Privacy Policy

This website and the intraocular lens (IOL) calculator tool (the “Tool”) are owned and operated by The European Society of Cataract and Refractive Surgeons, a company limited by guarantee registered in England and Wales under number 03153785 with its registered office at 5 Fleet Place, London EC4M 7RD ("ESCRS", “we”, “our”, and “us”).

We are the controller of personal data obtained via this website, meaning we are the organisation legally responsible for deciding how and for what purposes it is used. We are registered with the UK Information Commissioner’s Office under registration number: ZA423474.

This privacy policy contains information on who we are and how and why we collect, store, use and share any information relating to you (your personal data) in connection with your use of this website and the Tool. It also explains your rights in relation to your personal data and how to contact us or a relevant regulator in the event you have a complaint.

We collect, use and are responsible for certain personal data about you. When we do so we are subject to the UK General Data Protection Regulation (UK GDPR). We are also subject to the EU General Data Protection Regulation (EU GDPR) in relation to services we offer to individuals and our wider operations in the European Economic Area (EEA).

What this policy applies to

This privacy policy relates to your use of this website and the Tool only.

Personal data we collect about you

We will collect and use the following personal data about you:

• Identity data - your name, address and contact information, including email address
• Technical data - including internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website
• Usage data - includes information about how you use the Tool.

How your personal data is collected

Identity data – when you complete the form on the Tool or otherwise correspond with us in relation to the use of the Tool

Technical data and usage data - as you interact with the website and the Tool, and through the cookies on the website, we will automatically collect technical data and usage data. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see below.

How and why we use your personal data

Under data protection law, we can only use your personal data if we have a proper reason. In this case we use your personal data to:

• provide you with access to and use of the Tool;
• administer the website and the Tool including troubleshooting, data analysis, testing, system maintenance, support and reporting.

The legal basis on which we use your personal data is that it is in our, your and patients’ legitimate interests to provide you with access to and use of the Tool and such legitimate interests are not over-ridden by your interests.

Who we share your personal data with

We will only share personal data with third parties we use to help deliver the Tool to you. We only allow those third parties to handle your personal data if we are satisfied they take appropriate measures to protect your personal data.

We may also share personal data if required by any law enforcement agencies, courts, tribunals and regulatory bodies to comply with our legal and regulatory obligations.

How long your personal data will be kept

We will not keep your personal data for longer than we need it for the purpose for which it is used. Following the end of the of the relevant retention period, we will delete or anonymise your personal data.

Transferring your personal data out of the UK and EEA

We do not transfer your personal data outside the UK or the EEA.

Your rights

You have the right to:

Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in a number of scenarios; for example, If you want us to establish the data's accuracy or you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

If you would like to exercise any of those rights, please email, call or write to us—see below: ‘How to contact us’.

Keeping your personal data secure

We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine need to access it.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Cookies

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive. We use the following cookies:

Strictly necessary cookies. These are cookies that are required for the operation of our website.

Analytical or performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

Functionality cookies. These are used to recognise you when you return to our website.

The table below provides more information about the cookies we use and why:

Essential Cookies

We will ask for your consent to place cookies on your device, except where they are essential for us to provide you with a service that you have requested.

If you do not want to accept any cookies, you may be able to change your browser settings so that cookies (including those which are essential to the services requested) are not accepted. If you do this, please be aware that you may lose some of the functionality of our website.

How to complain

Please contact us if you have any queries or concerns about our use of your personal data (see below ‘How to contact us’). We hope we will be able to resolve any issues you may have.

You also have the right to lodge a complaint with the Information Commissioner in the UK or a relevant data protection supervisory authority in the EEA state of your habitual residence, place of work or of an alleged infringement of data protection laws in the EEA.

The UK’s Information Commissioner may be contacted using the details at https://ico.org.uk/make-a-complaint or by telephone: 0303 123 1113.  For a list of EEA data protection supervisory authorities and their contact details see here.

Changes to this privacy policy

We may change this privacy policy from time to time.

How to contact us

You can contact us by post, email or telephone if you have any questions about this privacy policy or the information we hold about you, to exercise a right under data protection law or to make a complaint.  Our contact details are shown below:

Last revised: 23 August 2022