Last Updated: May 2018
|The Assay Depot, Inc (d.b.a. Scientist.com) and its subsidiaries operate online marketplaces and the Research Concierge service (collectively, the "Platform").
|Scientist.com takes the security and privacy of the users ("you") of our Platform and associated services (being services delivered by us, rather than by a Client or Supplier) very seriously, whether this means "you" as an individual, or "you" in the context of your employment with a company (or other body) we do business with.
|WHO ARE WE?
|In this Policy, the terms "we", "our", "us" and "Scientist.com" are used to refer to The Assay Depot, Inc (d/b/a Scientist.com), a Delaware corporation with its principle offices located at 433 Glencrest Drive, Solana Beach, CA 92075. We are the data controller for the purposes of the applicable data protection laws.
|If you have any questions, concerns or complaints about this Policy or about how your personal information is handled, please contact us through our website, or at firstname.lastname@example.org or write to us at:
329 S Highway 101
|WHEN DOES THIS POLICY APPLY?
|For purposes of this Policy, personal data means information that both identifies (or may identify) and relates to you.
This Policy applies where Scientist.com receives personal data in the United States concerning individuals who reside in the European Union, the EEA or Switzerland from:
|For the purposes of this Policy, in regard to references to the processing of the personal data of a Client or Supplier, "Client" shall mean a natural person who is a client or an account representative of a legal entity that is client, including clients of our Collaborators; and "Supplier" shall mean a natural person who is a supplier or an account representative of a legal entity that is a supplier (and together, "Users" for the purposes of this Policy).
|Please note: Except as set forth in this Policy, Scientist.com does not determine the purposes and means of processing any personal data placed on or shared via the Platform by Clients, Suppliers or Collaborators. Clients and Suppliers may decide to share their respective personal data between themselves and with other parties (including Collaborators) via the Platform. Clients, Suppliers and Collaborators are solely responsible for ensuring that any transfers of personal data between them are made in accordance with the applicable data protection laws.
|WHAT INFORMATION DO WE COLLECT ABOUT YOU?
When a Supplier or Client registers for an account, you may provide certain account-related personal data, ("Account Data"), such as:
|We may also collect images of you where you agree to provide us with these and information given by you when you complete surveys or website registrations.
|When you visit our website or Platform, we may also automatically collect information and personal data about your computer for system administration, including, where available, information about pages you access or visit, your IP address, operating system and browser type. The information we collect is used to improve the content of our website and the quality of our Platform, and is not shared with or sold to other organisations for commercial purposes, except to provide services you have requested, when we have your permission, or as otherwise set forth in this Policy. Please see our cookies policy for further information about what information may be automatically collected when you visit our website, which can be found at app.scientist.com/legal-notices
|Please note that we may combine personal data that we receive from other sources with personal data you give to us and personal data we collect about you.
|WHERE DO WE GET THIS INFORMATION FROM?
|Information that you give to us: We receive and store any personal data you give to us when you register for an account with us to use the Platform, contact us via email or otherwise in connection with your account, a query, or to make a complaint, or give us personal data in any other way. You are not obliged to provide your personal data to us. However, we may be unable to fully manage your account and provide access to the Platform and associated services to you without you providing certain personal data.
|Information that we collect about you: We collect personal data when you visit our website and use our Platform (including IP Internet Protocol (IP) address used to connect your computer to the internet, MAC addresses, traffic data, location data, your login information, time-zone setting browser type and version, browser plug-in types and versions, operating system and platform, weblogs, cookies and other communication data, and the resources that you access), and when you contact us by email or otherwise in connection with your account, a query, or to make a complaint. We also collect limited personal data required to order and invoice for goods and services bought and sold by Clients and Suppliers via the Platform ("Service Data") to the extent that such data is exchanged between Supplier and the Client using the Platform. This information is used to provide access to the Platform, provide associated services and facilitate communications between Clients and Suppliers across the Platform.
|Information that we receive from other sources: We receive and store Client account data (names, email addresses and other contact details) from Collaborators (“Collaborator Data”), including personal data, that Clients enter on third party websites operated by Collaborators to log into the Platform. Collaborators are responsible for notifying you that they will provide this Collaborator Data to us and otherwise complying with the applicable data protection laws when they collect, process and transfer personal data to Scientist.com.
|Please note: You must not put any personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation (including without limitation, any patient data or donor information etc.) (“Special Categories of Personal Data”) on the Platform, or include this within any attachments submitted on the Platform and instruct Scientist.com to remove any such Special Categories of Personal Data from the Platform, although Scientist.com does not have any obligations to Users to check for this or to do so.
|WHY DO WE NEED YOUR INFORMATION?
|The personal data that we collect is used to provide our Platform and services or improve the content and quality of our website, services and Platform. It is not shared with or sold to other organizations for commercial purposes, except to provide services requested by you, or when we have obtained prior consent for the use of personal data for other specified purposes, or as otherwise set forth in this Policy.
Scientist.com may also use the personal data we collect from Suppliers and Clients for the following general purposes:
|With specific regard to personal data received from a Client, we may use such data to respond to Client requests, customize future shopping activities for that Client and offer services to Clients based on their shopping history.
|If you choose to provide us with feedback about the services you have purchased, we may display your feedback, in whole or in part, on the Platform and it may be viewed by anyone visiting our website.
|In addition, we may produce videos or photographs which include the names or images of you (as an employee or representatives of Clients or Suppliers, or individual Clients or Suppliers) (“Images”) for promotional purposes for the relevant Supplier or Client and/or Scientist.com where you have consented for us to use your Images in this way. Such Images are your personal data and we may also collect contact details in relation to them. Images will be used and stored by us in accordance with this Policy and the waiver letter that you (as the individual employee or representative of the Client or Supplier, individual Client or Supplier (as applicable) and in addition the Client or Supplier legal entity (as applicable)) signs to give us permission to use the respective Images. We will not publish any such Image unless and until a valid and binding waiver letter has been executed by the relevant parties authorising us to do so. Once the Images are published they will be in the public domain, and Scientist.com will only have control over Images that Scientist.com publishes directly, and not over any copies taken by third parties from the Images in the public domain.
|We will only process personal data in ways that are compatible with the purpose for which it was collected or for the purposes later authorized by you or which are compatible with the original purpose. Before we use personal data for a purpose that is materially different than the purpose for which it was collected or later authorized, we will provide the opportunity to opt out. We maintain reasonable procedures to help ensure that personal data we collect and use is reliable for its intended use, accurate, complete and current.
|BASIS FOR USING YOUR INFORMATION
Data protection laws require that we meet certain conditions before we are allowed to use your data in the manner described in this Policy. To use your personal data, we will rely on four conditions, depending on the activities that we are carrying out:
|DATA TRANSFERS TO THIRD PARTIES
|We may share personal data with our subsidiaries that Scientist.com controls and that are subject to this Policy or that follow practices at least as protective as those described in this Policy. We will only share personal data with our subsidiaries where we have appropriate protections in place.
Aside from our subsidiaries, we may share your personal data:
|Business transfers: Scientist.com may transfer your information to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Scientist.com’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which your information is among the assets transferred, but only so far as such transfer is necessary for the purposes of such sale or administration;
|Protection of Scientist.com and others: We may release account and other personal data when we believe release is appropriate to comply with the law or an investigation into illegal activity; in response to lawful requests by public, governmental or regulatory authorities, courts of competent jurisdiction, including in order to meet national security or law enforcement requirements; to enforce our agreements, including when your actions violate the terms of any of your agreements with us or any of our Platform term of use or policies; or to protect the rights, property, or safety of Scientist.com, our Users, or others. It is necessary to share information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of Terms of Service, or as otherwise required by law. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction. This does not include selling, renting, sharing, or otherwise disclosing personal data from Users for commercial purposes in violation of the conditions set forth in this Policy.
Where we use a service provider to process Personal Data on our behalf
Scientist.com is responsible for the processing of personal data that it receives and subsequently transfers to a third party supplier acting on its behalf. Scientist.com remains liable under its agreements with Clients and Suppliers and under data protection laws if such supplier processes such personal data in a manner inconsistent with the its agreements with Clients and Suppliers and the data protection laws, unless Scientist.com demonstrates that it is not responsible for the event that gives rise to the damage. As set out above, the terms of agreements with third-party suppliers will contain appropriate provisions to safeguard your personal data and will comply with the applicable data protection laws.
|WHAT DO WE DO TO ENSURE THE SECURITY OF YOUR INFORMATION?
|We maintain reasonable and appropriate security measures to protect personal data from loss, misuse, unauthorized access, disclosure, alteration or destruction in accordance with data protection laws. In cases where we are acting as a processor, Scientist.com secures personal data in accordance with its contractual obligations.
|We restrict access to User information to Scientist.com and Collaborator employees, contractors and agents who need to know that information to operate, develop or improve the Platform. These individuals are bound by strict confidentiality and may be subject to discipline if they fail to meet these obligations.
|Secure software: We work to protect the security of your information during transmission by using Secure Sockets Layer (SSL) software, which encrypts information you input.
|Unauthorized access: It is important for you to protect against unauthorized access to your password and to your computer. Be sure to sign off from your account when finished using a shared computer. Do not share your login information with anyone else.
|Data Storage: Scientist.com uses third party suppliers and hosting partners to provide the necessary hardware, software, networking, storage, and related technology required to run the business.
Storing personal data outside of the EEA
|HOW LONG DO WE KEEP YOUR INFORMATION FOR?
|We may retain your personal data as long as you continue to use our services and have an account with us, and typically for six years after the closure of your account with us, in order to enable us to deal with any issues or concerns you may have about the services or your account, and also to allow us to bring and defend legal proceedings.
|We may retain some personal data for an additional period as is required under applicable laws, for legal, tax or regulatory reasons.
In some circumstances, some of your data will be deleted in much shorter timescales, for example:
|You can close your account by contacting us at the details below.
|WHAT RIGHTS DO YOU HAVE IN RELATION TO YOUR PERSONAL DATA?
In some instances, we may be unable to carry out your request, in which case we will write to you to explain why. In particular, rights may not apply in some cases, including where providing access is unreasonably burdensome or expensive under the circumstances or where it would violate the rights of someone other than you.
|In order to exercise one of your rights above you can submit a written request to the contact information provided below (How to Contact Us). We may request specific information from you to confirm your identity before processing any request.
You may choose to change or limit the use and disclosure of their personal data or cancel an account by contacting us using the contact details below (How to Contact Us). Individuals can also unsubscribe from our marketing communications by following the instructions or unsubscribe mechanism in the original email message.
QUESTIONS OR COMPLAINTS
A Supplier or Client can direct any questions or complaints to us about the use or disclosure of personal data that relates to them by sending an email to us at email@example.com, or in writing to the address below (How to Contact Us). We will investigate and attempt to resolve any complaints or disputes regarding the use or disclosure of personal data within forty-five (45) days of eceiving a complaint. Where you are exercising one of your rights (as set out above) we will respond to your request within one (1) month of receipt.
You can also contact the Information Commissioner's Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF www.ico.org.uk, which is Scientist.com's lead supervisory authority for the purposes of data protection laws, or your local data protection authority.
HOW TO CONTACT US
To ask any questions regarding this Policy, to exercise any of your rights, or to submit a complaint regarding the processing of personal data by us, please contact us by email at firstname.lastname@example.org or by standard mail addressed to:
329 S Highway 101
CHANGES TO THIS POLICY
This Policy may be amended from time to time consistent with the requirements of applicable data protection laws. The date of the last update will appear at the top of this policy. Scientist.com will take all reasonable measures to communicate any changes to this Policy to you and in any event shall provide appropriate notice about such amendments via a notification on the Platform.