This Privacy Notice applies to your personal information, described below, collected by or on behalf of Merck Sharp & Dohme Corp., Whitehouse Station, NJ, USA, and its affiliates (referred to as "our", "we" or "us" throughout this Privacy Notice), through this GP Strategies, Inc. website, which we use to provide our Know to Report ("KtR") Training to you (the "Website"). The processing of your personal information is necessary for you and your employer (which includes any company for which you are a contractor) to access and use the functionality of the Website, including your ability to take our KtR Training through the Website, for us to answer your questions and requests and for us to operate the Website, including the security of the Website.
We are acting as data controller of the processing of your personal information, for the purposes described below. Your personal information will be collected and processed in accordance with this Privacy Notice, our Privacy Statement provided at the link on the registration page of the Website (our "Privacy Statement"), and applicable laws.
What personal information is collected?
Your personal information includes any of your personal information we collect via the Website in either of two ways:
(i) Information you submit: We collect personal information and other information you submit when using the Website, including when you register in the Website. This information may include, but is not limited to: first and last name, business email address, the country of your work location, the vendor code for your employer that has been provided for use of the Website and your password for use of the Website.
(ii) Automatically collected information: The Website also collects certain information that is provided by your browser in connection with your access and use of the Website. This information may include but is not limited to the type of browser you are using, type of operating system, your IP address, and the date and time you logged into the Website and of activity while on the Website.
How is the personal information used?
We collect and process your personal information for the following purposes:
(i) Manage and provide the functionality of the Website, which may include, but is not limited to, providing you and your employer with the ability to access and use the Website, including taking the Training through the Website, tracking and reporting on whether you have completed the Training and allowing your employer to monitor, report on and manage the Training, and for us to answer your questions and requests; and
(ii) Operate the Website, including security features of the Website.
What legal basis do we have for processing your personal information?
We may process your personal information under more than one legal basis. We may rely on the following legal basis:
- To meet certain legal obligations related to our KtR Training delivered through the Website.
- Your consent to the processing of your personal information if you consent to that processing by accepting the terms of this Notice and our Privacy Statement. You can withdraw your consent at any time by selecting Profile on the Website and clicking the Remove and Leave Platform button under Opting Out.
Recipients of your personal information
Your personal information may be transferred to GP Strategies who will process your personal information on our behalf. The processing of your personal information by any such processor is governed by contract that restrict such processor to processing your personal information in accordance with this Privacy Notice, our Privacy Statement and applicable laws.
Security of personal information
We will take reasonable steps to protect your personal information against unauthorized access, disclosure, alteration or destruction. You are personally responsible for securing your own copies of your passwords and related access codes for the Website.
Retention of your personal information
We will retain your personal information for the period of time necessary to fulfill the purposes listed in this Privacy Notice or if earlier, until you have deleted your profile and for any period of time required by law.
Transfers outside the European Economic Area
Your personal information may be processed in various countries, including storage and other processing in the United States. To the extent your personal information is transferred from the European Economic Area to another country, which may include countries that do not provide the same level of data protection as within the European Economic Area, we will ensure that the transfer is covered by an adequate level of protection in accordance with applicable law. This may occur by way of standard contractual clause or MSD's Binding Corporate Rules, which have been approved by the data protection authorities in the European Economic Area Member States. Please refer to our Privacy Statement for more details.
Your rights and how to contact us
You may exercise your rights, among others, of access and rectification, deletion and objection to the processing of your personal information by contacting us as provided in our Privacy Statement. You can access certain personal information associated with your profile on the Website by selecting Profile on the Website. You can also delete the personal information associated with your profile on the Website by selecting Profile on the Website and clicking the Remove and Leave Platform button under Opting Out.
© 2020 GP Strategies Corporation. All rights reserved.