COGSTATE LTD. and all of its affiliates, including without qualification its US-based subsidiaries, (collectively, “Cogstate”) respect your right to privacy and are committed to protecting your Personal Data.
E.U.-U.S. PRIVACY SHIELD
We recognize that the EEA and the UK have established strict protections regarding the handling of Personal Data, including requirements to provide adequate protection for Personal Data transferred outside of the EEA and the UK. To provide adequate protection for certain Personal Data about consumers, corporate customers, clients, suppliers, business partners, job applicants, and employees received in the US from the EEA and the UK, Cogstate’s US-based subsidiaries have elected to self-certify to the EU-US Privacy Shield Framework administered by the US Department of Commerce (“Privacy Shield”). Cogstate’s US-based subsidiaries adhere to the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access and Recourse, Enforcement, and Liability.
For purposes of enforcing compliance with the Privacy Shield, Cogstate’s US-based subsidiaries are subject to the investigatory and enforcement authority of the US Federal Trade Commission. For more information about the Privacy Shield, see the US Department of Commerce’s Privacy Shield website located at: https://www.privacyshield.gov. To review representation of Cogstate’s US-based subsidiaries on the Privacy Shield list, see the US Department of Commerce’s Privacy Shield self-certification list located at: https://www.privacyshield.gov/list.
WHAT INFORMATION WE COLLECT AND HOW WE COLLECT IT
1. Information you give us
Some visitors to Cogstate’s website may choose to interact with it in ways that require them to provide us with Personal Data. The amount and type of information that you provide will depend on the nature of the interaction. If you wish to receive our email newsletter or additional information about Cogstate as a company or about its products or services; or register for a webinar or event; or access our presentations, publications, or blog postings; or access our on-demand webinars and podcasts; or use our Cogstate Research web application, we may ask you to provide information tailored to facilitate these requests including: your name and email address, location, company name and job title, telephone number(s), and fax number. Some of these forms also provide you with optional fields to provide comments, which are not posted publicly and are seen only by Cogstate employees. You may refuse to provide such Personal Data, but that may prevent us from being able to provide you with additional information.
2. Information we receive from passive use of our website
Cogstate also collects information about your use of our website through technology such as cookies and web beacons. A “cookie” is a unique numeric code we transfer to your computer so we can keep track of your preferences and recognize you as a return visitor to our Site. A “web beacon” is a piece of code on our website enabling us to monitor things like user activity and site traffic. Cookies allow Cogstate to collect “clickstream” data, which reflects your activities on the website.
HOW AND WHY WE USE YOUR INFORMATION
We use your Personal Data only for the following purposes, unless you authorizes other purposes:
- To communicate with you about our company, products or services.
- To improve our products or services, including our website.
- To maintain and administer our website.
- To evaluate the quality of our products and services.
- To comply with our legal, regulatory, compliance or auditing obligations.
We will process Personal Data only in ways that are compatible with the purpose for which we collect it, or for purposes that you later authorize. Before we use your Personal Data for a purpose that is materially different than the purpose for which we collected it or that you later authorized, we will provide you with the opportunity to opt in where that is required by the Privacy Shield or applicable privacy laws. We maintain reasonable procedures to help ensure that Personal Data is reliable for its intended use, accurate, complete, and current.
We will retain your Personal Data only for as long as reasonably necessary to carry out the purposes for which it was collected.
HOW AND WHY WE MIGHT SHARE YOUR INFORMATION
Cogstate will not disclose your Personal Data without your consent to do so, except:
- To third-party agents or service providers to carry out the purposes for which you have provided it to us;
- In the context of a sale, amalgamation, re-organization, transfer or financing of parts or some or all of Cogstate’s business;
- For purposes of research and development where your Personal Data combined with all or some of the Personal Data of other users and such aggregated data is de-identified or otherwise anonymized and no longer contains Personal Data; or
- Under certain circumstances, in response to valid requests by public authorities, including to meet national security or law enforcement requirements.
Under certain circumstances, we may remain liable for the acts of our third-party agents or service providers who perform services on our behalf for their handling of Personal Data that we transfer to them.
We do not permit third-party advertisers to display their advertisements on our website.
ONWARD TRANSFER / TRANSFERRING INFORMATION
TECHNICAL, PHYSICAL, AND ADMINISTRATIVE SECURITY
We have implemented commercially reasonable security safeguards to protect your Personal Data against loss or theft, as well as unauthorized access, disclosure, copying, use or modification. Methods of protection include: physical measures (e.g., locked filing cabinets and restricted access to offices); organizational measures (e.g., security clearances and limiting access on a “need-to-know” basis); and technological measures (e.g., the use of complex passwords and encryption of data at rest and in transit).
Cogstate’s website is intended for users eighteen (18) or older. It is not in any way designed to attract children. If we discover that a person under the age of eighteen (18) has submitted Personal Data to our website, or that someone has inappropriately done so on their behalf, we will delete such information from our databases as soon as practicable and in accordance with applicable law.
YOUR RIGHTS AND CHOICES
1. Access and Correction
You may at any time challenge the accuracy and completeness of your Personal Data and have it amended or corrected as appropriate. In any such case, Cogstate will request that you provide identifying information sufficient to verify your identity and ownership of the information. Any such identifying information shall be used only for this purpose.
2. Receipt or transfer
You may at any time request to receive one copy of your Personal Data and to have your Personal Data transferred to a third-party. In any such case, we will, where technically feasible, provide it in a structured, commonly used and machine-readable format.
Please note that this right of portability applies only in limited circumstances, such as: where we are processing personal data on the basis of your consent or pursuant to our contractual agreements with you, and the processing is carried out by automated means.
You have the right to request that Cogstate permanently delete your Personal Data when:
- we no longer need your data for the purposes for which it was collected;
- we have been processing the particular data based only on your consent, you withdraw your consent, and there is no other legal ground for us to continue processing;
- you successfully object to the processing of certain data (see “Objection” below);
- the data has been unlawfully processed; or
- erasure is required by law.
This right will not apply where continued processing of your Personal Data is necessary for:
- the exercise of the right of freedom of expression and information;
- compliance with applicable law;
- performance of a task carried out in the public interest or the exercise of official authority vested in Cogstate;
- for reasons of public health;
- certain types of archiving that is in the public interest, scientific or historical research or statistical purposes; or
- the establishment, exercise or defense of legal claims.
Although Cogstate may remove most Personal Data, such as contact information (address, phone number, etc.), we cannot remove certain records which we are bound to keep by law or by codes of conduct or other authority.
4. Objection and Restriction
HOW DO I EXERCISE THESE RIGHTS AND OPTIONS?
If you have questions or complaints, or you wish to take any of the actions described above, please contact us as described below. We will attend to your request promptly and will respond within a reasonable time.
We will investigate and attempt to resolve any complaints or disputes regarding the use or disclosure of your Personal Data within 45 days of receiving your complaint. For any unresolved complaints, we have agreed to cooperate with International Centre for Dispute Resolution, the international division of the American Arbitration Association (ICDR-AAA). If you are unsatisfied with the way that we have resolved your complaint, you may then contact the ICDR-AAA at http://go.adr.org/privacyshield.html for further information and assistance.
Binding Arbitration. You may have the option to select binding arbitration for the resolution of your complaint under certain circumstances, provided you have taken the following steps: (1) raised your compliant directly with Cogstate and provided us the opportunity to resolve the issue; (2) made use of the independent dispute resolution mechanism identified above; and (3) raised the issue through the relevant data protection authority and allowed the US Department of Commerce an opportunity to resolve the complaint at no cost to you. For more information on binding arbitration, see US Department of Commerce’s Privacy Shield Framework: Annex I (Binding Arbitration).
Attention: Chief Privacy Officer
195 Church Street, 4th Floor
New Haven, CT 06510
Effective: August 30, 2019
Last modified: December 20, 2019