Policies

Vaccitech Plc Privacy Notice

Who are we?

Vaccitech is an immunotherapy and vaccine company developing products to treat and prevent infectious disease and cancer.

Our Data Protection Officer and data protection representatives can be contacted directly here:

GDPR@vaccitech.co.uk

Tel: +44 (0)1865 591448

The type of personal information we collect

We currently collect and process the following information:

  • Personal identifiers, contacts and characteristics (for example, name and contact details)
  • Information from cookies (please refer to cookie notice)
  • Pseudonymised clinical data from clinical study participants (pseudonymisation of data is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific person without the use of additional information – Vaccitech do not have that additional information)
  • Publicly available information

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • As part of our recruitment process

We also receive personal information indirectly, from the following sources in the following scenarios:

  • ​Healthcare and Science Professionals
  • Professional qualifications, employment history and other publicly available personal data
  • Information on Vaccitech activities with which you have engaged
  • Participants in Clinical Trials
    Collection of Special Category personal data to which you have consented including health and medical information. This information is pseudonymised, which means that it cannot be directly linked to you except by your doctor and healthcare team.

We may share this information with contracted service providers (CSPs). All CSPs will be contracted to abide by GDPR requirements

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent. You can remove your consent at any time. You can do this by contacting GDPR@vaccitech.co.uk
PLEASE NOTE, WITHDRAWAL OF CONSENT FROM PARTICIPATION IN A CLINICAL TRIAL WILL NOT RESULT IN DELETION OF DATA WHICH HAD BEEN COLLECTED PRIOR TO YOUR WITHDRAWAL OF CONSENT, BUT NO FURTHER DATA WILL BE COLLECTED, AND NONE OF YOUR DATA WILL BE PERSONALLY IDENTIFIABLE
(b) We have a contractual obligation.
(c) We have a legal obligation.
(d) We have a vital interest.
(e) We need it to perform a public task.
(f) We have a legitimate interest.

How we store your personal information

Your information is securely stored.

We keep personal data for time periods required by law. We will then dispose your information by secure deletion.

Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at GDPR@vaccitech.co.uk if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at GDPR@vaccitech.co.uk

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk