OBG Pharmaceuticals Ltd and its subsidiaries (“OBG”) may have a requirement to process personal information about you. OBG is fully committed to protecting your personal information and recognises its responsibility to keep any information about you safe and secure at all times. OBG will only process personal data in accordance with current data protection legislation (including the General Data Protection Regulation 2016 (“GDPR”)).
This privacy notice explains the following:
In order to provide our group services we may need to collect certain personal data about you. The data processed will depend on your relationship with us (such as customer, supplier, client, or other person relating to our business). We may obtain personal data about you from yourself in a telephone conversation, email or letter.
Personal information collected about you may include:
The data we collect will only be relevant to the service you require and by submitting these details to us you enable us to process your information to perform our obligations under a contract or to enable us to carry out this service for you efficiently and effectively.
We will only use your information for the purposes of the business we carry out with you.
Personal information is stored in secured servers and storage systems. This is done within the UK or European Economic Area (“EEA”) where possible. We will not transfer your information outside the EEA unless it is to a country which is considered to have equivalent data protection laws or we have taken all reasonable steps to ensure the firm has suitable standards in place to protect your information.
OBG will only share your personal information with third parties where it is necessary to enable us to provide a service to you and may include:
We will take appropriate steps to ensure that your information is safe and secure at all times. This will include physical security to our offices, technical security of our IT systems and ensuring that any paperwork we hold about you is stored securely.
We will always process your personal data fairly and lawfully and for the specified purpose of our business dealings or in connection with our contractual obligations with our clients that you may be under a contract with.
We will ensure that the personal data that we hold is relevant, not excessive and will not be held any longer than is necessary and in line with OBG’s retention policy. An example of the typical period of time we may hold onto your personal data is 7 years following our last dealing with you. However, there may be times where we need to hold onto certain personal information longer. If this is the case we will ensure that we have a legitimate processing ground for this.
You have the right to request a copy of the information we hold about you under a Subject Access Request (“SAR”). In order for OBG to comply with your SAR if we are the data controller we will provide a response to you within 30 days. If OBG are the data processor and we are only processing your information on behalf of one of our clients under a contract, we may have to refer your request to them. They may ask for our assistance in obtaining the relevant information you have requested. We will notify you of this once we have transferred your request, or you may hear directly from the data controller if we are unable to contact you directly.
If you believe that any of the information that we hold about you is incorrect, or out of date, you have the right to request that we amend your details accordingly. We may have to ask you some security questions in order to do this and may require evidence relating to the change of details where necessary.
You have the right to be forgotten, also known as the right to erasure. You are able to make this type of request in any manner, but we would suggest that this request is made in writing wherever possible. There may be some instances where we are unable to comply with your request if there are legal or regulatory requirements for continuing to hold this information.
You have the right to request that processing is restricted where for example you contest that the data we hold is inaccurate or where you believe the processing is unlawful. You have the right to receive personal data about you in a machine readable format and to give that data to another controller.
You have the right to object to the processing of your personal data where our processing is based on legitimate interest or public interest.
We do not use the information you provide to make any automated decisions that might affect you.
Occasionally OBG may want to use your personal data for a different purpose than it was originally provided. If OBG want to do this we require your specific and informed consent. We may need to contact you via telephone, email or post in order to obtain your consent and if you choose not to opt in OBG endeavour not to contact you again relating to this matter unless it is in the normal course of business.
In order for OBG to deal with any breaches of this notice effectively, and should any employee, client, website user, customer or other third party become aware of any potential or actual breach of this notice, please notify OBG on dataprotection@obg.co.uk so that we may fully investigate the breach and resolve any causes found.
In respect of GDPR, OBG are data controllers when it comes to our employees, and any data where we decide the method and means of processing. For all other types of data OBG are a data processor which means our processing of your data is controlled by a third party that you are under a contract with.
Our group address is Ayrton House, Parliament Business Park, Commerce Way, Liverpool, L8 7BA. You can contact us by post at the above address or by email at dataprotection@obg.co.uk
Our company is not required to have a data protection officer, so any enquiries about our use of your personal data should be addressed to the contact details above.
The following companies are part of OBG;
Hubron is fully compliant with the General Data Protection Regulation (GDPR). Please view our privacy policy.