{"id":15166,"date":"2022-04-14T12:13:11","date_gmt":"2022-04-14T11:13:11","guid":{"rendered":"https:\/\/bestpractice.bmj.com\/info\/privacy-policy\/"},"modified":"2024-11-01T08:47:05","modified_gmt":"2024-11-01T07:47:05","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/bestpractice.bmj.com\/info\/us\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<h2><b>Privacy notice: BMJ Best Practice tools<\/b><\/h2><br \/>\r\n<span style=\"font-weight: 400;\">When you use BMJ Best Practice, BMJ Publishing Group Limited (\u201cBMJ\u201d or \u201cwe\u201d) collect certain information about you. We will only use your personal data as outlined in this privacy notice.<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">You\u2019ll normally get this notice when you first register for BMJ Best Practice (including on the website and app). You can also access it at any other time through the app \u2018settings tab\u2019 or at the footer of the website.<\/span><br \/>\r\n<h3><strong>What should I expect?<\/strong><\/h3><br \/>\r\n<span style=\"font-weight: 400;\">When we collect or otherwise use your personal data, we have to have a \u2018legal basis\u2019 under data protection law, and to explain which one applies to particular use of data. We collect the minimum amount of data required for the app to function. As all the data is necessary, we cannot provide the option to opt out of its collection. We collect the following data when you use BMJ Best Practice:\u00a0<\/span><b><\/b><br \/>\r\n<table><br \/>\r\n<tbody><br \/>\r\n<tr><br \/>\r\n<td><br \/>\r\n<h3><b>What data we collect:<\/b><\/h3><br \/>\r\n<\/td><br \/>\r\n<td><br \/>\r\n<h3><b>How we use it:<\/b><\/h3><br \/>\r\n<\/td><br \/>\r\n<\/tr><br \/>\r\n<tr><br \/>\r\n<td><strong>Log-in credentials<\/strong><\/td><br \/>\r\n<td><span style=\"font-weight: 400;\">Collected when you register for BMJ Best Practice and used to enable you to access the platform. Our legal basis is that this is necessary for us to fulfil our contractual obligations.<\/span><\/td><br \/>\r\n<\/tr><br \/>\r\n<tr><br \/>\r\n<td><strong>Email address<\/strong><\/td><br \/>\r\n<td><span style=\"font-weight: 400;\">Collected when you register for BMJ Best Practice and used to create a unique identifier for you. Our legal basis is that it\u2019s necessary for us to fulfil our contract with you or your organisation: we need this information to enable us to verify you as an eligible user.<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">We will use your email address to send you messages about changes to the service.\u00a0\u00a0<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">If you opt in to receive marketing from BMJ, then we may also send you direct marketing communications about our products and services<\/span><span style=\"font-weight: 400;\">. <\/span><span style=\"font-weight: 400;\">You can withdraw your consent to receive direct marketing at any time by updating your account settings or <\/span><a href=\"http:\/\/support.bmj.com\"><span style=\"font-weight: 400;\">contacting us<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/td><br \/>\r\n<\/tr><br \/>\r\n<tr><br \/>\r\n<td><strong>IP address<\/strong><\/td><br \/>\r\n<td><span style=\"font-weight: 400;\">Where your organisation has arranged for your access to BMJ Best Practice, we collect your IP address to check that it falls within the range of authorised IP addresses that your organisation uses. Our legal basis is that we have a legitimate interest in making sure that only people entitled to use our products and services are able to.<\/span><\/td><br \/>\r\n<\/tr><br \/>\r\n<tr><br \/>\r\n<td><strong>Usage analytics<\/strong><\/td><br \/>\r\n<td><span style=\"font-weight: 400;\">We collect information about how you use BMJ Best Practice. Our legal basis is that we have a legitimate interest in wanting to understand how our products and services are being used, and what we might be able to do to develop and improve them for the benefit of our users.<\/span><\/td><br \/>\r\n<\/tr><br \/>\r\n<\/tbody><br \/>\r\n<\/table><br \/>\r\n<span style=\"font-weight: 400;\">Personal data is encrypted both in transit and at rest to help ensure security. BMJ\u2019s internal processes patch and regularly update security features. BMJ Best Practice does not make automated decisions about you with a legal or similarly significant effect.<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">If BMJ makes changes to this privacy policy, we will send a notification.<\/span><br \/>\r\n<h3><strong>Which organisations are involved?<\/strong><\/h3><br \/>\r\n<span style=\"font-weight: 400;\">BMJ is the sole \u2018data controller\u2019 for the personal data we collect from you. Where your access has been arranged by an organisation (such as a hospital &#8211; as a benefit of your employment), that organisation will be a separate data controller. They will tell you if, how, and why they will use your data. We do not have any control over how other organisations will use your data.\u00a0<\/span><br \/>\r\n<h3><strong>Do you share my personal data?<\/strong><\/h3><br \/>\r\n<span style=\"font-weight: 400;\">We provide your data to the following third parties in order for our products and services to work properly, to keep your data safe, and to deliver good user experiences:<\/span><br \/>\r\n<ul><br \/>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">third party service providers such as our app platform provider who assist us in delivering the app to you; and,<\/span><\/li><br \/>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">our data storage providers. Our usage data is tracked and stored in Google Analytics, Firebase, Glassbox and Scholarly IQ for website and app usage.<\/span><\/li><br \/>\r\n<\/ul><br \/>\r\n<h3><strong>Is my data going to be processed overseas?<\/strong><\/h3><br \/>\r\n<span style=\"font-weight: 400;\">Yes. BMJ uses information storage based in the Republic of Ireland. The RoI has very similar data protection laws to the UK, and BMJ has strict contractual agreements to ensure that any personal data is handled properly and securely.<\/span><br \/>\r\n<h3><strong>How long will my data be held?<\/strong><\/h3><br \/>\r\n<span style=\"font-weight: 400;\">We hold your data for ten years from the date you last accessed BMJ Best Practice. If you use the same email address to use other BMJ products or services, your login and usage data will be held for ten years after the last time you accessed any of those products or services. Personal data is securely erased at the end of the retention period.<\/span><br \/>\r\n<h3><strong>What are my rights?<\/strong><\/h3><br \/>\r\n<span style=\"font-weight: 400;\">You have rights over your data. You can <\/span><a href=\"https:\/\/www.bmj.com\/company\/contact-us\/\"><span style=\"font-weight: 400;\">contact us<\/span><\/a><span style=\"font-weight: 400;\"> if you would like to:<\/span><br \/>\r\n<ul><br \/>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">have a copy of your personal data;<\/span><\/li><br \/>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">correct factually inaccurate information about you;<\/span><\/li><br \/>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">erase information about you;<\/span><\/li><br \/>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">restrict how your data is used; or<\/span><\/li><br \/>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">object to our use of your data (including marketing).<\/span><\/li><br \/>\r\n<\/ul><br \/>\r\n<span style=\"font-weight: 400;\">We will respond to requests within one calendar month. You can find <\/span><a href=\"https:\/\/ico.org.uk\/your-data-matters\/\"><span style=\"font-weight: 400;\">advice about your rights<\/span><\/a><span style=\"font-weight: 400;\"> on the website for the Information Commissioner\u2019s Office (the regulator for data protection in the UK).\u00a0<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">If you would like privacy information about any other BMJ products or services you can view <\/span><a href=\"https:\/\/www.bmj.com\/company\/your-privacy\/\"><span style=\"font-weight: 400;\">our main privacy policy here<\/span><\/a><span style=\"font-weight: 400;\">, or search for the specific product at<\/span><a href=\"http:\/\/www.bmj.com\"> <span style=\"font-weight: 400;\">www.bmj.com<\/span><\/a><span style=\"font-weight: 400;\">.\u00a0<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">If you have any questions, concerns, complaints, or you believe a child may be accessing the app, we\u2019d like it if you <\/span><a href=\"http:\/\/support.bmj.com\"><span style=\"font-weight: 400;\">contacted us at BMJ<\/span><\/a><span style=\"font-weight: 400;\"> in the first instance, marked for the attention of Tim Morgan, Data Protection Compliance Manager. You also have the right to complain to the <\/span><a href=\"https:\/\/ico.org.uk\/\"><span style=\"font-weight: 400;\">Information Commissioner\u2019s Office<\/span><\/a><span style=\"font-weight: 400;\"> if you\u2019d like to.<\/span><br \/>\r\n<h3><strong>EU representative<\/strong><\/h3><br \/>\r\n<span style=\"font-weight: 400;\">In accordance with the requirements of the GDPR (Article 27), BMJ also has a data protection representative in the EU:<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">activeMind.legal Rechtsanwaltsgesellschaft m.b.H.<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">Gesch\u00e4ftsf\u00fchrer: RA Klaus Foitzick<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">Kurf\u00fcrstendamm 56<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">10707 Berlin<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">HRB 185355 Amtsgericht M\u00fcnchen<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">Email: <\/span><a href=\"mailto:euprivacy@bmj.com\"><span style=\"font-weight: 400;\">euprivacy@bmj.com<\/span><\/a><span style=\"font-weight: 400;\">\u00a0\u00a0<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">Tel: +49 (0) 30 \/ 770191070<\/span><br \/>\r\n<br \/>\r\n<span style=\"font-weight: 400;\">Web:<\/span> <a href=\"http:\/\/www.activemind.legal\/\"><span style=\"font-weight: 400;\">www.activemind.legal<\/span><\/a><span style=\"font-weight: 400;\">\u00a0<\/span>","protected":false},"excerpt":{"rendered":"<p>Privacy notice: BMJ Best Practice tools When you use BMJ Best Practice, BMJ Publishing Group Limited (\u201cBMJ\u201d or \u201cwe\u201d) collect certain information about you. We will only use your personal data as outlined in this privacy notice. You\u2019ll normally get this notice when you first register for BMJ Best Practice (including on the website and [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-15166","page","type-page","status-publish","hentry"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/bestpractice.bmj.com\/info\/us\/wp-json\/wp\/v2\/pages\/15166","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bestpractice.bmj.com\/info\/us\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bestpractice.bmj.com\/info\/us\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bestpractice.bmj.com\/info\/us\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/bestpractice.bmj.com\/info\/us\/wp-json\/wp\/v2\/comments?post=15166"}],"version-history":[{"count":0,"href":"https:\/\/bestpractice.bmj.com\/info\/us\/wp-json\/wp\/v2\/pages\/15166\/revisions"}],"wp:attachment":[{"href":"https:\/\/bestpractice.bmj.com\/info\/us\/wp-json\/wp\/v2\/media?parent=15166"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}