Global Coalition for Adaptive Research (“GCAR”) recognizes the importance of protecting the privacy of your personal information, and we have prepared this Privacy Policy to provide you with important information about our privacy practices. This Privacy Policy applies when you use our website, mobile application, or other online service (collectively, the “Services”) that links or refers to it. It does not govern or apply to information collected or used by GCAR through other means.

Information We Collect

We may collect personal information about our users in various ways. For example, we may collect information that you provide to us, information that we collect through your use of the Services, and information that we collect from publicly available sources or third parties.

Information You Provide to Us. When you contact us, request information, or otherwise interact with the Services, we may ask you to provide personal information such as your name, e-mail address, year of birth, gender, street address, and related information. We may collect payment information, such as your credit card number and expiration date, where appropriate to process a donation or financial transaction you have requested.

We also collect information that you provide us when you comment on posts, participate in message boards, and submit images, photos, videos, or other content to the Services. We may ask you for additional information at other times.

Information About Your Use of the Services. In addition to the information you provide to us directly, we may collect information about your use of the Services. For example, we may collect:

  • Device information — such as your hardware model, IP address, other unique device identifiers, operating system version, and settings of the device you use to access the Services.
  • Usage information — such as information about the Services you use, the time and duration of your use of the Services and other information about your interaction with content offered through a Service, and any information stored in cookies and similar technologies that we have set on your device. By using the Services, you consent to our use of cookies and similar technologies. If you choose to refuse, disable, or delete these technologies, some of the Site’s functionality may no longer be available.
  • Location information — such as your computer’s IP address, your mobile device’s GPS signal, or information about nearby Wi-Fi access points and cell towers that may be transmitted to us when you use certain Services.

Information from Third-Party Sources. We may receive information about you from publicly and commercially available sources, as permitted by law, which we may combine with other information we receive from or about you. For example, we may receive information about you from a social media site if you connect to the Services or share content from the Services through that site.

Other Information We Collect. We also may collect other information about you, your device, or your use of the services in ways that we describe to you at the point of collection or otherwise with your consent. You may choose not to provide us with certain types of information, but doing so may affect your ability to use some of the Services.

How We Use Information

We may use information about you for various purposes, including:

To Operate the Site. We may use the information to operate, develop, analyze, evaluate, and improve the Site, maintain the security of the Site, or troubleshoot issues that arise on the Site.

To Provide and Manage the Services You Request. This includes, for example, sending you electronic newsletters and updates on GCAR activities, responding to requests for information, processing transactions that you have requested, and enabling you to participate in the features provided through the Services.

To Contact You. We may periodically contact you with information about GCAR and our affiliates, including online surveys, requests for feedback, legal notices, newsletters, and other important information. We may also contact you to solicit volunteers and donations in support of GCAR. You may opt out of receiving email messages from us by following the instructions contained in those email messages.

To Better Understand Our Readers and Users. GCAR may conduct research on our users’ demographics, interests and behavior based on the information we collect. We do this to better understand and serve our users, to improve our products and services, and to assist in meeting the objectives of GCAR.

To Protect the Rights of the Services and Others. We may use your personal information as we believe is necessary or appropriate to protect, enforce, or defend the legal rights, privacy, safety, or property of GCAR, its employees or agents, the Services, or other third parties and to comply with applicable law or legal process.

Consent. We may otherwise use your information with your consent or at your direction.

Sharing of Information

We never give, sell or rent our mailing or donor lists. Exceptions to this policy include your approval or request to share your information, legal processes, or when we believe that disclosure is necessary to protect you or our rights as required by law. If you connect a social media account with the Services or share content from the Services through social media, we may share your information with that social media service. The social media services’ use of the shared information will be governed by the social media services’ privacy policy and your social media account settings. If you do not want your information shared in this way, do not connect your social media service account with your Services.

Links to Third-Party Sites

Our Services may link to third-party websites and services that are outside our control. We are not responsible for the security or privacy of any information collected by other websites or other services. You should exercise caution, and review the privacy statements applicable to the third-party websites and services you use.

Other Important Information

Updates to Privacy Policy. We may modify this Privacy Policy. In the event that we update the Privacy Policy, we will also update the Effective Date at the top of this Privacy Policy. Any changes to this Privacy Policy will become effective when we post the revised policy on the Site.

International Users. The Site is hosted in and managed from the United States. United States data protection and other relevant laws may not be the same as those in your jurisdiction. If you are located outside the United States, you consent to having any information processed in the United States.

Children’s Privacy. We do not knowingly collect any personal information from children under the age of 13 without parental consent, unless permitted by law. If we learn that a child under the age of 13 has provided us with personal information, we will delete it in accordance with applicable law.

Your California Privacy Rights. California residents are entitled once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of personal information to third parties for their direct marketing purposes in the preceding calendar year. We do not share personal information with third parties for their own direct marketing purposes.

Do-Not-Track Signals and Similar Mechanisms. Some web browsers may transmit “do not track” signals to the websites with which the user communicates. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they are aware of them. Because there currently is no industry standard concerning what, if anything, websites should do when they receive such signals, the Site currently does not take action in response to these signals.

Contact Us. If you have any questions about this Privacy Policy or our practices, please contact us at info@GCAResearch.org.


Privacy Statement – European Union, European Economic Area, Switzerland, and United Kingdom

This notice applies to you only if are located in a member state of the European Union, the European Economic Area, Switzerland, or the United Kingdom.

Global Coalition for Adaptive Research, Inc (GCAR) is committed to protecting the privacy and security of your personal information. This privacy notice describes how we collect and use personal information about you during and after your relationship with us, in accordance with the applicable data protection legislation.  For the purpose of this document, we are referring to the UK Data Protection Act 2018 (including as amended), UK GDPR, the Swiss Federal Act on Data Protection (FADP), and EU GDPR 2016 ((EU) 2016/679.

Our lawful basis for processing personal data.

In general, GCAR uses Personal Data for its legitimate interests in compliance with applicable law and regulation. In certain situations, GCAR may rely on alternative lawful bases for using your Personal Data in specific situations. In such cases, you will be notified with additional information on the lawful use of your Personal Data.

What We Collect.

We collect the following personal information about you that you voluntarily supply to us via our website, including the following:

  • Name
  • Email address
  • Employment Information (e.g., University affiliation, Investigative Site)
  • Country of residence

When you visit the GCAR website, we may also collect “Other Information” that does not reveal your specific identity or does not relate to an identifiable individual. This might include, for instance, browser and device information; App usage data; information collected through cookies, pixel tags, and other technologies; demographic information and other information provided by you; or aggregated information. We use this information to facilitate our operation of the Sites.

In some instance we may also collect

  • Clinical Trial Related Personal Data: Personal Data may be collected from clients, personnel, clinical study participants (including patients, spouses, caregivers and legal guardians), investigator site personnel, healthcare providers, service providers, suppliers and business partners for GCAR to carry out business, operational, and safety activities related to a clinical trial or research study. Such Personal Data may be disclosed to other entities participating in the study, including the sponsor of the study, investigative sites, and third-party services providers and suppliers.
  • Business Contact Personal Data: Personal Data may be collected from clients, service providers, suppliers, and business partners in order to discuss prospective business opportunities, GCAR service offerings or provide customer support.

GCAR is the Controller of the personal information we collect. Our Data Protection Policy governs the use and storage of your personal information. You may request a copy of this policy by sending an email to our Data Protection Officer at dpo@mwbconsulting.com detailing the reason for your request.

How We Collect Your Data

At this time, we have used data directly provided to us by yourself or your employer as part of your engagement on the GCAR GBM AGILE clinical trial platform. We also collect data and process data when you:

  • Interact with this site or contact us using the contact information provided.

How Does GCAR Secure Personal Data?

We have implemented organizational, technical, and administrative measures in an effort to protect Personal Data within our organization, including security controls that are intended to prevent unauthorized access to our systems, including standard operating procedures, firewalls and restricted access.

While we take these reasonable steps to secure your Personal Data from loss, misuse, interference and unauthorized access, modification and disclosure, you should be aware no security procedures or protocols are ever guaranteed to be 100 percent secure from intrusion or hacking, and there is therefore always some risk to sharing Personal Data online.

If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account has been compromised), please immediately notify us in accordance with the “complaints and How to Contact Us” sections below.

Why We Collect Personal Information

We process your personal data only for predefined and lawful purposes.

We need your personal data in order to provide you with the following:

  • To provide access and allow use of this portal
  • To send you more information about our services and training associated with our studies
  • To respond to your requests for contact with us
  • To maintain and improve our services

Sensitive Information

We ask that you not send us or disclose any sensitive Personal Data (e.g., information related to racial or ethnic origin, health, biometrics or genetic characteristics) on or through the Site.

However, there are special circumstances where GCAR may collect and use sensitive Personal Data including data pertaining to race, ethnic origin, sexual orientation, sex life, religious or philosophical beliefs, genetic data, biometric data and medical or health conditions.

GCAR shall only collect and use sensitive Personal Data where permitted, and subject to heightened restrictions, under applicable law (and only after obtaining your explicit consent or authorization where so required) and where we have provided you with specific notice of such processing.

What We Do With Your Personal Information

We will process (collect, store and use) the information you provide in a manner compatible with the UK Data Protection Act 2018 (including as amended), UK GDPR, the Swiss Federal Act on Data Protection (FADP), and EU GDPR 2016 ((EU) 2016/679 relevant privacy laws named above (as such apply to you).

We will endeavor to keep your information accurate and up to date.

Your personal information is processed by GCAR personnel located  in the United States. Storage of your information takes place at our hosted service provider located in the United States. GCAR may engage with third party processors to provide you access and allow use of this portal.  Otherwise, no third party providers or external agencies have access to your personal information, unless specifically required by law.

How Long We Keep Your Personal Information

Personal information that you voluntarily provide to us for the purposes specified previously will be kept by us until such time that you notify us that you no longer wish us to use or retain your personal information. You may do this via email to our Data Protection Officer at dpo@mwbconsulting.com.

Your Data Protection Rights

Every user is entitled to the following:

  • The right to access – You have the right to request us for copies of your personal data.
  • The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request us to complete information you believe is incomplete.
  • The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
  • The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • The right to object to processing – You have the right to object to processing of your personal data, under certain conditions.
  • The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us using the details under ‘How To Contact Us’ below.

Privacy Notices of Other Websites

The GCAR  website may contain links to other websites. Our privacy notice applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Complaints

In the event that you wish to make a complaint about how your personal data is being processed by GCAR (or third parties), or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and GCAR data protection representatives.

If you feel that your personal information has not been handled appropriately according to the law, you can lodge a complaint with your Supervisory Authority – a list can be found here: https://ictinstitute.nl/europes-data-protection-authorities/

How to Contact Us

If you have any questions about this privacy notice, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Our email: legal@gcaresearch.org or our DPO at: dpo@mwbconsulting.com

Or write to us at:

Global Coalition for Adaptive Research, Inc.

700 Larkspur Landing Cir Suite 199

Larkspur, CA 94939-1754

How to contact our Data Protection Representative:

Global Coalition for Adaptive Research has appointed DataRep as its Data Protection Representative for the purposes of the General Data Protection Regulation, EU 2016/679 in the EU/EEA, The Data Protection Act 2018 (as amended) in the UK, and the Federal Act on Data Protection (FADP) for Switzerland.

If Global Coalition for Adaptive Research has processed or is processing your personal data, you may be entitled to exercise your rights under GDPR in respect of that personal data. For more details on the rights you have in respect of your personal data, please refer to the European Commission (https://commission.europa.eu/law/law-topic/data-protection_en) or the national Data Protection Authority in your country.

Global Coalition for Adaptive Research takes the protection of personal data seriously, and has appointed DataRep as their Data Protection Representative in the European Union, UK, and Switzerland so that you can contact them directly in your home country. DataRep has locations in each of the 27 EU countries, the UK, and Norway & Iceland in the European Economic Area (EEA),  as well as Switzerland, so that Global Coalition for Adaptive Research’s customers can always raise the questions they want with them.

If you want to raise a question to Global Coalition for Adaptive Research, or otherwise exercise your rights in respect of your personal data, you may do so by:

  • sending an email to DataRep at datarequest@datarep.com quoting <Global Coalition for Adaptive Research> in the subject line,
  • contacting us on our online webform at www.datarep.com/data-request, or
  • mailing your inquiry to DataRep at the most convenient of the addresses provided below.

PLEASE NOTE: when mailing inquiries, it is ESSENTIAL that you mark your letters for ‘DataRep’ and not ‘Global Coalition for Adaptive Research’ or ‘GCAR’, or your inquiry may not reach us. Please refer clearly to Global Coalition for Adaptive Research or GCAR in your correspondence. On receiving your correspondence, Global Coalition for Adaptive Research is likely to request evidence of your identity, to ensure your personal data and information connected with it is not provided to anyone other than you.

If you have any concerns over how DataRep will handle the personal data we will require to undertake our services, please refer to our privacy notice at www.datarep.com/privacy-policy.

Please ensure request is addressed to ‘DataRep’ and not Global Coalition for Adaptive Research or GCAR.

France DataRep, 72 rue de Lessard, Rouen, 76100, France

Germany DataRep, 3rd and 4th floor, Altmarkt 10 B/D, Dresden, 01067, Germany

Switzerland DataRep, Leutschenbachstrasse 95, Zurich, 8050, Switzerland

United Kingdom DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom

Changes to Our Privacy Notice

GCAR keeps its privacy notice under regular review and places any updates on this web page.