SRC is committed to providing you with meaningful information and choices about the information you share with us. We explain how we collect, use, share, and protect your information in our Privacy Policy. You can access our full Privacy Policy here. We provide the same set of privacy tools and controls to all of our participants worldwide who use SRC’s website and related services (collectively, the “Services”). Based on the laws of your location, particular rights may be available to you.
European Economic Area Member Rights:
Your Rights and How to Exercise Them. If you are habitually located in the European Economic Area (“EEA”), you have the right to access, rectify, download or erase your information, as well as the right to restrict and object to certain processing of your information. While some of these rights apply generally, certain rights apply only in certain limited circumstances. We describe these rights below:
Object
Where we process your information based on our legitimate interests explained below, you can object to this processing in certain circumstances. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons.
Access and Porting
You can access much of your information by logging into your account.
Rectify, Restrict, Limit, Delete
You can also rectify, restrict, limit or delete much of your information by logging into your account, such as to edit your account information, or by sending an email to srcsupport@surgicalreview.org.
Revoke consent
Where you have previously provided your consent, you have the right to withdraw your consent to the processing of your information at any time. For example, you can withdraw your consent by updating your account information. In certain cases, we may continue to process your information after you have withdrawn consent if we have a legal basis to do so or if your withdrawal of consent was limited to certain processing activities.
Complain
Should you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority.
European Economic Area Members: Our Legal Bases for Processing Your Information
European data protection law requires organizations to have legal bases to collect, use, share and otherwise process information about you. While some of your rights apply generally, certain rights only apply depending on the legal bases we rely on to process data.
To provide the Services
As described in our Privacy Policy, the Services cannot be provided without SRC processing data about you. Since we process data you provide to us which is necessary to perform our contract with you, you have the right to port or transfer that data if you are habitually resident in the EEA.
With your consent
We ask for your permission to process your information for certain purposes and you have the right to withdraw your consent at any time. We ask for your consent to:
- Collect information about you which permits us to provide you with our Services.
- Send you SRC marketing communications.
When we process data you provide to us based on your consent, you have the right to withdraw your consent at any time via your account settings. You also have the right to port or transfer the data.
Legal obligation or for the establishment, exercise or defense of legal claims
We process data where we have a legal obligation to do so, for example, where we’re responding to valid and binding legal process from third parties for certain data. In addition, processing may be needed for us to establish, exercise or defend civil or criminal claims in connection with actual or potential litigation including to protect our Services, our property or other legal rights, including those of our participants.
To protect vital interests
We process data where it is necessary to protect an interest which is essential to someone’s life or protect any person from serious bodily injury. This includes processing information to combat harmful conduct both on and off of our Services.
Carrying out a task in the public interest
Where laid down by EU law or the law in an EU Member State, we may process your data to perform processing in the public interest. This may include protecting against harm and undertaking research for social good. You have the right to object to, and seek restriction of, our processing of your personal data when we process data using this legal basis.
In furtherance of legitimate interests
We process your information for our legitimate interests, and those of third parties, while applying appropriate safeguards that protect your privacy, rights and interests. We do this to:
- Market SRC’s Services. We provide you with controls and safeguards, including the ability to object.
- Maintain our business by conducting research and continuously improving the Services so as to offer innovative and customized offerings to our participants.
- Convert it into aggregated form for use by us.
- Keep the Services safe and secure by using information to prevent or detect violations of our Terms and Conditions, fraud or abuse, and other harmful or illegal conduct. We may also share information with third parties, including law enforcement agencies for this purpose.
- Promote the Services, including email and in-product marketing campaigns to inform you about our Services.
You have the right to object to, and seek restriction of, our processing of your personal data based on legitimate interests.
California Rights:
If you are a California resident, as defined in the California Code of Regulations, you have rights under the California Consumer Privacy Act of 2018 (“the CCPA”). Below, we provide a description of your rights and disclosures about your personal information.
Your Rights and How to Exercise Them:
Right to know about the personal information we collect and share
The CCPA gives you the right to request that we disclose the specific pieces of personal information we have collected about you, which we do after we receive and validate your request.
SRC does not sell your personal information. However, we may disclose certain personal information for a business purpose. When you make a request to download your personal information, we will include a list of the categories of personal information that we may have disclosed about you, as well as the categories of third parties to whom your personal information may have been disclosed.
How to make a disclosure request
You may request these disclosures by sending an email to srcsupport@surgicalreview.org.
You have the right to make a free request two times in any 12-month period. We will make the disclosure within 45 days of receiving your request, unless we request an extension. In the event that we reasonably need a 45-day extension, we will notify you of the extension within the initial 45-day period.
Right of deletion
You have the right to request that we delete your personal information, subject to certain exceptions. After we receive and validate your request, we will delete your personal information, as well as direct our service providers to delete your personal information, unless an exception applies. To delete your data, send an email to srcsupport@surgicalreview.org.
Disclosures About Your Personal Information:
Categories of information we collect and disclose for a business purpose
We collect the following categories of personal information from you in connection with the Services, as defined in the CCPA:
- Identifiers, such as your real name, Internet Protocol address, physical and mailing addresses, email address, and other similar identifiers.
- Personal information categories listed in the California Customer Records provisions, including payment information, such as your credit card number.
- Internet or other electronic network activity information, such as session logs.
According to California law, personal information does not include:
- Publicly available information from government records.
- De-identified or aggregated consumer information.
Other disclosures about your personal information
Our Privacy Policy covers additional disclosures about your personal information that the CCPA requires we provide to you. Details are contained in our Privacy Policy.
How to contact us:
If you have questions about your rights or our disclosures under the CCPA, you may reach us at: srcsupport@surgicalreview.org.
