GDPR Compliance at GPC

Your Data Privacy is Our Priority: GPC's Commitment to GDPR Compliance

At Global Pharmacovigilance Compliance (GPC), we value the privacy and security of our users. We are committed to complying with the General Data Protection Regulation (GDPR), ensuring that all personal data collected from EU residents is handled responsibly, securely, and transparently. This page outlines how GPC manages personal data in compliance with GDPR requirements and your rights as a user.

1. Data Collection and Use

GPC collects only the personal data necessary to provide you with our services, improve our offerings, and communicate with you. This may include:

  • Personal Information: Name, email address, phone number, and billing information.
  • Usage Data: Information on how you interact with our platform, such as page views, click paths, and browsing patterns.
  • Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your experience on our platform, manage login sessions, and track user preferences.

Purpose: All data collected is used strictly for providing and improving GPC services, ensuring legal compliance, and enhancing user experience.

2. Legal Basis for Processing Data

Under GDPR, GPC processes personal data only when we have a legal basis to do so. These bases include:

  • User Consent: When you actively provide consent for data collection, such as subscribing to newsletters or enrolling in programs.
  • Contractual Obligations: Processing data as necessary to fulfill the services you have requested.
  • Legitimate Interest: Processing data to improve user experience, ensuring security, and providing relevant services.
  • Legal Compliance: Adhering to regulatory requirements or responding to lawful requests by authorities.

3. Your GDPR Rights

Under GDPR, EU residents have specific rights regarding their personal data. GPC is committed to upholding these rights, which include:

  • Right to Access: You have the right to request access to your personal data held by GPC.
  • Right to Rectification: If your personal information is inaccurate or incomplete, you can request corrections.
  • Right to Erasure (Right to be Forgotten): You can request that we delete your data when it is no longer necessary for the purposes it was collected, or if you withdraw consent.
  • Right to Data Portability: You have the right to obtain a copy of your personal data in a structured, commonly used, and machine-readable format.
  • Right to Restrict Processing: You can request that we restrict how we process your personal data in certain circumstances.
  • Right to Object: You can object to the processing of your data based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact us at privacy@gpcpharma.com.

4. Data Security Measures

GPC prioritizes the security of your personal data and has implemented several safeguards to protect it from unauthorized access, disclosure, or alteration. Our security measures include:

  • Encryption: All personal data is encrypted during transfer and storage.
  • Access Controls: Strict access controls ensure that only authorized personnel can access your data.
  • Regular Security Audits: GPC conducts regular security audits to identify and mitigate potential vulnerabilities.
  • Data Anonymization: Where possible, we anonymize personal data to protect your identity.

5. Data Retention Policy

GPC retains personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Once your data is no longer required, it will be securely deleted in accordance with our data retention policies.

  • Account Data: Retained for as long as you maintain an active account with GPC.
  • Service Data: Retained as required by applicable laws or regulations.
  • Request for Deletion: Data will be deleted promptly upon verified requests for erasure.

6. Third-Party Data Sharing

GPC does not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with trusted third parties only in the following situations:

  • Service Providers: Third-party vendors that assist us in providing services, such as payment processors or email delivery services. These providers are bound by confidentiality agreements and adhere to GDPR standards.
  • Legal Obligations: We may disclose personal data to comply with applicable laws, regulations, or legal processes, or to protect our rights and the safety of our users.

7. International Data Transfers

GPC is committed to protecting your data regardless of where it is processed. If data is transferred outside the EU, we ensure compliance with GDPR by implementing:

  • Standard Contractual Clauses (SCCs): As approved by the European Commission to protect data during international transfers.
  • Data Processing Agreements: Binding agreements with third parties to uphold GDPR standards for data protection.

8. Contact Us for GDPR-Related Inquiries

If you have questions about GPC's GDPR compliance, or if you would like to exercise your data rights, please contact our Data Protection Officer (DPO) at:

Email: privacy@gpcpharma.com

9. Changes to Our GDPR Compliance Policy

GPC may update this GDPR Compliance Policy from time to time to reflect regulatory changes or improvements to our practices. Any significant changes will be communicated through our website or via email notifications.