We are Bristol-Myers Squibb (BMS), a company member of the Bristol Myers Squibb Company group. As sponsor of clinical studies, BMS together with our worldwide affiliates and other entities that are part of the BMS group will be the controller of your personal information. Please refer to the study protocol or the study documentation to access the BMS entity that is responsible as sponsor for handling your personal information in the context of a particular study.

When assessing your site for potential BMS clinical studies, we usually obtain it from questionnaires or depending on your interactions with BMS, from third parties with whom we collaborate or external sources providing us with your data. Below, we explain you what data we collect, for what purpose and, where applicable, how we justify such use.

If your site is selected to participate in a BMS clinical trial, we will keep profile and feasibility data collected from your site and ask for additional information and documentation from you, your staff, site’s personnel and to enter into a contract with you. Below, we provide you more information such use.

This notice applies to personal information of investigators and your site’s personnel. As part of your responsibility please share this notice with your site’s personnel whose personal information is shared with us.

We will process your personal information in our systems. When BMS requires assistance of partners or service providers to assist us, such as Contract Research Organizations (CROs), we may share your personal information with them. In such cases, we will put in place appropriate technical and organizational measures, including contracts and confidentiality provisions to ensure third parties also protect your data.

BMS aims to retain your information for no longer than necessary for the specific purposes identified in this notice. Note that BMS may keep your personal information for a longer duration, where applicable laws or regulations require or allow BMS to do so.

Due to the global nature of clinical studies, the processing and storage of personal information is often conducted in centralized locations outside your country. Therefore, we may need to transfer your information to other BMS entities and disclose your information to third parties that provide services to BMS, which includes access from countries which legislation may not offer the same level of protection to your information as in your country, such as the United States.

We may also obtain information about you from third parties or share it with partners managing databases, which may involve sharing or accessing your site’s profile or performance in the conduct of clinical trials. This includes, where applicable and permitted, making your personal information available through investigator registries that other sponsors or CROs can use to improve clinical trial opportunities.

How we securely transfer it. When disclosing your personal information to third parties or transferring it outside your country, BMS will implement: (a) appropriate safeguards or agreements for international transfers of personal data (such as binding corporate rules (BCR) for transfers within the BMS group and standard contractual clauses when using authorized third parties); and (b) appropriate security measures to protect your personal information from unauthorized use, access or disclosure and in accordance with any data protection laws.

Where the legislation of your country gives you the right to access, verify your personal information held by BMS, receive a copy of it, object, restrict, request its deletion or correction and object to certain processing, you can exercise your rights by contacting BMS at the address below. If you have questions, if you want to know more about how BMS handles personal information about you or to exercise your rights, you can read our HCP privacy notice here: https://www.bms.com/privacy-policy.html#hcp or, when available, on the official BMS website of your country for more specific information.

BMS may update this notice from time to time by posting any revisions on our website.  Where any material revisions are made, BMS may place a prominent notice on our website and when required, we will directly notify you.  You should therefore periodically visit our page to review the most current privacy notice or contact us for more information.

Except for countries where consent is not required for processing your personal information¹, you hereby confirm that you have read this notice and consent to the use of your personal data as set out in this privacy notice.

¹Note that if your site is based in one of the following countries, BMS processes your personal data either on the basis of its legitimate interest, contractual need or to comply with the law. This may include for example Australia, Brazil, EEA countries, UK and Switzerland, Hong-Kong, New Zealand, US, Taiwan or Turkey.

If you have questions about this notice or want to obtain more information about our privacy practices, please visit our privacy notice center at https://www.bms.com/privacy-policy.html, or contact us by e-mail or postal mail at: