Last Updated: February 28, 2022

You are receiving this Privacy Policy because you are visiting a website (“site”) or using a mobile application (“app”) administered by Lyceum CME Inc., operating as Lyceum Health (“Administrator”).  The services delivered through the website or app is collectively known as the “Program” and is offered and administered by the Administrator. As a result, we are processing information about you which constitutes "personal information" and we consider the protection of your personal information and privacy a very important matter.

This Privacy Policy is divided into two parts. Part I contains practical information about the specific personal information we process when you use the Program at the “Site”, why we process this data and how. Part II contains more general information about the standard technical or transactional personal information which we are processing about visitors of our websites, the legal basis for using your personal information, as well as your rights in respect to all personal information collected about you.

Please note that we may revise this Privacy Policy from time to time, we invite you to carefully read this Privacy Policy and be sure to review this policy for any updates and changes. Any changes will be effective upon posting. The date of the last revisions will be posted at the top of this Statement. For any further questions in relation to the processing of your personal information, we invite you to contact the Privacy Officer by emailing us here.

Part I – Key information

The Administrator is processing personal information about you when you are visiting the “site” and if you are registering to receive updates and information from the “site”. This “site” is intended to provide better healthcare when your personal health information and personally identifiable information is shared appropriately through the use of new technologies with your healthcare team members.

Specific personal information to be collected

For this purpose, we will collect the following specific personal information about you further to your consent:

This information may either be directly provided by you (e.g. when filling a web form or interacting with a website or app), provided by third parties or obtained through trusted publicly available sources, having obtained your consent to provide us with such personal information where necessary under applicable law.

The consent is sought when you register to participate in the Program, as a separate web page incorporated into the Program registration process. You may revoke your consent at any time. Withdrawing your consent will result in the termination of your participation in the Program and its Services; No new personal information will be collected, the file containing your Personal Information will be maintained during the term of the Program for monitoring and regulatory purposes, de-identified, aggregated or anonymized data may continue to be used as described above.

Specific purposes for which we require your personal information

The collected information will be used by us for the following specific purposes:

Please note that the collected data may also be used by us for a number of other standard purposes (e.g. to measure the usage of our website and app), as set out in Part II below.

Specific third parties with whom we share your personal information

Other than as detailed below in Part II, section 2, we may disclose your personal information to a third party if we are required to do so because of an applicable law, requests from public and government authorities (including court order, subpoena, or governmental regulation).

Please note that we may also have to share your data with a number of other recipients (e.g. another entity of the Administrator if the entity collecting the data is not the same as the one using it) but always under strict conditions, as further explained in Part II.

Duration of storage

We will only store the above personal information and the personal information listed in Part II you share with us is stored on our database servers at Lyceum Health data centres (in whatever country they may be located) or hosted by third parties in contract with the Administrator who have entered into agreements with us that require them to observe this Privacy Policy. We have implemented technological measures to prevent individuals from accessing information without authorization. Data centres are designed to be physically secure and protected from unauthorized access by unauthorized persons. Information is stored for as long as is necessary to fulfil the purposes for which the information was collected and to comply with legal and regulatory requirements.

Cookies and other similar technologies

Please note that we rely on the usual cookies and other technologies for the standard purposes set out in Part II below (e.g. to ensure the proper functioning of our website or app).

Dedicated point of contact

Should you have any question in relation to the processing of your personal information in the above context, please contact the Privacy Office by emailing us here.

Part II – General information

The second part of this Privacy Policy sets out in more detail in which context we are processing your personal information and explains your rights and our obligations when doing so.

1. On what basis do we use your personal information?
2. Who has access to your personal information and to whom are they transferred?

We will not sell, share, or otherwise transfer your personal information in any identifiable way to third parties other than those indicated in this Privacy Policy. The Administrator limits the receipt of personal information that it collects to that which is necessary for the purposes of the Program. De-identified information in aggregated format may be periodically used to improve the website and deliver Program services to Lyceum’s clients.

Unless otherwise required by an applicable law, requests from public and government authorities (including court order, subpoena, or governmental regulation), your data is aggregated, de-identified (i.e., encrypt) or anonymized before sharing or transferred to other entities of the Administrator or those third parties indicated in the Privacy Policy.

In the course of our activities and for the same purposes as those listed in this Privacy Policy, your personal information can be accessed by or transferred to the specific third parties identified in Part I of this Privacy Policy and the following categories of recipients, on a need to know basis to achieve such purposes:

The above third parties are contractually obliged to protect the confidentiality and security of your personal information, in compliance with applicable law.

Your personal information may also be accessed by or transferred to any national and/or international regulatory, enforcement, public body or court, where the Administer is required to do so by applicable law or regulation or at their request.

If we transfer your personal information to external companies in other jurisdictions, we will make sure to protect your personal information by (i) applying the level of protection required under the local data protection/privacy laws applicable to the Administrator, (ii) acting in accordance with our policies and standards. You may request additional information in relation to international transfers of personal information and obtain a copy of the adequate safeguard put in place by exercising your rights as set out in Section 6 below.

3. How do we protect your personal information?

We have implemented appropriate technical and organisational measures to provide a level of security and confidentiality to your personal information.

These measures take into account:

(i) the state of the art of the technology;

(ii) the costs of its implementation;

(iii) the nature of the data; and

(iv) the risk of the processing.

The purpose thereof is to protect it against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure or access and against other unlawful forms of processing.

Moreover, when handling your personal information, we comply with the following obligations:

4. How long do we store your personal information?

We will only retain your personal information for as long as necessary to fulfil the purpose for which it was collected or to comply with legal or regulatory requirements.

5. How do we use cookies and other similar technologies on our websites and apps?

5.1 Cookies

Cookies are small text files which are sent to your computer when you visit our websites or use our apps. We use cookies for the purposes set out above and in accordance with this Privacy Policy.

We do not use cookies to track individual visitors or to identify you but to gain useful knowledge about how our website and apps are used so that we can keep improving them for our users. Personal information generated through cookies are collected in a pseudonymized form and subject to your right to object to such data processing, as set out below.

In particular, in addition to the cookies listed in Part I of this Privacy Policy, we may also use the following types of usual cookies:

Please note that you can modify your browser so that it notifies you when cookies are sent to it. If you do not want to receive cookies, you can also refuse cookies altogether by activating the relevant settings on your browser. Finally, you can also delete cookies that have already been set.

For more information as to how to manage cookies on your device, please consult the Help function of your browser or visit www.aboutcookies.org, which contains comprehensive information on how to do so on a wide variety of browsers (link is external).

5.2 Other technologies

We may also use other technologies on our websites and apps to collect and process your personal information for the same purposes as set out above, including:

6. What are your rights and how can you exercise them?

You may exercise the following rights under the conditions and within the limits set forth in the law:

Please note however that, in certain circumstances, your refusal to accept cookies or your browser settings may affect your browsing experience and prevent you from using certain features on our websites or apps.

Please be aware that if you withdraw your consent, you will not be able to continue to participate in the Program.

If you have a question or want to exercise the above rights, you may send an email to the Privacy Office by clicking here and providing relevant information for us to be able to reply to your query.

7. What technical and transactional data may we collect about you?

7.1 Categories of technical and transactional data

In addition to any information collected about you under Part I of this Privacy Policy, we may collect various types of standard technical and transactional personal information about you during your use of our websites and apps which are necessary to ensure a proper functioning of our websites and apps, including:

Please note that we will not knowingly collect, use or disclose personal information from a minor without obtaining prior consent from a parent or legal guardian.

7.2 Why are we collecting technical and transactional data?

We always process your personal information for a specific purpose and only process the personal information which is relevant to achieve that purpose. In addition to any purposes already communicated to you in Part I of this Privacy Policy, we also process your personal information collected during your use of one of our websites or apps for the following standard purposes:

8. How will you be informed of the changes to our Privacy Policy?

Any future changes or additions to the processing of your personal information as described in this Privacy Policy will be notified to you in advance through an individual Policy using our usual communication channels (e.g. by email) as well as through our websites or apps (via banners, pop-ups or other notification mechanisms).