PRIVACY AND COOKIES NOTICE
Privacy and Cookies Notice
Who we are
Crescendo Biologics Limited is a company registered in England with company number 6425006. Our registered office is Meditrina Building 260, Babraham Research Campus, Cambridge CB22 3AT, UK.
Crescendo Biologics Limited is a private, clinical stage immuno-oncology company developing novel, targeted T cell enhancing Humabody® therapeutics.
This Privacy and Cookies Notice (“Notice”) is intended to meet our duty of transparency under applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 as it forms part of United Kingdom law by virtue of section 3 of the European Union (Withdrawal) Act 2018 and as subsequently amended (the “UK GDPR”). This Notice provides you with information regarding your rights and our obligations and explains how and why we process your personal data.
In this Notice, “Crescendo”, “we”, “us”, “our” refer to Crescendo Biologics Limited, and we are committed to protecting and respecting your privacy. We determine the purposes and manner in which your personal data is collected, used and/or disclosed and managed, and therefore we are the data controller for personal data processing described below. We are registered with the UK Information Commissioner’s Office under registration number Z1590797.
This Notice sets out how we collect and use your personal data (as defined below) when you visit our website or otherwise engage with us.
This Notice contains several sections, as summarised below.
- Information we may collect about you
- Our legal basis for processing your personal data
- How we use your information
- Cookies and other technologies
- Links to other websites
- Who we may share your information with
- Where we may transfer and store your information
- How we protect your information
- How long we keep your information
- How we communicate with you
- Your rights
- Changes to this Notice
- Contacting us
- Contacting the Information Commissioner’s Office (ICO)
Information we may collect about you
When you use our website or otherwise interact with us, we may collect information about you, including personal data. Personal data means information from which you may be identified both directly (from that information alone) and indirectly (when different pieces of information are combined).
We may collect and process the personal data from you collected in a variety of ways.
- Information you provide to us:
- contact information: information you provide if you fill in any forms on our website, such as a contact us form or if you submit a question, or, where you otherwise correspond with us, such as by phone or email; and
- employment details: if you submit your resumé, CV or other details of your employment history to us in response to an advertised position or a general enquiry regarding employment opportunities with us.
- Information we may receive about your use of our website:
- technical information such as your Internet Protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and
- information about your visit to our website including the full Uniform Resource Locators (URL), clickstream to, through and from our website (including date and time), information viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
- Information we may receive from other sources:
- if you make personal data publicly available, such as information posted to websites including social media sites, including when you tag us, or otherwise interact with our social media channels and posts, for example by liking a post, we may collect personal data such as your social media profile name and picture, the picture or content you post, likes and reactions to your posts. We may use this information to help us understand your engagement with our business and we may use your content, with your permission, for our own advertising purposes and on our own social media channels.
Our legal basis for processing your personal data
We may collect and process your personal data:
- to comply with our legal obligations; or
- with your consent (where your consent is legally required); or
- in accordance with any contract with you; or
- pursuant to our legitimate business interests to run an efficient business, for example to:
- provide you with information about us; or
- manage our relationship with you; or
- tailor the content of the information to your preferences; or
- invite you to events; or
- analyse how our website is used.
How we use your information
We may use information held about you in different ways, as summarised below.
- Information you give to us:
- We will ensure in our legitimate interests that:
- we provide any information you request from us, including responding to any queries you have submitted; and
- we consider any information you provide regarding a potential employment opportunity with us; and
- content from our website is presented in the most effective manner for you and your computing device.
- Where required, when you give your consent, for example, we may send you promotional updates and to deliver cookies (see Cookies and other technologies below).
- We will ensure in our legitimate interests that:
- Information we receive about your use of our website:
- Unless we are required to obtain your consent, we will use this information in our legitimate interests, where we have considered these are not overridden by your rights, for example to:
- administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical purposes; and
- keep our website safe and secure; and
- improve our website to ensure that content is presented in the most effective manner for you and for your computer.
- Unless we are required to obtain your consent, we will use this information in our legitimate interests, where we have considered these are not overridden by your rights, for example to:
- Information we receive from other sources:
- Unless we are required to obtain your consent, we will use this information in our legitimate interests, where we have considered these are not overridden by your rights; and
- We may use the information obtained for our own analysis and business development and other purposes, such as:
- to provide you with information about us; or
- to manage our relationship with you; or
- to tailor the content of the information to your preferences; or
- to invite you to events.
Cookies and other technologies
We may use cookies and other similar technologies to collect and store certain information about you. These typically involve pieces of information or code that a website transfers to or accesses from your computer hard drive or mobile device to store and sometimes track information about you.
Cookies and similar technologies enable you to be remembered when using that computer or device to interact with websites and online services and can be used to manage a range of features and content as well as storing searches and presenting personalised content. They allow us to distinguish you from other users of our website which may help us to provide you with a good experience and also allows us to improve our website.
We currently only use cookies for Google Analytics on our website, two of which are used to distinguish individual users (which expire after two years and 24 hours, respectively) and another to limit amount of user requests in order to maintain our website’s performance (which expires after one minute). Google Analytics is a web analytics service provided by Google, Inc.
Your web browser provides settings that allow you to manage or switch off cookies. If you do switch off cookies, you may not be able to use all of the services on our website. You can find out more about managing and switching off cookies at the independent website www.allaboutcookies.org.
Links to other websites
Our website may also allow you to share via social media channels and other tools, which allows you to share how you interact with our website and allows us to better understand your engagement with us.
As mentioned above, we may receive some information back from third parties when you interact with their websites, plug-ins and applications. What information is shared with us is determined by such third-party privacy policies. Please consult your privacy settings to understand more about what information might be shared with us, and any information that is provided to you at the time you interact with those third-party services.
Who we may share your information with
We may share your data with organisations to process your personal data on our behalf, and any that do so will act in accordance with our instructions and Data Protection Law. This includes in supporting our website, and in particular those that provide website and data hosting services, employment services, distribute any communications we send and provide IT support services from time to time. These organisations (which may include third party suppliers, agents and sub-contractors) will only use your information to the extent necessary to perform their support functions.
In addition, analytics and search engine providers that assist us in the improvement and optimisation of our website will act in accordance with our instructions and Data Protection Law.
We may also disclose your personal data to third parties in certain circumstances. For example, if we sell or reorganise our business or assets, in which case we may disclose your personal data to the prospective reorganised structure, seller or buyer of such business or assets subject to the terms of this Notice.
We are also under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enter into or administer any agreements with you; or to protect the rights, property, or safety of Crescendo, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection, background checking (where appropriate) and to prevent cybercrime.
International data transfers
Where it is necessary that your information is transferred outside the UK and EEA, we will take steps that are reasonably necessary to ensure that your data is subject to appropriate safeguards, such as relying on a recognised legal adequacy mechanism, for example, binding corporate rules or standard contractual clauses, and that it is treated securely and in accordance with this Notice.
How we protect your information
All electronic information you provide to us is stored on secure servers. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website or otherwise to our servers; any transmission you make is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
How long we keep your information
We retain personal data for as long as we are legally required or otherwise permitted to.
For example, we retain personal data for as long as we need to assess your application for employment and in the case of unsuccessful applications, for up to 6 months after this in case of any questions unless you are happy for us to keep your application on file for longer.
We may also retain data as long as necessary to identify any issues and resolve any legal proceedings and for tax and accounting purposes.
We may also retain aggregate information for research purposes and to help us develop and improve our website and/or application processes. You cannot be identified from aggregate information retained or used for these purposes.
How we communicate with you
Where permitted in our legitimate interest or with your prior consent where required by law, we may use your personal data for marketing analysis and to communicate promotional updates by email about or business, events and services.
You can object to receiving update communications from us at any time by asking to unsubscribe from our communications or by contacting us at dataprivacy@crescendobiologics.com.
Your rights
You have the right under certain circumstances:
- to be provided with a copy of your personal data held by us; and
- to request the rectification or erasure of your personal data held by us; and
- to request that we restrict the processing of your personal data (while we verify or investigate your concerns with this information, for example); and
- to object to the further processing of your personal data, including the right to object to marketing; and
- to request that your provided personal data be moved to a third party.
You also have the right to withdraw consent. Where the processing of your personal data by us is based on consent, you have the right to withdraw that consent without detriment at any time by contacting us.
If your request or concern is not satisfactorily resolved by us, you may contact the Information Commissioner, the data protection authority in the UK, at https://ico.org.uk/make-a-complaint/ or by telephone at +44 (0)303 123 1113 for further information about your rights and how to make a formal complaint.
The Information Commissioner is the supervisory authority in the UK and can provide further information about your rights and our obligations in relation to your personal data, as well as deal with any complaints that you have about our processing of your personal data.
You can find the relevant EU supervisory authority name and contact details via the European Data Protection Board website https://edpb.europa.eu/about-edpb/board/members_en.
Changes to this Notice
We may change this Notice from time to time. We will notify you of any changes where we are required to do so. This policy was last updated on 27 July 2022.
Questions, comments and requests regarding this Notice are welcomed and should be addressed to:
The Data Protection Officer
Crescendo Biologics Ltd
Meditrina Building 260, Babraham Research Campus
Cambridge, CB22 3AT, UK