Privacy Policy
Effective Date: November 8, 2024
Flince Research + Design is committed to international compliance with data protection laws, regulations and rules that apply to the pharmaceutical and market research industry. This privacy policy is based on globally accepted principles to data protection in research activities and adopts the fundamental principles of the EU’s General Data Protection Regulation (‘GDPR’) as the minimum standard to which Flince Research + Design personnel and third-party partners must adhere.
This policy applies to all confidential, proprietary, and personal identifiable information that we collect, have access to, use, store and share (otherwise known as ‘processing’) while providing market research services. This policy covers all confidential, proprietary, and personal identifiable information housed at any Flince Research + Design location or network. Anyone who has access to such information or data must follow this policy.
Client Information
Flince Research + Design considers all client materials confidential information and are kept in the strictest of confidence. All confidential client information is to be used solely for the purpose of fulfilling our contractual obligations, and the necessary level of care is taken to prevent any unauthorized use or disclosure. All confidential client information is stored in separated locations on our network with access restricted on a need to know basis.
Research Participant Information
Flince Research + Design values and respects the time and effort our study participants spend when participating in market research studies and is firmly committed to protecting the privacy of the information we collect. All individual responses to our research is kept completely confidential at all times. We collect respondent data for research purposes only, and our use of that information is limited to that purpose.
The identity of individual participants as well as personal identifiable information is to be kept secure and protected from disclosure to the study sponsor at all times, unless the participant requests or permits such disclosure, or under special circumstances permitted or required by law.
Personal identifiable information collected may include an individual’s name, mailing address, telephone number, email address, identification numbers, date of birth, and general demographic information. It may also include information about an individual’s personal opinions and preferences, as well as sensitive personal data (e.g., their physical or mental health or condition).
We do not collect personal data without first obtaining express consent from the data subject.
Your Rights
You have a number of rights over your personal information processed by Flince Research + Design, including:
- Right to be informed: You have the right to be told how your personal information is/will be used. This Privacy Policy is intended to provide a clear description of how your personal data may be used.
- Right of erasure (right to be forgotten): You have the right to have your personal data deleted but only where there is no lawful reason for it to be retained by Flince Research + Design.
- Withdraw consent: If we have collected and processed your personal information with your consent, then you can withdraw your permission at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal.
- Access: You may request details of the personal information that we hold about you. If you require us to supply you with details of the personal data that we hold about you, we will take measures to verify your identity before releasing any information.
- Correction: If you believe that any information, we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us using the details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.
- Choice: You have the right to choose (opt-out) whether your personal data is (i) to be disclosed to a third party or (ii) to be used for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized by you. Research participation is entirely voluntary and you have the opportunity to decline involvement or opt-out of the research at any time. If personal data is requested by the study sponsor or other third-party as part of the research, you will be informed of the request and given the opportunity to opt-out and discontinue with the research prior to any participation.
Information Security
We maintain all necessary physical, electronic and procedural security measures to help safeguard client data and research participants’ personal information. Third parties that provide us with support or services may also receive client data or personal identifiable information, and we require them to maintain security measures similar to ours with respect to such information.
Data Integrity
Flince Research + Design will take reasonable steps to ensure the personal data collected is accurate, complete, current and relevant, being used only for the intended purposes.
EU-US with UK Extension & Swiss-US Data Privacy Framework
Flince Research + Design complies with the EU-US Data Privacy Framework (EU-US DPF), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (Swiss-US DPF) as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries, the United Kingdom, and Switzerland. Flince Research + Design has certified that it adheres to the Data Privacy Framework Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability. If there is any conflict between the policies in this privacy policy and the Data Privacy Framework Principles, the Data Privacy Framework Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification page, please visit https://www.dataprivacyframework.gov.
In compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF Principles, Flince Research + Design commits to resolve complaints about your privacy and our collection or use of your personal information. Citizens of European Union member states, the United Kingdom, and Switzerland with inquiries or complaints regarding this privacy policy should first contact David Horn by email at dhorn@flinceresearch.com or by telephone at+1 212-661-1020.
Flince Research + Design has further committed to refer unresolved privacy complaints under the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF Principles to The Insights Association Data Privacy Framework Services Program, a non-profit alternative dispute resolution provider located in the United States and operated by the Insights Association. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://www.insightsassociation.org/Resources/Data-Privacy-Framework/Information-for-EU-Swiss-Citizens-to-file-a-complaint for more information and to file a complaint. These dispute resolution services are provided at no cost to you.
Flince Research + Design is under the enforcement authority of the Federal Trade Commission to adhere to the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF. Under certain limited conditions, individuals may invoke binding arbitration before the Data Privacy Framework Panel created by the U.S. Department of Commerce and the European Commission, the UK Government, and the Swiss Federal Administration.
Onward Transfer
Flince Research + Design may transfer non-HR personal data to third party vendors who provide market research support services on our behalf. Any data to be transferred for any reason is limited and for specified research purposes only.
Third party partners include research agencies that assist in the execution of research in the form of data collection, translation, and transcription services. These partners are contractually obligated to comply with global research industry Codes and Standards, as well as all pertinent laws governing privacy.
Third party market research providers we currently use include:
- Forsta, Inc. for video interview capabilities
- Discuss.io, for video interview capabilities and transcripts
- Civicom, Inc., for audioconferencing capabilities and transcripts
- New World Medium, for translation services
Flince Research + Design will share only the minimum personal information necessary and recognizes it may be liable for violations which occur during onward transfer to third parties. If we receive personal information from a third party, we will protect it as set out in this Privacy Policy. If you are a third party providing personal information about an individual, you represent and warrant thatyou have such person’s consent to provide the personal information to us.
Flince Research + Design may be required to disclose personal information in response to a lawful request by public authorities, including meeting national security or law enforcement requirements.
Changes in the Privacy Statement
We may update this Privacy Statement from time to time by posting an amended version of the statement on the Flince Research + Design Web site. Please refer to this policy regularly. If at any time we decide to use personally identifiable information in a different manner than was stated at the time it was collected, we will notify you directly via email for your consent.
More Information
For additional information about our privacy policy, please contact our Data Protection Officer:
Email Address: dhorn@flinceresearch.com
Address: Flince Research + Design, One World Trade Center, 285 Fulton Street, 84th Floor, New York, NY 10007
Attention: Privacy - DPO