How International Medical Graduates (IMGs) Can Succeed in the UK Medical School System and Practice as Dermatologists

This Privacy Statement explains how The Savvy IMG collects, stores, and uses information about you when you visit or interact with our website, thesavvyimg.com. co uk (our website) and any other location where we obtain or collect information about you This Privacy Statement is in effect as of November 13th, 2019.

Contents

• Summary
• Our specifics
• When you come to our site,
• When you access our website,
• Communication in marketing
• Data obtained from third parties
• Information disclosure and additional uses
• How long will we keep your information?
• How we protect your data
• Transfers of your information outside of the European Union
• Your privacy and information rights
• Changes to our Privacy Statement
• Privacy of Children

Summary

This section summarizes how we collect, store, and use personal information about you. It is only meant to give a broad overview. It is not exhaustive and should be read in conjunction with the corresponding full sections of this Privacy Policy.

• The Savvy IMG is the data controller.
• We collect or obtain information about you in the following ways: when you provide it to us e g by contacting us, registering on our website, uploading and downloading files, filling out registration forms, posting blogs, or signing up for content such as newsletters Your use of our website, the use of cookies, and, on occasion, third parties such as mailing list providers
• Name, contact information, social media information, IP address, cookie information, information about your computer or device (e.g. g information about how you use our website (e.g., device and browser type), g which pages you visited, when you visited them, and what you clicked on, the geographical location from which you accessed our website (based on your IP address), engagement history, and transaction history
• How we use your information: for administrative and business purposes (especially to contact you, improve our business and website, fulfill contractual obligations, advertise our and others' goods and services, analyze your use of our website, and in connection with our legal rights and obligations). )
• Third-party disclosure of your information: User information may be shared with partners for specific types of content and events for which a user has registered their information. Other disclosures are limited to what is required to run our business, to our service providers, to fulfill any contracts we enter into with you, and where required by law or to enforce our legal rights.
• Do we sell your information to third parties (other than in the course of a business sale, purchase, or similar event): No, The Savvy IMG does not sell data. Your registration data, however, may be shared with sponsors and partners if you register or sign up for certain types of content. Examples include event registrations, webinar signups, and whitepaper downloads. We will always make it clear where any provided information will be shared with third parties.
• We keep your information for no longer than is necessary, taking into account any legal obligations we may have (e.g. g to keep records for tax purposes), and any other legal basis for using your information (e.g. g your consent, performance of a contract with you, or our legitimate business interests) and certain other factors described in the main section below titled How long do we keep your information? Please see the main section below entitled How long we retain your information for specific retention periods in relation to certain information that we collect from you.
• We secure your information by implementing appropriate technical and organizational safeguards, such as storing your information on secure servers and encrypting data transfers to and from our servers with Secure Sockets Layer (SSL) technology. encrypting payments made on or through our website with Secure Sockets Layer (SSL) technology and granting access to your information only when necessary
• Cookies and similar technologies: On our website, we use cookies and similar information-gathering technologies such as marketing automation tracking, as well as essential, functional, analytical, and targeting cookies. Please see our cookies policy for more information.
• Transfers of your information outside the European Economic Area: By using our website, you consent to the transfer of your information outside of the European Economic Area. We take personal data seriously, and as such, we make certain that appropriate safeguards are in place, such as ensuring that the third parties we use to transfer your information outside of the European Economic Area have self-certified as complying with the EU-U.S. Privacy Shield. S Shield of Privacy
• Profiling is used to better understand our users through web and marketing analytics, to provide targeted advertising, and to provide a personalized user experience.
• Your privacy and information rights
  • to gain access to your information and learn about its use
  • to have your data updated and/or completed
  • to have your personal information erased
  • to limit how your information is used
  • to obtain your data in a portable format
  • to protest the use of your data
  • to revoke your permission for your information to be used
  • to file a complaint with a supervisory authority
• Sensitive personal information: We do not collect so-called "sensitive personal information."

Our specifics

Please contact the data controller if you have any questions about this Privacy Policy.

The Savvy IMG is the data controller in relation to our website.

You can reach the data controller by emailing [email protected]. co uk

When you come to our website,

We collect and use information from website visitors in accordance with this section and the disclosure and additional uses of your information section.

Data from web server logs

BlueHost Inc is a third-party server that hosts our website. The privacy policy can be found here: https://www.endurance.com/privacy/privacy

Our website server automatically logs the IP address you use to access our website, as well as other information about your visit, such as the pages you visit, the information you request, the date and time of your request, and the source of your access to our website (e.g., a search engine). g the website or URL (link) that directed you to our website), as well as your browser version and operating system

Information from website server logs is used for IT security purposes.

We collect and store server logs to ensure network and IT security, as well as the server's and website's integrity. This includes analyzing log files to help identify and prevent unauthorized network access, malicious code distribution, denial of service attacks, and other cyber-attacks by detecting unusual or suspicious activity.

We do not attempt to identify you from server logs unless we are investigating suspicious or potential criminal activity, and we do not allow our hosting provider to do so either.

Compliance with a legal obligation to which we are subject (Article 6(1)(c) of the General Data Protection Regulation) is the legal basis for processing.

Legal obligation: We are required by law to implement appropriate technical and organizational safeguards to ensure a level of security commensurate with the risk of processing personal information. Using server log files to record access to our website is one such measure.

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interests: We have a legitimate interest in using your data to ensure network and information security.

Use of website server log data to analyze website traffic and improve our website

We analyze how our website users interact with our website and its features using information collected by our website server logs. We examine the number of visits and unique visitors, the time and date of the visit, the location of the visit, and the operating system and browser used, for example.

We use the information gleaned from this data analysis to improve our website. For example, we use the information gathered to modify the information, content, and structure of our website and individual pages based on what users engage with the most and the length of time spent on specific pages on our website.

Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) serve as the legal basis for processing.

Legitimate interest: improving our website for website users and learning about their preferences so that our website can better meet their needs and desires.

Cookies

Cookies are data files that a website sends to a browser in order to record information about users for various purposes.

On our website, we use cookies, including essential, functional, analytical, and targeting cookies. Please refer to our cookies policy for more information on how we use cookies.

You can reject some or all of the cookies we use on or through our website by changing your browser settings or by using a cookie control tool, but doing so may limit your ability to use our website or some or all of its features. Please visit www.allaboutcookies.org or see our cookie policy for more information on cookies, including how to change your browser settings.

When you get in touch with us

We collect and use information from people who contact us in accordance with this section and the section titled Disclosure and additional uses of your information.

Email

When you send an email to the email address listed on our website, we collect your email address as well as any other information you include in the email (such as your name, phone number, and any information in your email's signature block).

Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) serve as the legal basis for processing.

Legitimate interest(s): responding to inquiries and messages received and maintaining correspondence records

Legal basis for processing: necessary to perform a contract or to take steps at your request to enter into a contract (General Data Protection Regulation Article 6(1)(b)).

When your message relates to us providing you with goods or services or taking steps at your request prior to providing you with our goods and services (for example, providing you with information about such goods and services), it is necessary to perform a contract. In order to do so, we will process your information.)

Forms for Inquiries

When you contact us via an enquiry form, we collect your personal information and match it to any information we have on file for you. Your name and contact information are typical pieces of personal information collected. We will also keep track of the time, date, and form you filled out.

If you do not provide the mandatory information requested by our contact form, you will be unable to submit the form and we will not receive your inquiry.

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest(s): responding to inquiries and messages received and maintaining correspondence records

This information will also be used to tailor any subsequent sales and marketing communications with you. For more information, see the section of this privacy statement titled 'Marketing Communications.'

Messages sent to us via our contact form may be stored on servers outside the European Economic Area by our contact form provider.

Phone

When you call us, we collect your phone number as well as any information you give us during the call.

We record phone calls with customers for training and customer service purposes.

Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) serve as the legal basis for processing.

Legitimate interest(s): responding to inquiries and messages received and maintaining correspondence records

Legal basis for processing: necessary to perform a contract or to take steps at your request to enter into a contract (General Data Protection Regulation Article 6(1)(b)).

Where your message relates to us providing you with goods or services or taking steps at your request prior to providing you with our goods and services (for example, providing you with information about such goods and services), it is necessary to perform a contract. In order to do so, we will process your information.)

Post

We will collect any information you provide to us in any postal communications you send us if you contact us by mail.

Our legitimate interests are the legal basis for processing (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest(s): responding to inquiries and messages received and maintaining correspondence records

Legal basis for processing: necessary to perform a contract or to take steps at your request to enter into a contract (General Data Protection Regulation Article 6(1)(b)).

When your message relates to us providing you with goods or services or taking steps at your request prior to providing you with our goods and services (for example, providing you with information about such goods and services), it is necessary to perform a contract. In order to do so, we will process your information).

When you use our website

In accordance with this section and the section entitled Disclosure and additional uses of your information, we collect and use information from individuals who interact with specific features of our website.

Social Media Applications

On our website, we provide a variety of social media tools. These tools include (but are not limited to) sharing, likes, comments, and content submissions on and off our website. By using these tools, you grant us permission to store and use the submitted data, whether personal or general information, both on and off our website.

Legal basis for processing: your consent (Article 6(1)(a) of the General Data Protection Regulation). Consent: By following the steps outlined above, you grant us permission to store and use the submitted content.

This information may also be used to tailor any subsequent sales and marketing communications with you. See the section of this privacy statement titled 'Marketing Communications' for more information.

Information you submit may be stored on our servers as well as third-party servers such as Facebook both within and outside the European Economic Area.

For more information on the safeguards used when your information is transferred outside of the European Economic Area, click here.

Creating an account on our website

We collect the following information when you register on our website or via teachable: Your Name, Email Address

You will not be able to interact with our website or Teachable if you do not provide the mandatory information requested by the form.

Teachable's privacy policies can be found at https://teachable.com/privacy. com/privacy-policy

Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) serve as the legal basis for processing.

Legitimate interest: registering and administering accounts on our website to provide access to content, allowing you to download content, and facilitating the operation and running of our business.

This information will also be used to tailor any subsequent sales and marketing communications with you. For more information, see the section of this privacy statement titled 'Marketing Communications.'

Transfer and storage of your data

Information submitted to us via our website's registration form may be stored outside the European Economic Area on the servers of our third-party hosting provider.

Market communicationa target="_blank" href="MY_REDIRECT_PREFIX">/a>

Our products and services

We will use the information you provide when signing up for content, registering on our website, or making a payment to contact you about related content, products, and services.

If you do not opt out of receiving marketing communications about similar goods and services, we will continue to send you them.

You can unsubscribe from marketing communications at any time by emailing [email protected]. co uk

Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) serve as the legal basis for processing.

Legitimate interests: Sharing pertinent, timely, and industry-specific information on related business services to help your organization grow.

Goods and services provided by third parties

You can opt in to receive marketing communications from us regarding third-party goods and services by email in addition to receiving information about our products and services by ticking a box indicating that you would like to receive such communications.

Consent (Article 6(1)(a) of the General Data Protection Regulation) is the legal basis for processing.

Consent: By signing up to receive such information in accordance with the steps outlined above, you give us permission to send you information about third-party goods and services.

Transfer and storage of your data

Information for marketing campaigns will be stored on the servers of our third-party mailing list provider in the United States, outside the European Economic Area.

See the section of this privacy policy below titled Transfers of your information outside the European Economic Area for more information on the safeguards used when your information is transferred outside the European Economic Area.

Email tracking is used.

In the emails we send, we use technologies such as tracking pixels (small graphic files) and tracked links to assess the level of engagement our emails receive by measuring information such as delivery rates, open rates, click through rates, and content engagement.

Data obtained from third parties

This section describes how we obtain information about you from third parties.

Third-party information received

We frequently obtain information about you from third parties. Third parties from whom we obtain information about you may include marketing industry partner events and other organizations with which we have a professional affiliation.

Third parties with whom we have had no prior contact may also provide us with information about you.

We will generally obtain your name and contact information from third parties, but we will also obtain any additional information about you that they provide to us.

Legal basis for processing: required to perform a contract or to take steps at your request to enter into a contract (General Data Protection Regulation Article 6(1)(b)).

Reason for contract performance: where a third party has provided us with information about you (such as your name and email address) in order for us to provide services to you We will process your information in order to take steps at your request to enter into and perform a contract with you (as applicable).

Consent (Article 6(1)(a) of the General Data Protection Regulation) is the legal basis for processing.

Consent: If you have asked a third party to share information about you with us and the purpose of sharing that information is not related to the performance of a contract or the provision of services by us to you, we will process your information on the basis of your consent. which you provide by requesting that the third party pass your information on to us

Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) serve as the legal basis for processing.

Legitimate interests: If a third party has shared information about you with us and you have not consented to that sharing, we will have a legitimate interest in processing that information in certain circumstances.

For example, we would have a legitimate interest in processing your information in order to fulfill our obligations under a subcontract with a third party, where the third party is the primary contract holder with you. Our legitimate interest is the fulfillment of our subcontract obligations.

Similarly, third parties may provide us with information about you if you have infringed or are suspected of infringing any of our legal rights. In this case, we will have a legitimate interest in processing that information in order to investigate and prosecute any such potential violation.

We obtained information from third parties.

In certain circumstances (for example, to verify the information we hold about you or obtain missing information needed to provide you with a service), we will obtain information about you from publicly accessible sources, both EU and non-EU, such as Companies House, online customer databases, business directories, and government databases. Publications in the media, social media, and websites (including your own, if you have one)

In some cases, we will obtain information about you from private sources, both EU and non-EU, such as marketing data services.

If you do not opt out, we will continue to send you marketing communications about similar goods and services.

You can unsubscribe from marketing communications at any time by emailing [email protected]. co uk

Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) serve as the legal basis for processing.

Legitimate interests include the dissemination of pertinent, timely, and industry-specific information on related business services.

Where we receive incorrect information about you

If we receive information about you in error from a third party and/or do not have a legal basis for processing that information, we will delete it.

Information disclosure and other uses

This section describes the circumstances under which we will disclose information about you to third parties, as well as any additional uses of your information.

Service providers' access to your information

We employ a number of third parties to provide services that are required to run our business or to assist us in running our business.

Internet services, IT service providers, and web developers are examples of these.

Our third-party service providers are based both within and outside of the European Union.

Your information will be shared with these service providers as needed to provide you with the service you have requested, whether it is access to our website or ordering goods and services from us.

For security and competitive reasons, we do not publicly disclose the identities of our service providers. If you want more information about the identities of our service providers, please contact us directly by email, and we will provide you with such information if you have a legitimate reason for doing so (for example, if we have shared your information with such service providers).

Legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) are the legal basis for processing.

Legitimate interest is invoked when we share your information with these third parties in circumstances other than those required to perform a contract (or where we take steps at your request to do so). We will share your information with such third parties in order for us to efficiently run and manage our business.

Legal basis for processing: required to carry out a contract or to take steps at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).

Reason for contract performance: We may need to share information with our service providers in order to perform our obligations under that contract or to take the steps you have requested before we enter into a contract with you.

Disclosure and use of your personal information for legal purposes

Notifying a competent authority of potential criminal acts or threats to public security

If we suspect criminal or potentially criminal behavior, we must contact an appropriate authority, such as the police, in certain circumstances. This could be the case, for example, if we suspect that we have been the victim of fraud or a cyber-crime, or if we receive threats or malicious communications directed at us or third parties.

We will generally only need to process your information for this purpose if you were involved or impacted in some way by such an incident.

Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) serve as the legal basis for processing.

Legitimate interests include preventing crime or suspected criminal activity (for example, fraud).

Regarding the enforcement or potential enforcement of our legal rights

We will use your information to enforce or potentially enforce our legal rights, such as sharing information with debt collection agencies if you fail to pay amounts owed to us when contractually required to do so. Our legal rights may be contractual (because we have a contract with you) or non-contractual (because we have legal rights under copyright or tort law).

Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) serve as the legal basis for processing.

Legitimate interest: enforcing our legal rights and taking steps to do so.

In relation to a current or potential legal dispute or proceeding

If we are involved in a dispute with you or a third party, for example, we may need to use your information to resolve the dispute or as part of any mediation, arbitration, court resolution, or similar process.

Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation) serve as the legal basis for processing.

Legitimate interest(s): resolving conflicts and potential conflicts

How long will we keep your information?

This section specifies how long we keep your information. Wherever possible, we have established specific retention periods. In cases where this was not possible, we have specified the criteria we use to determine the retention period.

Retention times

Server log data: We keep information on our server logs for three months.

Correspondence and enquiries: If you make an enquiry or correspond with us for any reason, whether by email, via our contact form, or by phone, we will retain your information for as long as it takes to respond to and resolve your enquiry, plus 36 additional month(s). Following that, we will archive your data.

Newsletter: We keep the information you used to sign up for our newsletter for as long as you stay subscribed (i.e., for as long as you are a subscriber). e unless you unsubscribe)

Membership: We keep the information you used to sign up for our memberships for as long as you are a subscriber (i.e., for as long as you are a member). e unless you unsubscribe)

Retention period determination criteria

In all other cases, we will keep your information for no longer than is necessary, taking into account the following:

• • the purpose(s) and future use of your information (such as whether it is necessary to continue storing that information in order to perform our obligations under a contract with you or to contact you in the future);
  • whether we are required by law to continue processing your information (for example, any record-keeping obligations imposed by relevant law or regulation);
  • whether we have any legal basis to continue processing your data (for example, your consent);
  • how valuable your data is (now and in the future);
  • any relevant industry consensus on how long information should be kept;
  • the levels of risk, cost, and liability associated with our continued possession of the information;
  • how difficult it is to keep the information up to date and accurate; and
  • any relevant circumstantial circumstances (for example, the nature and status of our relationship with you)

How we keep your information safe

We employ appropriate technical and organizational safeguards to secure your information and protect it from unauthorized or unlawful use, as well as accidental loss or destruction, such as:

• Only share and provide access to your information to the extent necessary, subject to confidentiality restrictions where appropriate, and on an anonymous basis whenever possible;
• storing your information on secure servers;
• prior to granting access to information, verifying the identity of any individual who requests access to information;
• encrypting any payment transactions you make on or through our website with Secure Sockets Layer (SSL) software;
• transferring your data only through closed systems or encrypted data transfers

Email transmission of information to us

Transmission of information over the internet is not completely secure, and if you send us any information via the internet (via email, our website, or any other means), you do so entirely at your own risk.

We are not liable for any costs, expenses, lost profits, reputational harm, damages, liabilities, or any other form of loss or damage incurred as a result of your decision to transmit information to us via such means.

Transfers of your information outside of the European Union

In the circumstances outlined earlier in this policy, your information may be transferred and stored outside the European Economic Area (EEA).

We will also transfer your information outside the EEA or to an international organization to comply with legal obligations to which we are subject (for example, to comply with a court order). Where necessary, we will put appropriate safeguards and protections in place.

Your privacy and information rights

You have the following rights in relation to your information, subject to certain limitations on certain rights, which you can exercise by writing to the data controller using the contact information provided at the top of this policy.

• to request access to your information as well as information about how we use and process your information;
• to request that your information be corrected or deleted;
• to request that we limit how we use your information;
• to receive information from you in a structured, commonly used, and machine-readable format (e.g. g a CSV file) and the right to transfer that information to another data controller (including a third-party data controller);
• to object to the processing of your personal data for specific purposes (for more information, see the section below titled Your right to object to the processing of your personal data for specific purposes); and
• to withdraw your consent to our use of your data at any time where we rely on your consent to use or process that data Please keep in mind that withdrawing your consent will not affect the legality of our use and processing of your information based on your consent prior to the point at which you withdraw your consent.

According to Article 77 of the General Data Protection Regulation, you also have the right to file a complaint with a supervisory authority, specifically in the Member State of your habitual residence, place of employment, or of an alleged violation of the General Data Protection Regulation.

More information on your rights as an individual in relation to your personal data

You can learn more about your rights, as well as any limitations to those rights, by reading the underlying legislation contained in Articles 12 to 22 and 34 of the General Data Protection Regulation, which is available here:http://ec.europa.eu/justice/data-protection/reform/files/regulation_oj_en.pdf.

Verifying your identity when requesting access to your data

We are required by law to use all reasonable measures to verify your identity when you request access to your information.

These safeguards are intended to safeguard your data and reduce the risk of identity fraud, identity theft, or general unauthorized access to it.

How we confirm your identity

Where we have appropriate information about you on file, we will use that information to try to verify your identity.

If we cannot identify you from such information, or if we have insufficient information about you, we may require original or certified copies of certain documentation to verify your identity before granting you access to your information.

If and when you make such a request, we will be able to confirm the precise information we need to verify your identity in your specific circumstances.

You have the right to object.

You have the following rights in relation to your information, which you can exercise by writing to the data controller using the information provided at the top of this policy.

• to object to us using or processing your information where we do so in order
• to perform a task in the public interest or in our legitimate interests, including 'profiling' (i) e analyzing or forecasting your behavior based on your data) for any of these purposes; and
• to object to us using or processing your information for direct marketing purposes (including any profiling associated with such direct marketing)

You can also use the following methods to exercise your right to object to us using or processing your information for direct marketing purposes:

• clicking the unsubscribe link at the bottom of any marketing email we send you, and then following the instructions that appear in your browser after clicking that link;
• contacting [email protected] co uk, requesting that we no longer send you marketing communications, or by including the words "OPT OUT"

Private Personal Information

'Sensitive personal information' refers to information about an individual that reveals their racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic information, or biometric information used to uniquely identify an individual. health information or information about a natural person's sex life or sexual orientation

Our website does not permit you to register any 'Sensitive Information,' but if we ask for it, you will be deemed to have explicitly consented to us processing that sensitive personal information under Article 9(2)(a) of the General Data Protection Regulation.

Changes to our Privacy Statement

Our Privacy Policy is updated and amended on a regular basis.

Minor modifications to our Privacy Statement

When we make minor changes to our Privacy Policy, we will update it and include a new effective date at the beginning. From the date of its effective date, our processing of your information will be governed by the practices outlined in that new version of the Privacy Policy.

Significant changes to our Privacy Policy or the purposes for which we process your data

We will notify you by email (where possible) or by posting a notice on our website if we make major changes to our Privacy Policy or intend to use your information for a new or different purpose than the purposes for which we originally collected it.

Before we use your information for the new purpose, we will provide you with information about the change in question, its purpose, and any other relevant information.

Where required, we will obtain your prior consent before using your information for a purpose other than the one for which it was originally collected.

Privacy of Children

We follow the Children's Online Privacy Protection Act of 1998 (COPPA) because we care about the safety and privacy of children online. COPPA and its accompanying regulations safeguard children's internet privacy. We never contact or collect information from anyone under the age of 18. The website is not intended to collect any information from anyone under the age of 18.

We may obtain information about people under the age of 18 through the deception or fraud of a third party. If we are notified of this, as soon as we verify the information, we will obtain the appropriate parental consent to use that information or, if we are unable to obtain such parental consent, we will delete the information from our servers, unless otherwise required by law. If you would like to notify us that we have received information about people under the age of 18, please contact us using the information at the top of this policy.