H-Research Asia – Personal Data Privacy Policy

v2-updated 29-1-2020

This Notice explains how information that may be collected may be used in connection with participation (typically Healthcare stakeholders and/or Patients) in market research with H-Research Asia SDN BHD.

At H-Research Asia, we take all privacy matters seriously. The nature of our business is to collect data on behalf of our research clients/sponsors. The types of research engagements we conduct include face to face, telephone and online market research.
All the data we collect is presented to the sponsors in aggregate form. We do not share any Personal Data with our clients. The only exception may be in the reporting of any Adverse Events mentioned during the course of the market research project; however, Personal Data would only be shared with respondent consent. In case of a refusal, your Personal Data will not be released as part of the reporting process.

H-Research Asia is proud to be member of EphMRA (European Pharmaceutical Market Research Association), and as such follow their guidance on all matters relating to market research codes of conduct, data protection and adverse event reporting.

Topics covered:

  1. How/why are we collecting data?
  2. What personal data do we (possibly) collect?
  3. How do we protect personal data?
  4. Legal basis for processing of personal data
  5. Disclosures
  6. For how long will we retain personal data?
  7. How do we protect personal data?
  8. Every person we collect data from has right to:

1. How/Why are we collecting data?

  1. We may sometimes be passed data (client’s target list), lawfully collected by our clients, who want us to ask their customers (typically HCPs) whether they would like to participate in market research and consultancy projects.
  2. Requesting and collecting data about respondents services which are suitable for their activity.
  3. As part of any market research surveys, we will always ask for your consent to do so.
  4. To assess applications for jobs opportunities we receive resume for.

2. What personal data do we (possibly) collect?

  1. Full Name
  2. Company name (hospital)
  3. Job title
  4. Area of specialization
  5. Email
  6. Phone number
  7. Data relating to the subject of the market research study
  8. Audio/video recording of interviews for analysis and quality control

3. How do we protect personal data?

  1. We may collect additional data, only ever with your consent. You will be provided with the full details of the data we wish to collect at the time we ask for your consent.
  2. Data collected for the market research project is intended exclusively to inform decision-making within the client company. We will anonymise all personal data provided by you as soon as possible, and prior to data analysis.
  3. We will not sell, share, transfer, or rent any Personal data to any third-parties in ways different from what is disclosed in this Privacy Notice and our Terms and Conditions.
  4. We shall not process Personal Data in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by you.
  5. To that end, we will take reasonable steps to ensure that Personal Data is reliable for its intended use, accurate, complete, and current.

4. Legal basis for processing of personal data

  1. Where you have given consent for the processing of data for a specific purpose.
  2. Processing is necessary to meet contractual obligations.
  3. Processing is necessary for purposes of legitimate interest pursued by our company but are in relation to goods and services that respondents use in their role.

5. Disclosures

  1. o third parties who provide a service to us such as market research fieldwork agencies, email services providers or data processors. We require these third parties to comply strictly with our instructions and data protection laws and we make sure that appropriate controls are in place.
  2. We enter into contracts with all our third parties and regularly monitor their activities to ensure they are complying with our policies and procedures.
  3. To third party client companies. We will have strict agreements with these companies to limit what they can do with the data we give them. We will always ask for you consent before passing on your personal data in this way.
  4. Where we are under duty to disclose your personal data in order to comply with law or the disclosure is ‘necessary’ for purposes of national security, taxation and criminal investigation or we have your written consent.

6. For how long will we retain personal data?

  1. Your data is kept only for the necessary.
  2. Operate the service in accordance with legal requirements and tax and accounting rules.

7. How do we protect personal data?

  1. Appropriate physical security at our office.
  2. Electronically stored Personal Data is stored on a secure network, and access to our electronic data systems requires user authentication via password or similar means.
  3. We will maintain, monitor, test, and upgrade data security policies, practices, and systems to assist in protecting the Personal Data that we collect.

8. Every person we collect data from has right to:

  1. Access to personal data collected
  2. i. Have a right to obtain confirmation that your personal data is being processed.
    ii. Request a copy of your personal data.

  3. Delete or update personal data collected
  4. i. You can edit your personal data, including your address and contact details at any time. Please address requests to our Data Protection Officer (Renaud.Laune@H-Research-Asia.com).
    ii. Any changes you have requested may take up to 28 days before they take effect so you may receive communication within this period.

  5. Restrict processing of your personal data
  6. i. We will continue to store your data, but not process it any further. We do this by retaining just enough of your personal data so we can ensure that the restriction is respected in the future.

  7. Object
  8. i. You have the right to object to your personal data being processed, to marketing (including profiling) and for research purposes.
    ii. If we process your personal data for the exercise or defence of legal claims or we can demonstrate compelling grounds that override your rights and freedoms we may not be able to fulfil your request. However, we will contact you to discuss further.

  9. Lodge a complaint with a supervisory authority
  10. i. If you wish to lodge a complaint or seek advice from a supervisory authority please contact: The Office of the Information Commissioner: Renaud.Laune@H-Research-Asia.com
    ii. Website: www.H-Research-Asia.com