Starlims Corporation, based in the United States, is the parent organization of several subsidiaries worldwide. This privacy policy will use the name Starlims to refer to the parent company and all subsidiaries, and will explain how we use the personal data we collect from you.
This Privacy Notice and the policies contained herein relate to the personal data of persons in Australia, based on the federal Privacy Act of 1988 (cth) (“Privacy Act”), and its enabling regulations. If we obtain your data by contracting with a state or territorial governmental entity, your privacy rights may also be governed in part by data protection legislation relevant to that state or territory, including:
- Information Privacy Act 2014 (Australian Capital Territory)
- Information Act 2002 (Northern Territory)
- Privacy and Personal Information Protection Act 1998 (New South Wales)
- Information Privacy Act 2009 (Queensland)
- Personal Information Protection Act 2004 (Tasmania), and
- Privacy and Data Protection Act 2014 (Victoria)
Specifically, this Notice provides our policies regarding:
- What data do we collect?
- How do we collect your data?
- How will we use your data?
- How do we store, protect, and delete your data?
- Nature and purpose of our sharing any personal information
- Marketing
- Transfers of your data abroad
- What are your data protection rights?
- What are cookies?
- How do we use cookies?
- What types of cookies do we use?
- How to manage your cookies
- Privacy policies of other websites
- Changes to our privacy policy
- In case of a breach
- How to contact us
- How to contact the appropriate authorities
What data do we collect?
Starlims collects the following data:
- Laboratory-testing information related to specific individuals that our customers have collected with the consent of those individuals.
- Personal identification information related to employees of our customers or potential customers (which may include name, job title, work email address, work phone number, information related to the devices you use on behalf of your employer, etc.).
How do we collect your data?
If we host or otherwise process your laboratory-related data, we receive it from, and host it on behalf of, the entity that created the data. In creating that data, our customer obtained your consent to share your data with a third-party service provider for legitimate business purposes.
If you are an employee of our customer, we obtain the data we collect about you either from your employer or directly from you. In giving us your data, you consent to our processing of that data.
We collect and process such data when:
- Your employer provides us with your work-related information so that we may provide your employer with our services.
- You contact our Help Desk for support.
- You interact with us for product research and development.
- You use or view our website via your browser’s cookies.
- You respond to any survey or other questionnaire we ask you to complete.
If you are an employee of a potential customer, we may collect your information through typical business outreach initiatives, such as social networking, attending industry events, surveys, speaker programs, etc.
When you use our websites, the following categories of personal data are collected, stored and processed by us:
- “Log data” – When you visit our websites, a so-called log data record (so-called server log files) is stored temporarily and anonymously on our web server. This consists of:
- the page from which the page was requested (so-called referrer URL).
- the name and URL of the requested page
- the date and time of the call
- the description of the type, language and version of the web browser used.
- the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established.
- the amount of data transferred
- the operating system
- the message whether the call was successful (access status/http status code).
- the GMT time zone difference
The processing of the log data serves statistical purposes and the improvement of the quality of our website, in particular the stability and security of the connection; the legal basis is Art. 6, para. 1 (f) GDPR.
- “Contact form data” – When contact forms are used, the data transmitted through them are processed (e.g. gender, surname and first name, address, company, e-mail address and the time of transmission).
Contact form data is processed for the purpose of handling customer inquiries; the legal basis is Art. 6 para. 1 p. 1 lit. b or lit. f GDPR.
- “Newsletter subscription” – If you subscribe to our newsletter, we will inform you about current developments in our company. If you subscribe to our newsletter, the following “newsletter data” will be collected, stored and processed by us:
- the page from which the page was requested (so-called referrer URL).
- the date and time of the call
- the description of the type of the used web browser
- the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established.
- the e-mail address
- the date and time of registration and confirmation
The newsletter data is processed for the purpose of sending the newsletter. When registering for our newsletter, you consent to the processing of your personal data; the legal basis is Art. 6 (1) of GDPR. For the registration to our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to [email protected] or by sending a message to the contact details given in the imprint.
How will we use your data?
We provide a Software-as-a-Service laboratory information management solution that our customers use to manage their laboratory-related data. If you are an individual whose laboratory-testing data has been collected by a Starlims customer, we may host that data in a cloud-based, online environment. Alternatively, the customer may host the data on their own server, and use our SaaS solution to process that data. Except for very infrequent access at customer request by our Development or Support personnel, we rarely ever access the laboratory-related data we host.
If you are an employee of our customer, Starlims may collect your data so that we can:
- Provide our services to your employer.
- Respond to your requests for support.
- Analyze your responses to surveys or questionnaires.
- Create anonymized data for internal analytics purposes.
Because your employer has contracted with us to provide our services, we therefore have a legitimate basis for processing your data.
Because your employer has agreed, one Starlims affiliate may share your data with another Starlims affiliate or with a third party service provider so that they may best provide services and support. This is consistent with Article 13B of the Privacy Act, which allows the collection of non-sensitive personal information from a related corporate body.
If you agree to participate in a survey, you would be giving us permission to share your information with our third-party service providers for that purpose.
The third-party service providers with whom we may share your data include:
- Amazon Web Services (cloud-based data hosting)
- SalesForce (for marketing and surveys)
- Satmetrics by Nice Software (for surveys)
- Others we may contract with in the future
If you are an employee of a potential customer, we may use your data in furtherance of our business outreach efforts.
How do we store, protect, and delete your data?
Starlims securely stores the data about you in a cloud-based environment hosted by Amazon Web Services (“AWS”) within Australia. AWS maintains industry-leading privacy and security protocols. Starlims always maintains cloud-based customer databases in an individual cloud, and never co-hosts data from multiple customers in a shared cloud.
We maintain organizational, technical, and physical safeguards designed to protect against unauthorized access, use, modification, or disclosure of personal information. Such safeguards include encryption at rest and in transit; access management, control, and authentication; data minimization and deletion; vulnerability testing and remediation; data backup; and business continuity planning.
To maximize the security of your data, a Starlims employee’s access to that data must be approved by: (1) our client; (2) our data protection officer; and (3) the employee’s manager. Moreover, approved Starlims employees only have read-only access, and Development or Support personnel typically only receive screen shots or VPN and generally have no access to the actual database.
If you contact our Help Desk or interact with us for product research and development, we may securely store information related to you in a cloud-based environment hosted within Singapore or the United States. The security protocols for such data are the same as stated above for other employer-based data.
By contacting our Help Desk or interacting with us for product research and development, you are consenting to our processing of your personal information within Singapore or the United States.
If you respond to a survey or questionnaire, our service providers will store information about you in a cloud-based environment in the United States. The security protocols for such data are similar to those described above, except your employer may not have an approval role.
By responding to a survey or questionnaire, you are consenting to our processing of your personal information within the United States.
Starlims will keep the data we receive about you from our client, or from you in regard to contacting our Help Desk or interacting for product development or responding to surveys, according to the terms we establish with our client. Once this time period has expired, we will delete your data by electronic deletion from all servers, and if requested by our client, we will provide that client with an archive of that data.
Nature and purpose of our sharing any personal information
Because our client has agreed, when there is a legitimate business need, one Starlims affiliate may share your data with another Starlims affiliate or with a third party service provider so that they may best provide services and support.
If you agree to participate in a survey, or if you give us your business contact information as part of our marketing efforts, you would be giving us permission to share your information with our third-party service providers for that purpose.
The third-party service providers with whom we may share your data include:
- Amazon Web Services (cloud-based data hosting)
- SalesForce (for marketing and surveys)
- Satmetrics by Nice Software (for surveys)
- Others we may contract with in the future
Marketing and Surveys
Starlims may contact you in your role as an employee of a client or a potential client to market our services. You may opt-out of receiving such marketing outreach.
Starlims may also contact you to invite you to partake in surveys. If these surveys are not on behalf of your employer, you do not have to participate. If you have agreed to participate in non-employer surveys, you may always opt out at a later date.
You have the right at any time to stop Starlims from contacting you in regard to marketing non-employer surveys, or from giving the information we receive from you in regard to such surveys to any other entity.
If you no longer wish to be contacted in regard to marketing or non-employer surveys, please contact us at the contact information below.
Transfers of personal information abroad
If you contact our Help Desk or interact with us for product research and development, we may securely store information related to you in a cloud-based environment hosted by AWS that resides within the United States.
If you respond to a survey or questionnaire, our service providers will store information about you in a cloud-based environment in the United States. In such circumstances, the security protocols are similar to those described above, except your employer does not have an approval role.
What are your data protection rights?
Starlims would like to make sure you are fully aware of all of your data protection rights. You may be entitled to any of the following:
The right to inspect and correct – Under law, you have the right to inspect any information about you that we maintain, and to seek correction of any inaccurate information.
The right to file a complaint – You have the right to file a complaint with Starlims about any processing of your personal information by us that you deem to represent an infringement of your privacy. You may also file a complaint with the Information Commissioner.
If you wish to invoke any of these rights, please contact us at the contact information below.
Cookies
Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.
For further information, visit www.allaboutcookies.org.
How do we use cookies?
Starlims uses cookies in a range of ways to improve your experience on our website, including:
- Getting information about the traffic on our website
- Providing you with essential functionalities of our website
- Tracking your browsing behavior
- Tracking your engagement with social services
- Collecting information about how users use our website
- Remembering your preferences for our website
What types of cookies do we use?
We use the following types of cookies:
- Essential
- Preferences
- Analytics
Essential cookies
We always use the essential cookies. They allow us to provide you with the essential features of our website, such as website navigation or logging in the secured areas. Using them is in your best interest, hence all the applicable personal data protection laws allow us to use them freely.
We use other types of cookies only with your prior explicit consent. If you give us consent to store them on your computer, we do so. If you don’t consent to their use, we don’t use them. It’s that simple.
We don’t discriminate against users based on consent. Your consent applies to the following domains: https://www.starlims.com/jp.
Preferences cookies
These cookies allow our website to remember your preferences for using it, such as your login details, preferred language, and other customizable details.
Analytics cookies
Analytics cookies provide us with information about the traffic and users’ behavior on our website. This includes the number of visitors, number of clicks to pages, and others. Most often, the data these cookies collect is anonymous.
However, in some cases, the data may be related to a pseudonymous identifier that may be related to your device. That may possibly make you identifiable and that’s why we ask you for consent before using analytics cookies.
How to manage cookies
You can set your browser not to accept cookies, and the website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.
Privacy policies of other websites
The Starlims website may contain links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.
Changes to our privacy policy
Starlims keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 20 January 2022.
In the event of an Eligible Privacy Breach
An Eligible Privacy Breach would be a loss, or unauthorized access or disclosure, of personal information that a reasonable person would deem likely to result in serious harm to the individual.
If we become aware of an Eligible Privacy Breach, we will notify you and the Information Commissioner as required by law, as soon as practicable after becoming aware of the breach.
How to contact us
If you have any questions about Starlims’s privacy policy or the data we process on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.
Privacy Office
Starlims Corporation
4000 Hollywood Boulevard
Suite 333
Hollywood, FL, 33021
Attn: Judith Dolgin
Telephone: 954.964.8663
E-Mail: [email protected]