Privacy Policy

Date updated: 06/12/2019

When you use Bermani (collectively “Bermani”, “we” and “us”) , you’re trusting us with your personal data. We offer Services (“Services”, “Sites”, or “Bermani Services”) that enable organisations to manage their clinical governance processes.This privacy policy describes how Bermani is committed to the security and the protection of your and your Users' data in line with legal requirements and best practices.

We will continue to build and execute on our existing security practices to ensure we take all reasonable measures to secure and protect your data in accordance with all applicable laws, including the EU Data Protection Directive 95/46/EC, the EU General Data Protection Regulation 2016/679, the EU ePrivacy Directive 2002/58/EC as amended by Directive 2009/136/EC, as amended or superseded from time to time, and any national implementing legislation (“Data Protection Laws”).

Overview

Bermani obtains Personal Data about you from various sources to provide our Services and to manage our Sites. “You” may be a visitor to one of our websites, a user of one or more our Services (“User” or “Organisation”) or an employee of a user (“Employee”). If you are an Employee, Bermani will generally not collect your Personal Data directly from you. Your agreement with the relevant Organisation should explain how the Organisation shares your personal data with Bermani, and if you have questions about this sharing, then you should direct those questions to the Organisation.

This privacy policy is meant to help you understand what information we collect, why we collect it and how you can update, manage, export and delete your information.

If at any time you are concerned or have questions about how we might be handling your data, please reach out to our Data Protection Officer at support@bermani.co.uk . 

Personal data that Bermani collects

THINGS THAT YOU CREATE OR PROVIDE TO US

• When you create a Bermani Account, you or your Organisation provide us with personal information that includes your name, personal/business email, job title, business location.
• When your account is created, you may be provided with a Bermani id and sent an email to set your Bermani password. You can also choose to add or remove a phone number and email address.
• When you fill in our online form to contact our team, we collect your full name, work email, job title, organisation name and address.
  

INFORMATION THAT WE COLLECT AS YOU USE BERMANI

Our Sites use cookies and other technologies to function effectively. These technologies record information about your use of our Sites, including:

• Browser and device data
  We use collect information about the browsers and devices that you use to access Bermani services, such as IP address, device type, operating system name and version, device manufacturer and model, and language.
• Usage data
  We collect information about your usage of our services. This includes time spent on the Sites, pages visited, links clicked, language preferences and the pages that led or referred you to our Sites.

Why Bermani collects data

We use the information that we collect from all our services for the following purposes:

• Provide our products and services
  We use your information to deliver Bermani Services and facilitate the business relationships we have with our Users, such as enabling audit registration and sending email notifications.
• Maintain and improve Bermani
  We use your information to ensure that our services are working as intended, such as tracking downtime or troubleshooting issues with specific features. We also use your information to make improvements to our services - for example, understanding how you use a particular feature to improve it for you.
• Develop new services
  We use the information we collect in existing Bermani services to help us develop new ones.
• Measure performance
  Bermani is committed to delivering a resilient and efficient service. We use data for analytics and measurement to understand how Bermani is used. For example, we analyse data about your use of certain features in order to develop improvements to that feature.
• Communicate with you
  We use information we collect, such as your email address, to interact with you directly. We may send you notifications relevant to the Bermani platform.

Sharing your information

We do not share you personal information with companies, organisations or individuals outside of Bermani except in the following cases:

• With your consent
  We’ll share Personal Data outside of Bermani when we have your consent.
• With Organisation administrators
  Your organisation administrators will have access to your Bermani account. They may be able to:
• Access and retain information stored in your account such as your email
• View data and statistics regarding your account
• Suspend or terminate your Bermani account access
• Receive your Bermani account information in order to satisfy applicable law, regulation, legal process or enforceable governmental request.
• Change your Bermani account password
• Restrict your ability to delete or edit your information or your privacy settings
• For external processing
  We share Personal Data with a limited number of our service providers. We have service providers that provide services on our behalf, such as identity verification services, website hosting, data analysis, information technology, machine learning, artificial intelligence and related infrastructure, customer support, email delivery. These service providers may need to access Personal Data to perform their services. We authorise such service providers to use or disclose the Personal Data only as necessary to perform services on our behalf or comply with legal requirements. We require such service providers to contractually commit to protect the security and confidentiality of Personal Data they process on our behalf. Our service providers are predominantly located in the European Union and the United States of America. Where possible we prioritise data hosting and service providers located in the United Kingdom.
• For legal reasons
  We will share personal information outside of Bermani if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:
• Comply with applicable law
• Enforce our contractual rights
• Protect the rights, privacy, safety and property of Bermani, you or others
• Respond to requests from courts, law enforcement agencies, regulatory agencies and other public and government authorities, which may include authorities outside of your country of residence.

If Bermani is involved in a merger, acquisition or sale of assets, we’ll continue to ensure the confidentiality of your personal information and give affected users notice before personal information is transferred or becomes subject to a different privacy policy.

Security and Retention

We make reasonable efforts to ensure a level of security appropriate to the risk associated with the processing of Personal Data. We maintain organisational, technical and administrative measures designed to protect Personal Data within our organisation against unauthorised access, destruction, loss, alteration or misuse.

Your Personal Data is only accessible to a limited number of Bermani personnel who need access to the information to perform their duties. Anyone with this access is subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.

Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account has been compromised), please contact us immediately at support@bermani.co.uk .

If you are a Bermani User, we retain your Personal Data as long as we are providing the Services to you. We retain Personal Data after we cease providing Services to you, even if you close your Bermani account, to the extent necessary to comply with our legal and regulatory obligations, and for the purpose of fraud monitoring, detection and prevention. Where we retain data, we do so in accordance with any limitation periods and records retention obligations that are imposed by applicable law.

We review our information collection, storage and processing practices, including physical security measures, to prevent unauthorised access to our systems.

Your rights

You have a choice regarding our use and disclosure of your Personal Data:

OPTING OUT OF RECEIVING ELECTRONIC COMMUNICATIONS FROM US

If you no longer want to receive marketing-related emails from us, you may opt-out via the unsubscribe link included in such emails or email support@bermani.co.uk . We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt-out of receiving marketing-related emails from us, we may still send you important administrative messages that are required to provide you with our Services.

HOW YOU CAN REVIEW, CORRECT OR UPDATE YOUR PERSONAL DATA

If You would like to review, correct, or update Personal Data that You have previously disclosed to us, You may do so by signing in to your Bermani account or by contacting us.

You undertake to notify your Employees of this privacy policy and of their rights under the Data Protection Law. We will provide you with reasonable assistance to enable you to comply and respond to a request, query or complaint from an Employee in relation to their Personal Data.

YOUR DATA PROTECTION RIGHTS

Depending on your location and subject to applicable law, you may have the following rights with regard to the Personal Data we control about you:

• The right to request confirmation of whether Bermani processes Personal Data relating to you, and if so, to request a copy of that Personal Data;
• The right to request that Bermani rectifies or updates your Personal Data that is inaccurate, incomplete or outdated;
• The right to request that Bermani erase your Personal Data in certain circumstances provided by law;
• The right to request that Bermani restrict the use of your Personal Data in certain circumstances, such as while Bermani considers another request that you have submitted (including a request that Bermani make an update to your Personal Data); and
• The right to request that we export to another company, where technically feasible, your Personal Data that we hold in order to provide Services to you.

In some cases, we retain data for limited periods when it needs to be kept for legitimate business or legal purposes.

We try to ensure that our services protect information from accidental or malicious deletion. Because of this, there may be delays between when you delete something and when copies are deleted from our active and backup systems.

Process for exercising data protection rights

In order to exercise your data protection rights, you may contact Bermani as described in the Contact Us section below. We take each request seriously. We will comply with your request to the extent required by applicable law. We will not be able to respond to a request if we no longer hold your Personal Data. If you feel that you have not received a satisfactory response from us, you may consult with the data protection authority in your country.

For your protection, we may need to verify your identity before responding to your request, such as verifying that the email address from which you send the request matches your email address that we have on file. If we no longer need to process Personal Data about you in order to provide our Services or our Sites, we will not maintain, acquire or process additional information in order to identify you for the purpose of responding to your request.

If you are a Employee of a Bermani Organisation, please direct your requests directly to the Organisation. For example, if you are employed or were previously employed by an Organisation using Bermani as a clinical governance platform, and you have a request that is related to the information that you provided, then you should address your request directly to the Organisation.

Use by Minors

The Services are not directed to individuals under the age of sixteen (16), and we request that they not provide Personal Data through the Services.

Updates to this policy

We update this policy from time to time. We will always indicate the date when the latest changes were published. If changes are significant, we’ll provide a more prominent notice by email.

Links to other websites

We may at times provide links on our Website to third party websites, including without limitation those owned or managed by our partner networks, affiliates or advertisers. These websites have separate privacy policies, and we therefore cannot accept any responsibility for the content. As such, choosing to follow these links is a choice you make at your own risk, and we advise that you check these websites' individual privacy policies before submitting any personal data.

Contact Us

If you have questions, you can contact Bermani and our Data Protection Officer at haider@bermani.co.uk. And you can contact your local data protection authority (in the UK, this is the Information Commissioner’s Officer) if you have concerns regarding your rights under local law.