinburgh BioQuarter may share your personal data with the following third-parties (i.e. parties other than entities within the Edinburgh BioQuarter) who assist us in providing the products and services and who perform technical operations:
|Marketing – communications software||MailChimp or Dotmailer|
|Microsoft and University of Edinburgh|
|Property management||Scottish Enterprise, Savills, Cam Sci.|
|Website Hosting and Administration
Our last update to this policy was: 19 September 2018.
Most of the cookies we use are “personalisation cookies” which are used to recognise repeat visitors to the Website and “analytics cookies” which monitor how visitors use our Website and give us a better understanding of what content visitors are spending most time reading. The types of cookies used on our Website are as follows:
|STRICTLY NECESSARY||These cookies are essential to enable you to receive a service on a website. For example, cookies to comply with the law (e.g. such as to keep your information safe).|
|ANALYTICS / PERFORMANCE||These cookies are used only to help us to improve our Website over time, by giving us insights into how the various sections of the Website are used and how users interact with the Website, for example which pages visitors go to most often and whether they get error messages from web pages. The information collected is anonymous and statistical.|
|AUTHENTICATION / FUNCTIONALITY||Authentication cookies are used to identify unique visitors to the Website. If you log in to the Website, these are the cookies that allow us to remember who you are and what your preferences are so that we can provide you with access to any pages personal to you, for example your account pages or a selected font size.
Whilst information collected by “functionality” cookies may or may not be anonymised, the “functionality” cookies on our website only collect anonymous information.
|SESSION||These are cookies that are designed to ensure that your visits to the Website are as smooth as possible. Their main uses are:
• Allowing us to identify your device as you use the Website, so that you are not treated as a new visitor each time you go to another part of the Website;
• Ensure that the servers that we use to power the website each serve an equal number of users, to help make everyone’s browsing as swift and responsible as possible; and
• Noting your browser’s capabilities.
We have listed in the table below the specific cookies that we use and the purposes for which we use them, and we have also identified whether they are session cookies or persistent cookies. ‘Session cookie’ is a commonly used description for a cookie which stores information about user page activities to allow users to be recognised within a website so any page changes or item or data selection is remembered from page to page; whilst ‘persistent cookie’ is a commonly used description for a cookie which helps websites remember your information and settings when you visit them in the future.
|Type||Cookie Name||Purpose||(Persistent/Session)||More Information|
|STRICTLY NECESSARY||PHPSESSIONID||A session cookie is required to follow your progress through the website so you are not treated as a new visitor on every page.||Deleted when browser is closed|
|ANALYTICS / PERFORMANCE||_ga||Used by Google Analytics||Controlled by Vendor||Find out more|
You can set your cookie preferences using your browser. Most browsers will tell you how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to disable existing cookies. Please note, however, that without cookies you may not be able to take full advantage of all our Website features. For example, we use a cookie to remember your cookie preferences and so:
- If you delete all of your cookies you will have to update your preferences with us again.
- If you use a different device, computer profile or browser you will have to tell us your preferences again.
Web Beacons and IP Addresses
Certain pages on our Website may contain “web beacons” (also known as Internet tags, pixel tags or clear GIFs). These web beacons allow third parties to obtain information such as the IP address of the computer that downloaded the page on which the beacon appears, the URL of the page on which the beacon appears, the time the page containing the beacon was viewed, the type of browser used to view the page and the information in cookies set by the third party.
An IP address is a unique identifier that certain electronic devices used to identify and communicate with each other on the Internet. When you visit our websites, we may view the IP address of the device you use to connect to the Internet. We use this information to determine the general physical location of the device and understand from what geographic regions our website visitors come. We also may use this information to enhance our websites.
If you have a complaint, please describe in as much detail as possible the ways in which you believe that our Cookies Policy has not been complied with. We will investigate your complaint promptly.