PRA Health Sciences is a contract research organization (CRO) with headquarters in Raleigh, North Carolina, USA. PRA is responsible for managing this study website.
At PRA, we are committed to protecting your privacy. This notice explains how we collect, use, and protect personal information that we obtain through your use of our corporate websites and other online services. Personal information means information that identifies an individual or relates to an identifiable individual.
PRA is responsible for controlling and processing the personal information it obtains. Our postal address is:
Pharmaceutical Research Associates Inc.
4130 ParkLake Avenue, Suite 400
Raleigh, North Carolina 27612 USA
Scope of Applicability
Why We Collect Your Personal Information
Clinical Study Participation
Automatically-Collected Technical Information
How We Share Personal Information
Cookies and Similar Technologies
How to Exercise Your Privacy Rights
Your Communications Preferences
Additional Information for Users in the European Economic Area and Switzerland
Other Important Information
SCOPE OF APPLICABILITY
This privacy notice applies to prahs.com and other websites or online services, including our portals, that are operated by or on behalf of PRA and that link or refer to this notice (the "Services").
We may provide a separate supplemental notice when we collect personal information through the Services, because it will give you further relevant information about that processing.
This notice does not apply to personal information that is collected offline, or through websites or other online services that do not link to this notice.
WHY WE COLLECT YOUR PERSONAL INFORMATION
The personal information we collect and how we use it depends on the context of your interactions with PRA, the choices you make, and the Services and features you use.
You provide this personal information directly when you apply to participate in our clinical research studies as a study volunteer. You may choose not to provide personal information, but in not doing so, we may be unable to complete your request.
We collect a certain amount of technical information from our website users about your access and how you interact with the Services. We use this information to improve your experience, and to help us to manage and protect the Services.
If you are interested in taking part in a clinical research study as a volunteer, you may use the Services to submit an online application form. The personal information we collect includes your name, gender, email address, telephone number, preferred study center location, and the best time to contact you. The study center that receives your questionnaire will contact you to further discuss possible study participation.
Automatically-Collected Technical Information
We automatically receive certain technical information from you as you interact with the Services. This information includes network routing information (where you came from), information about your device and browser, your IP address (which may identify your general geographic location or company), and the date and time of your visit.
We also automatically receive and record information about your interactions with the Services, such as clickstream information (e.g., when each webpage was visited and how much time was spent on the page), how often you access the Services, website performance data, and aggregate usage data.
We use this information to administer the Services, to understand how visitors navigate and use the Services so that we can make improvements to the Services, and to personalize and enhance your experience while using the Services.
We also use this information to protect the security and integrity of the Services.
For more information, please see the “Cookies and Similar Technologies” section below.
HOW WE SHARE PERSONAL INFORMATION
We share your personal information with selected study centers relating to the questionnaire you complete. You will be provided with more specific information about the selected study center in the follow up email we send when you register your interest.
We do not rent or sell your personal information to anyone.
We also share certain information with service providers that carry out functions or services on our behalf that enable our business operations. This will include our IT applications and systems, website analytics, and search engine providers. It also incorporates the protection and securing of our systems and services
We share your personal information where required by applicable laws and regulations.
We share your personal information with your consent; as necessary to complete any contract, transaction, action authorized by you or to fulfill your request.
When we share your personal information in specified circumstances:
Third-Party Service Providers
We share your personal information with third-party vendors, consultants, and other service providers who we engage to perform tasks on our behalf. They must abide by our privacy and data-security requirements and are not allowed to use personal data they receive from us for any other purpose.
Disclosures of Non-Identifiable Information
When we collect information that is not personal information or convert personal information into information which can no longer be used to identify you (such as through aggregation or anonymization), we may use and disclose that information for any purpose.
Disclosures to Protect PRA or to Comply with Legal Requirements
PRA may access, use, and disclose your personal information as we believe, in our sole discretion, is necessary or appropriate:
to comply with applicable laws or regulations;
to respond to valid legal process, including from law enforcement or other government agencies;
to maintain the security and integrity of the Services, including to prevent or stop an attack on our computer systems or networks; or
to protect the rights or property of PRA, including enforcing the terms governing the use of our Services and referring to law enforcement information suggesting that someone is using our Services to participate in illegal activity.
COOKIES AND SIMILAR TECHNOLOGIES
Some features and functions of the Services depend on cookies. If you choose to block cookies, you may not be able to use these features, and preferences that depend on cookies may be lost. If you choose to delete cookies, settings, and preferences controlled by those cookies will be deleted and may need to be recreated.
You may manage cookies at any time through your browser settings. To find out how to manage cookies, visit www.aboutcookies.org, then select "How to Control/Delete Cookies" and follow the instructions for your browser.
Web Beacons and Analytics Services
The Services may contain electronic images known as web beacons (also called single-pixel gifs or web bugs) that PRA uses to help deliver cookies on our websites, count users who have visited those websites, and analyze the usage of the Services.
The Services may also contain web beacons or similar technologies from third-party analytics providers that help us compile statistics about the effectiveness of promotional campaigns and other operations. These technologies allow the analytics providers to set or read their own cookies or other identifiers on your device, through which they can collect information about your online activities across applications, websites, or other products. For example, PRA uses Google Analytics to collect information about the number of visitors to the Services, where they come from, and how they use the Services. We use this information to help us to improve the Services.
Some browsers have incorporated “Do Not Track” (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the DNT signal, our Services do not currently respond to browser DNT signals.
HOW TO EXERCISE YOUR PRIVACY RIGHTS
We recognize that privacy rights differ across the world. We also understand that the obligations of clinical trials legislation may make the exercise of rights difficult to fulfill, for example, in order to maintain the integrity of clinical trials data.
If you are a subject participating in a clinical trial, you should contact the Doctor who is treating you at the clinical trial site. Your identity will not be known to PRA as your Doctor encoded enrollment data about you with a random patient number. PRA only has the random patient number. For this reason, we are unable to action an exercise of rights request from you via this process.
The exercise of rights can be made at any time, free of charge, by submitting a request.
You have the right to ask about the processing of your personal information. Specifically, under applicable data privacy laws, the rights detailed below are generally available to you, subject to certain limitations.
Right of Access. You have the right to obtain from confirmation as to whether or not your personal information is being processed. Where confirmed, you may obtain copies of your personal information.
Right of Rectification. You have the right to require us to correct any inaccurate or incomplete personal information that we hold or process.
Right to Withdraw Consent. You have the right to withdraw consent you have given to processing at any time. Withdrawal of your consent will not affect the lawfulness of processing that has taken place up to your withdrawal. If you withdraw your consent to processing, we shall stop all processing of your personal information immediately.
Right to Erasure. You have the right to have your personal information deleted if the continued processing of it is not justified. Where this right applies, the law includes some exceptions to this right which means it is not an automatic right.
Right to Restrict Processing. You have a right to limit the purposes for which your personal information can be processed. Where this right applies, the law includes some exceptions to this right.
Right to Object to Processing. Where this right applies, you have a right to oppose processing of your personal information. We will cease processing your personal information unless one of the exceptions in law applies.
Right of Data Portability. You have a right to transfer personal information provided by you to another data controller, where this is appropriate to do so.
Right to not be Evaluated on the Basis of Automated Processing. We will provide appropriate notification to you if automated processing is to happen and will seek your explicit consent before it takes place.
Right to Complain to a Supervisory Authority.
Under European Union law, EU citizens have a right to lodge a complaint directly with the country Supervisory Authority responsible for where you live, work or where an alleged infringement has occurred.
You may also contact PRA’s Chief Privacy Officer if you have any questions or concerns or wish to complain.
YOUR COMMUNICATION PREFERENCES
You can opt-out of receiving communications from us at any time by using the unsubscribe link in the email communications we send.
Where an application that we provide enables you to directly manage your preferences and the personal information you are providing, we will make this readily available to you for you to exercise choice. You can also contact us at any time. The supplemental information notice provided to you for specific Services may provide contact points or instructions on preference election for that Service.
ADDITIONAL INFORMATION FOR INDIVIDUALS IN THE EUROPEAN ECONOMIC AREA AND SWITZERLAND
Legal Bases for Processing of Personal Information
We rely on different legal grounds for the processing of your personal information that depend on the context of your interactions with PRA:
We process personal information we collect through the Services for certain legitimate business interests. These legitimate interests relate to conducting and managing our business. When we process personal information for these purposes, we will ensure that we take account of your privacy rights. Our legitimate business purposes include:
Where processing enables us to enhance, modify, personalize or otherwise improve our Services and communications for the benefit of our users;
Determining the effectiveness of promotional campaigns and advertising and ensuring communications are relevant to the choices you make; and to enhance the security of our Services and information systems to maintain the integrity and protection of information they contain.
If we process your personal information under a consent provided by you, you have the right to withdraw that consent at any time as set out in the section above “How to Exercise Your Rights.” Your withdrawal of consent, however, will not affect the lawfulness of any processing we have undertaken before the withdrawal.
We may process your personal information where necessary for our compliance with a legal obligation.
Finally, in some cases we process your Personal Information as necessary to perform a contract with you, or to take steps that you request before we enter into that contract.
OTHER IMPORTANT INFORMATION
PRA’s International Transfer, Processing, and Storage of Personal Information
PRA is a United States-headquartered global organization. The personal information we collect through the Services will be transferred, processed, and stored on servers in the United States.
Our privacy practices are designed to protect your personal information all over the world. For example, when personal information collected by our affiliates in the European Economic Area (“EEA”) is transferred outside the EEA, we use appropriate safeguards such as standard contractual clauses to ensure adequate protection for that information.
Retention and Deletion of Personal Information
PRA will retain your personal information: for as long as needed for the purposes described in this Privacy Notice and more specifically any supplemental notices relating to individual Services; as necessary to comply with our legal obligations (such as to honor the exercise of rights), resolve disputes, and enforce our agreements; or to the extent otherwise permitted by applicable law.
At the end of the retention period, PRA will delete your personal information in a manner designed to ensure that it cannot be reconstructed or read.
Links to Third-Party Websites and Services
The Services within the scope of this Privacy Notice are not designed or directed toward anyone under the age of 13. We do not knowingly collect or solicit personal information from anyone under the age of 13. If you are under 13, please do not use the Services or send any personal information about yourself to us.
Changes to This Privacy Notice
We update this Privacy Notice from time to time. When we post changes, we will revise the “Last Updated” date at the end of this Privacy Notice.
If there are material changes to this Privacy Notice or to the ways we will use your personal information, we will notify you either by prominently posting a notice of the changes in the Services before they take effect or by directly sending you a notification. We encourage you to review this Privacy Notice periodically to be informed of how we are using your information and to be aware of any changes to the Privacy Notice.
Questions About Our Privacy Practices
If you have any questions or concerns about our privacy practices or this Privacy Notice, please send us a detailed message by email to PrivacyOfficer@prahs.com; or by writing to us at the following address:
Pharmaceutical Research Associates Inc.
4130 Parklake Avenue, Suite 400
Raleigh, NC 27612 USA
Last Updated: June 2018