Privacy Commitment

Untitled Document

1.0          Overview

1.1          Purpose

KMR Group, Inc. (“the “Company,” “we” or “us”) are sensitive to privacy issues, and it is important to us to protect the information provided to us.  Accordingly, KMR provides this privacy and information practices policy to inform you about our online information practices, the kinds of information we may collect, how we intend to use and share that information, and how you can correct or change such information (“Privacy Policy”).

1.2          Scope

This Privacy Policy applies to Personal Information that is Processed by KMR in the course of our business, including on Company websites (together with any and all future websites operated by or on behalf of KMR, the “Sites”).  All individuals whose responsibilities include the Processing of Personal Information on behalf of KMR are expected to protect that data by adherence to this Privacy Policy.

2.0  Transparency/Notice–What Personal Information We Collect and How We Use It

The types of Personal Information we may collect (directly from you or from Third Party-sources) and our privacy practices depend on the nature of the relationship you have with KMR and the requirements of applicable law.  We endeavor to collect information only relevant for the purposes of Processing.  Below are the legal bases and some of the ways we collect information and how we use it.

2.1          Individuals

KMR collects Personal Information regarding its current, prospective and former clients, customers, visitors and guests (collectively “Individuals”).  The data we collect from Individuals includes information such as title, name, address, phone number, email address, user name, answer to a security question and password, government identification (driver’s license, passport), and credit card and other financial information related to payments for services or goods.  We may also collect demographic information you choose to provide, such as your business or company information, professional experiences, educational background, nationality, ethnic origin, age, gender, interests, preferences and favorites.

We acquire, hold, use and Process Personal Information about Individuals for a variety of business purposes including to:

  • generally manage Individual information and accounts;
  • respond to questions, comments and requests;
  • provide access to certain areas and features of the KMR Sites;
  • ensure internal quality control;
  • verify Individual identity;
  • enable Individuals to register for events or participate in webinars;
  • communicate about Individual account and activities on KMR Sites and systems, and, in KMR’s discretion, changes to any KMR policy;
  • tailor content, advertisements and offers we serve to Individuals;
  • process payment for products or services purchased;
  • measure interest in and improve KMR websites and systems;
  • develop new products, processes and services;
  • notify you about offers, products and services that may be of interest to you;
  • process applications and transactions;
  • prevent potentially prohibited or illegal activities;
  • provide services to you and our sponsors;
  • enforce our Terms of Use; and
  • for purposes disclosed at the time that Individuals provide Personal Information or otherwise with consent.

2.2          General Information Collected & Used by KMR

Depending on how you interact with KMR, we and our Third Party-service providers may also collect and use information in a variety of ways, including:

Clinical Benchmark Data.  As a global leader in the area of biopharmaceutical benchmarking in Research & Development, KMR offers peerless data on topics ranging from discovery to project cost analysis, enrollment performance, and R&D productivity.  Through our workbooks and interactions with our clients and users, we collect and store non-identifiable and aggregated trial and R&D data, as well as Personal Information (such as business contact information) about our clients.

2.3          Information We Collect Automatically

We may collect certain information automatically through our services or other methods of web analysis, such as your Internet protocol (IP) address, cookie identifiers, mobile advertising identifiers, and other device identifiers that are automatically assigned to your computer or device when you access the Internet, browser type, operating system, Internet service provider, pages that you visit before and after using the Services, the date and time of your visit, the amount of time you spend on each page, information about the links you click and pages you view within the services, and other actions taken through use of the Services.

2.4          Other Ways KMR May Use Personal Data

We acquire, hold, use, and Process Personal Information based on the legal grounds and for the legitimate business purposes outlined in this Policy, including:

  • To Provide Products, Services, or Information Requested:  KMR may use information about you to fulfill requests for Services or information, including information about potential or future Services, including to:
  • Generally manage Individual information and accounts;
  • Respond to questions, comments, and other requests;
  • Provide access to certain areas, functionalities, and features of KMR’s Services;
  • Allow you to register for events.
  • Administrative Purposes:  KMR may use Personal Information about you for its administrative purposes, including to:
  • Measure interest in KMR’s Services;
  • Develop new products and Services;
  • Ensure internal quality control;
  • Verify Individual identity;
  • Communicate about Individual accounts and activities on KMR’s Services and systems, and, in KMR’s discretion, changes to any KMR policy;
  • Process payment for products or services purchased;
  • Process applications and transactions;
  • Comply with regulatory requirements;
  • Prevent potentially prohibited or illegal activities;
  • Enforce our Terms of Service.
  • Marketing KMR Services:  KMR may use Personal Information to provide you with materials about offers, products, and Services that may be of interest, including new content or Services. KMR may provide you with these materials by phone, postal mail, facsimile, or email, as permitted by applicable law. Such uses include:
  • To tailor content, advertisements, and offers;
  • To notify you about offers, products, and services that may be of interest to you;
  • To provide Services to you and our sponsors;
  • For other purposes disclosed at the time that Individuals provide Personal Information; or
  • Otherwise with your consent.

You may contact us at any time to opt out of the use of your Personal Information for marketing purposes, as further described below.

  • Research and Development:  KMR may use Personal Information to create non-identifiable information that we may use alone or in the aggregate with information obtained from other sources, in order to help us to optimally deliver our existing products and services or develop new products and Services.
  • Information Submitted Via Services.  You agree that KMR is free to use the content of any communications submitted by you via the Services, including any ideas, inventions, concepts, techniques, or know-how disclosed therein, for any purpose including developing, manufacturing, and/or marketing goods or Services. KMR will not release your name or otherwise publicize the fact that you submitted materials or other information to us unless: (a) you grant us permission to do so; (b) we first send notice to you that the materials or other information you submit to a particular part of a Service will be published or otherwise used with your name on it; or (c) we are required to do so by law.
  • Information Anonymized or Aggregated.  Including as discussed below, KMR may use and share anonymized or aggregated information with Third Parties for public health, research, analytics, or any other legally permissible purpose.
  • Other Uses.  KMR may use Personal Information for other purposes disclosed to you at the time you provide Personal Information or with your consent.

2.5          Human Resources Data

KMR collects Personal Information from current, prospective and former Employees, their contact points in case of a medical emergency, and beneficiaries under any insurance policy (“Human Resources Data”).  The Human Resources Data we collect may include title, name, address, phone number, email address, date of birth, passport number, driver’s license number, Social Security number, financial information related to credit checks, bank details for payroll, information that may be recorded on a CV or application form, language abilities, contact information of third parties in case of an emergency and beneficiaries under any insurance policy.  We may also collect Sensitive Human Resources Data such as details of health and disability, including mental health, medical leave, and maternity leave.

We acquire, hold, use and Process Human Resources-related Personal Information for a variety of business purposes including:

  • workflow management, assigning, managing and administering projects;
  • Human Resources administration and communication;
  • payroll and the provision of benefits;
  • compensation, including bonuses and long-term incentive administration, stock plan administration, compensation analysis, including monitoring overtime and compliance with labor laws, and company recognition programs;
  • job grading activities;
  • performance and employee development management;
  • organizational development and succession planning;
  • benefits and personnel administration;
  • absence management;
  • helpdesk and IT support services;
  • regulatory compliance;
  • internal and/or external or governmental compliance investigations;
  • internal or external audits;
  • litigation evaluation, prosecution and defense;
  • diversity and inclusion initiatives;
  • restructuring and relocation;
  • emergency contacts and services;
  • Employee safety, including monitoring compliance with safety regulations by confirming Employees are not speeding or otherwise violating traffic laws;
  • compliance with statutory requirements;
  • Processing of employee expenses and travel charges; and
  • acquisitions, divestitures and integrations.

2.6          Social Media and Interest-Based Advertising

Generally, online social media resources are interactive tools that enable Data Subjects to collaborate and share information with others.  Social media resources include, but are not limited to, social networks, discussion boards, bulletin boards, blogs, wikis, and referral functions to share web site content and tools with a friend or colleague.  KMR may collect Personal Information to enable Data Subjects to use online social media resources.  We may also enable you to use these social media resources to post or share Personal Information with others.  If you use an online social media resource offered by a third party (“Third Party SMR”) through KMR, you acknowledge that KMR may be able to access any information you make public through such Third Party SMR (such as your username, comments, posts, and contacts) and other information your privacy settings on such Third-Party SMR permit KMR to access.

When using social media resources, you should take into careful consideration what Personal Information you share with others.  KMR will comply with the terms of this Privacy Policy and the privacy policies applicable to the social media resources it uses. Through our Sites, KMR may in the future allow Third-Party advertising partners to set tracking tools (e.g., cookies) to collect anonymous, non-Personal Information regarding your activities (e.g., your IP address, page(s) visited, time of day).  We may also share such information we have collected with Third-Party advertising partners.  These advertising partners may use this information (and similar information collected from other websites) for purposes of delivering future targeted advertisements to you when you visit non-KMR related websites within their networks.  This practice is commonly referred to as “interest-based advertising” or “online behavioral advertising.”

2.7          Information from Third-Party Sources

KMR may collect information about you from Third-Party sources to supplement information provided by you.  This supplemental information allows us to verify information that you have provided to KMR and to enhance our ability to provide you with information about our business, products and services.  KMR’s agreements with these Third Party-sources typically limit how the Company may use this supplemental information.

2.8          Direct Mail, Email and Outbound Telemarketing

Individuals who provide us with Personal Information, or whose Personal Information we obtain from Third Parties, may receive periodic emails, newsletters, mailings or phone calls from us with information on KMR or our business partners’ products and services or upcoming special offers/events we believe may be of interest.  We offer the option to decline these communications at no cost to the individual by following the instructions in Section 3 below.

2.9          Research/Survey Solicitations

From time to time, KMR may perform research (online and offline) via surveys.  We may engage Third Party-service providers to conduct such surveys on our behalf.  All survey responses are voluntary, and the information collected will be used for research and reporting purposes to help us better serve Individuals by learning more about their needs and the quality of the products and services we provide.  The survey responses may be utilized to determine the effectiveness of our Sites, various types of communications, advertising campaigns and/or promotional activities.  If an Individual participates in a survey, the information given will be used along with that of other study participants.  We may share anonymous individual and aggregate data for research and analysis purposes.

2.10        All Internet Users – Cookies, Pixel Tags, Web Beacons and Aggregate Information

2.10.1    Cookies

Like many other websites, KMR or its business partners may employ a cookie, or small piece of computer code that enables Web servers to “identify” visitors, each time an Individual initiates a session on the Company’s Sites.  A cookie is set in order to identify Data Subjects; tailor our Sites to you; measure and research the effectiveness of our Sites’ features, offerings and advertisements; and authenticate users for registered services.    Cookies can only access Personal Information that you have provided on our Sites and cannot be accessed by other sites.   We may also use Google Analytics and Google Analytics Demographics and Interest Reporting to collect information regarding visitor behavior and visitor demographics on some our Sites, and to develop website content.  This analytics data is not tied to any Personal Information.  At any time, visitors may choose to opt-out of Google Analytics tracking with the Google Analytics opt-out browser add-on found at www.tools.google.com/dlpage/gaoptout.  Data Subjects also have the ability to delete cookie files from their own hard drive at any time by clicking on the Privacy or History tab typically found on the Settings or Options menu in your internet browser.  However, please also be advised that cookies may be necessary to provide access to much of the content and many of the features of KMR’s Sites.

2.10.2    Pixel Tags/Web Beacons

KMR may use “pixel tags,” also known as “web beacons,” which are small graphic files that allow us to monitor the use of our Sites.  A pixel tag can collect information such as the Internet Protocol (“IP”) address of the computer that downloaded the page on which the tag appears; the URL of the page on which the pixel tag appears; the time the page containing the pixel tag was viewed; the browser type and language; the device type; geographic location; and the identification number of any cookie on the computer previously placed by that server.  When corresponding with you via HTML capable email, we or our Third Party-service providers may use “format sensing” technology, which allows pixel tags to let us know whether you received and opened our email.

2.10.3    Anonymous and Aggregated Information

Anonymized and aggregated information is used for a variety of functions, including the measurement of visitors’ interest in and use of various portions or features of the Sites.  Anonymized or aggregated information is not Personal Information, and KMR may use such information in a number of ways, including research, internal analysis, analytics and any other legally permissible purposes.  We may share this information within KMR and with Third Parties for our or their purposes in an anonymized or aggregated form that is designed to prevent anyone from identifying you.

2.11        Mobile Computing

KMR may provide websites and online resources that are specifically designed to be compatible and used on mobile computing devices.  Mobile versions of KMR’s Sites may require that users log in with an account.  In such cases, information about use of each mobile version of the website may be associated with user accounts.  In addition, KMR may enable Individuals to download an application, widget or other tool that can be used on mobile or other computing devices.  Some of these tools may store information on mobile or other devices.  These tools may transmit Personal Information to KMR to enable Data Subjects to access user accounts and to enable KMR to track use of these tools.  Some of these tools may enable users to email reports and other information from the tool.  KMR may use personal or non-identifiable information transmitted to the Company to enhance these tools, to develop new tools, for quality improvement and as otherwise described in this Privacy Policy or in other notices KMR provides.

3.0          Choice/Modalities to Opt Out

You have the right to opt out of certain uses and disclosures of your Personal Information, as set out in this Privacy Policy.

3.1          General

Where you have consented to KMR’s Processing of your Personal Information or Sensitive Personal Information, you may withdraw that consent at any time and opt out by following the instructions in this Section 3.  Additionally, before we use Personal Information for any new purpose not originally authorized by you, we will provide information regarding the new purpose and give you the opportunity to opt out.

Prior to disclosing Sensitive Data to a Third Party or Processing Sensitive Data for a purpose other than its original purpose or the purpose authorized subsequently by the Data Subject, KMR will endeavor to obtain each Data Subject’s explicit consent (opt-in).  Where consent of the Data Subject for the Processing of Personal Information is otherwise required by law or contract, KMR will comply with the law or contract.

3.2          Email and Telephone Communications

An “Unsubscribe” button will be provided at the top or bottom of each email communications sent by KMR so that you can opt-out.  However, we will continue to send transaction-related emails regarding products or services you have requested.

We maintain telephone “do not call” lists and “do not mail” lists as mandated by law.  We process requests to be placed on do not mail, do not phone and do not contact lists within 60 days after receipt, or such shorter time as may be required by law.

3.3          Human Resources Data

With regard to Personal Information that KMR receives in connection with the employment relationship, KMR will use such Personal Information only for employment-related purposes as more fully described in section 2.3 above.  If KMR intends to use this Personal Information for any other purpose, the Company will provide the Data Subject with an opportunity to opt-out of such uses.

3.4          “Do Not Track”

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers.  DNT is a way for users to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services.  KMR does not recognize or respond to browser-initiated DNT signals.

3.5          Advertising Choices

While KMR does not currently participate in interest-based advertising, it may in the future use your browsing for interest-based advertising purposes.  In the event that we do so, an opportunity to opt-out of such interest-based advertising will be provided through an AdChoices link.  Even if you opt-out through this service, we may still collect non-Personal Information regarding your activities on our Sites and use it for non-interest-based advertising purposes as described in this Privacy Policy.

Advertisements on Third-Party websites that contain the AdChoices link and that link to this Privacy Policy may have been directed to you based on anonymous, non-Personal Information collected by advertising partners over time and across websites.  These advertisements provide a mechanism to opt-out of the advertising partners’ use of this information for interest-based advertising purposes.  Even if you opt-out through this service, we may still collect and use information from the advertisements for non-interest based advertising purposes, such as to determine the effectiveness of the advertisements.

3.6          Compliance with the Digital Advertising Alliance

Should KMR engage in interest-based advertising, it will endeavor to comply with the cross-industry Self-Regulatory Program for Online Behavioral Advertising as managed by the Digital Advertising Alliance (DAA) (http:///aboutads.info).  As part of this service, KMR’s online advertisements may sometimes be delivered with icons that help Individuals understand how their data are being used and provide choice options to Individuals that want more control.  The list of our advertising partners may be updated from time to time.  To opt-out of internet-based advertising by all DAA-participating companies, please visit http://www.aboutads.info/choices/.

4.0          Onward Transfer

4.1          Information We Share

KMR does not sell or otherwise disclose Personal Information about you, except as described in this Privacy Policy or as you explicitly consent.  KMR may share Personal Information with our service providers, consultants, sponsors, and affiliates for our and our affiliates’ internal business purposes or to provide you with a product or service that you have requested.  Payment information will be used and shared only to effectuate your order and may be stored by a service provider for purposes of future orders.  KMR may also provide Personal Information to business partners with whom we may jointly offer products or services, or whose products or services we believe may be of interest to you.  In such cases, our business partner’s name will appear, along with KMR’s.  KMR requires our service providers, sponsors, and business partners to agree in writing to maintain the confidentiality and security of Personal Information they maintain on our behalf and not to use it for any purpose other than the purpose for which KMR retained them or in the case of sponsors, for which they retained KMR.

We may disclose information about you: (i) if we are required to do so by law, court order or legal process; (ii) in response to lawful requests by public authorities, including to meet national security or law enforcement requirements; (iii) under the discovery process in litigation; (iv) to enforce KMR policies or contracts; (v) to collect amounts owed to KMR; (vi) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation or prosecution of suspected or actual illegal activity; or (vii) in the good faith believe that disclosure is otherwise necessary or advisable.   In addition, from time to time, server logs may be reviewed for security purposes – e.g., to detect unauthorized activity on the Sites.  In such cases, server log data containing IP addresses may be shared with law enforcement bodies in order that they may identify users in connection with their investigation of the unauthorized activities.

We reserve the right to disclose or transfer any information we have about you in the event of a proposed or actual purchase, any reorganization, sale, lease, merger, joint venture, assignment, amalgamation or any other type of acquisition, disposal or financing of all or any portion of our business or of any of the business assets or shares (including in connection with any bankruptcy or similar proceeding).  Should such an event occur, KMR will endeavor to direct the transferee to use Personal Information in a manner that is consistent with this Privacy Policy.

4.2          Data Transfers

All Personal Information sent or collected via or by KMR may be stored anywhere in the world, including but not limited to, in the United States, in the cloud, our servers, the servers of our affiliates or the servers of our service providers.  By providing information to KMR, you consent to the storage of your Personal Information in these locations.

5.0          Rights of Access, Rectification, Erasure and Restriction

You may seek confirmation regarding whether KMR is Processing Personal Information about you, request access to Personal Information, and ask that we correct, amend or delete your Personal Information where it is inaccurate.  Where otherwise permitted by applicable law, you may use any of the methods set out in Section 8 of this Privacy Policy to request access to, receive (port), restrict Processing, seek rectification or request erasure of Personal Information held about you by KMR.  Such requests will be Processed in line with local laws.  Although KMR makes good faith efforts to provide Individuals with access to their Personal Information, there may be circumstances in which KMR is unable to provide access, including but not limited to: where the information contains legal privilege, would compromise others’ privacy or other legitimate rights, where the burden or expense of providing access would be disproportionate to the risks to the Individual’s privacy in the case in question or where it is commercially proprietary.  If KMR determines that access should be restricted in any particular instance, we will provide you with an explanation of why that determination has been made and a contact point for any further inquiries.  To protect your privacy, KMR will take commercially reasonable steps to verify your identity before granting access to or making any changes to your Personal Information.

6.0          Retention

KMR retains the Personal Information we receive as described in this Privacy Policy for as long as you use our Sites or as necessary to fulfill the purpose(s) for which it was collected, provide our products and services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements and comply with applicable laws.

7.0          Security

The security of all Personal Information provided to KMR is important to us, and KMR takes reasonable steps designed to protect your Personal Information.  Unfortunately, no data transmission over the Internet or storage of information can be guaranteed to be 100% secure.  As a result, while KMR strives to protect your Personal Information, we cannot ensure or warrant the security of any information you transmit to KMR, and you do so at your own risk.

8.0          Redress / Compliance and Accountability

If after reviewing this Privacy Policy, you would like to submit a request or you have any questions or privacy concerns, please contact:

KMR, Inc.
Attn: Linda Martin
150 North Wacker Drive • Suite 1070
Chicago, Illinois, 60606
Phone: 1 (312) 795-0400
Email: lmartin@kmrgroup.com

KMR will address your concerns and attempt to resolve any privacy issues in a timely manner.

9.0          Other Rights and Important Information

9.1          Information Regarding Children

Due to the nature of KMR’s business, services and benefits are not marketed to minors.  KMR does not knowingly solicit or collect Personal Information from children under the age of 13.  If we learn that we have collected Personal Information from a child under the age of 13, we will promptly delete that information.

9.2          California Privacy Rights

California law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the Third Parties to whom we have disclosed their Personal Information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of Personal Information disclosed to those parties.  KMR does not share Personal Information with third parties for their own marketing purposes.

9.3          Links to Third-Party Websites

Please note that our Sites may contain links to other websites for your convenience and information.  KMR does not control Third-Party websites or their privacy practices, which may differ from those set out in this Privacy Policy.  KMR does not endorse or make any representations about Third-Party websites.  Any Personal Information you choose to give to unrelated Third Parties is not covered by this Privacy Policy.  KMR encourages you to review the privacy policy of any company or website before submitting your Personal Information.  Some Third Parties may choose to share their users’ Personal Information with KMR; that sharing is governed by that company’s privacy policy, not this Privacy Policy.

9.4          Changes to the Privacy Policy

KMR may update this Privacy Policy from time to time as it deems necessary in its sole discretion.  If there are any material changes to this Privacy Policy, KMR will notify you by email or as otherwise required by applicable law.  KMR encourages you to review this Privacy Policy periodically to be informed regarding how KMR is using and protecting your information and to be aware of any policy changes.  Your continued relationship with KMR after the posting or notice of any amended Privacy Policy shall constitute your agreement to be bound by any such changes.  Any changes to this Privacy Policy take effect immediately after being posted or otherwise provided by KMR.

9.5          Compliance

This Privacy Policy shall be implemented by KMR.  KMR has put in place mechanisms to verify ongoing compliance this Privacy Policy.  Any Employee that violates these privacy principles will be subject to disciplinary procedures.

10.0        Definitions

“Agent” means any third party that processes Personal Information pursuant to the instructions of, and solely for, KMR or to which KMR discloses Personal Information for use on its behalf.

“Data Subject” is an identified or identifiable natural person.

“Employee” refers to any current, temporary, permanent, prospective or former employee, director, contractor, worker or retiree of KMR or its subsidiaries worldwide.

“Personal Information” is any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 “Process” or “Processing” means any operation which is performed upon Personal Information, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

“Protected Health Information” is a subset of Personal Information and has the meaning set out in the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”), and in particular at 45 C.F.R. § 160.103, as it may be amended from time to time.

“Sensitive Data” or “Sensitive Personal Information” is a subset of Personal Information which, due to its nature, has been classified by law or by policy as deserving additional privacy and security protections.  Sensitive Personal Information includes Personal Information regarding EU-residents that is classified as a “Special Category of Personal Data” under EU law, which consists of the following data elements: (1) race or ethnic origin; (2) political opinions; (3) religious or philosophical beliefs; (4) trade union membership; (5) genetic data; (6) biometric data where Processed to uniquely identify a person; (6) health information; (7) sexual orientation or information about the individual’s sex life; or (8) information relating to the commission of a criminal offense.

“Third Party” is any natural or legal person, public authority, agency or body other than the Data Subject, KMR or KMR’s agents.

11.0        Superseded Documents

Title
KMR Privacy Commitment

 

12.0        Change Log

Document all modifications to this Policy in DESCENDING order (most recent to oldest), and include when Policy was initially released and expired.

Date Rev Change Made Reason
June 2018 A New Policy Establish more robust privacy policy

PREVNEXT