For residents of the European Economic Area (EEA) and United Kingdom (UK), we advise that your personal information will be transferred to and processed in the United States, which has data protection laws that are different than those in your country and may not be as protective. The United States has not received a finding of “adequacy” from the European Union under the General Data Protection Regulation (GDPR) or from the UK under the UK GDPR. Our legal basis for collecting and using your personal information is to do so with (i) your consent, (ii) where we need the personal information for performance of a contract or requested service, or (iii) where the collection and use is in our or another’s legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect the personal information in question. If we collected your personal information with your consent, you may withdraw your consent at any time.
Our retention of your personal information and any subsequent communications are based on our legitimate interest in providing you with the requested services and new and potentially relevant services or products based on your geography, role, or company. As always, you can elect to opt out from receiving certain types of future communications as described in this policy.
To the extent that we transfer personal information from the EEA or UK to another jurisdiction that has not been determined by the European Commission or UK as providing adequate data protections, we will ensure that such personal information is safeguarded through appropriate contractual terms or other approved mechanisms.
In addition, if you are a resident of the EEA or UK, you have the right to: Find out if we use your personal information, to access your personal information, and receive copies of your personal information. Withdraw any express consent that you have provided to the processing of your personal information at any time without penalty. Access your personal information and have it corrected or amended if it is inaccurate or incomplete. Note: Where personal information is processed solely for clinical research, access may be restricted and/or denied. Whenever possible, we will honor your right to access by redacting information if your request would otherwise be restricted and/or denied. Obtain a transferable copy of some of your personal information which can be transferred to another provider when the personal information was processed based on your consent. If you believe your personal information is inaccurate, no longer necessary for our business purposes, or if you object to our processing of your personal information, you also have the right to request that we restrict the processing of your data pending our investigation and/or verification of your claim. Request your personal information be deleted or restricted under certain circumstances. For example, if is using your personal information on the basis of your consent and has no other legal basis to use such, you may request your personal information be deleted when you withdraw your consent.
Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
If we ask you to provide personal information to us to comply with a legal requirement or enter into a contract, we will attempt inform you of this and let you know whether providing us with your personal information is required and if not, the consequences of not sharing your personal information with us.
Similarly, if we collect and use your personal information in reliance on our or a third party's legitimate interests and those interests are not already described above, we will let you know what those legitimate interests are.
We endeavor to apply suitable safeguards to protect the privacy and security of your personal information and to use it only consistent with your relationship with us and the practices described in this Privacy Policy.
To withdraw consent or exercise these rights, please contact us via email at: privacy@fibr.fit.
If you are not satisfied with our response, or believe we are processing your personal information in violation of the law, you have the right to lodge a complaint with the Supervisory Authority (also known as Data Protection Authority) or other appropriate governmental authority in your EEA Member State or UK.
Unless specifically authorized, GDPR prohibits processing of certain special categories of data such as race, ethnicity, political and religious beliefs, sexual orientation, genetic, and biometric data. We do not knowingly acquire or process any data belonging to these categories.