At NHTA, we take the protection of personal data seriously. Protecting your privacy when processing personal data is an important priority for us, and we are committed to handling such data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
This Privacy Policy describes the types of personal data we collect, how we use it, and the circumstances under which it may be disclosed.
Please note that NHTA may update this Privacy Policy from time to time. We encourage you to review this page regularly to stay informed of any changes.
Types of Personal Data, Purpose of Collection, and Use of Personal Data
NHTA collects and processes personal data through its services, research activities, and technology solutions, as well as from individuals directly or from third-party sources. The nature and purpose of processing depend on the relationship with the individual.
In relation to employees and job applicants, NHTA processes personal data for recruitment and employment purposes in its capacity as a data controller. This may include information relating to qualifications, previous employment history, contact details, assessment results, interview notes, references, and other relevant information provided during the recruitment process. For employees, personal data is processed as necessary to enter into and perform employment contracts and to comply with legal obligations.
In the context of research activities, NHTA processes personal data relating to research participants and patients, either as a data controller or as a data processor on behalf of its clients. The purpose of this processing is to support clinical research, observational studies, and statistical analyses. To protect privacy, data is anonymised or pseudonymised where possible prior to analysis. Research results are communicated externally only in aggregated form. Processing is carried out in accordance with applicable laws, approved study protocols, and relevant regulatory and ethical approvals. In certain cases, processing is also performed under contractual agreements with clients.
NHTA also processes personal data relating to customers and business contacts for the purpose of providing services, managing contractual relationships, granting access to technology solutions, and delivering support. This may include contact information such as email address and telephone number, professional details such as workplace and job title, and billing-related information. Such processing is carried out where necessary for the performance of a contract, at the request of the data subject prior to entering into a contract, or on the basis of NHTA’s legitimate interests in conducting and developing its business relationships. NHTA does not use personal data for unsolicited marketing communications.
Accountability for Onward Transfer to Third Parties
While providing our services, NHTA may transfer personal data to trusted third-party service providers, for example in connection with data hosting, payment processing, payroll administration, and expense management.
Such third parties are authorised to process personal data only for specific, agreed purposes and in accordance with NHTA’s instructions. They are contractually required to implement appropriate technical and organisational measures to protect personal data and are not permitted to sell, disclose, or otherwise use personal data for their own purposes.
NHTA does not share or sell personal data to third parties for marketing purposes.
Security and Confidentiality
NHTA maintains appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, disclosure, alteration, or destruction.
We apply data minimisation principles and ensure that personal data collected and processed is adequate, relevant, and limited to what is necessary for the intended purposes. Access to personal data is restricted to authorised personnel who require it for their work.
We also take reasonable steps to ensure that personal data is accurate and kept up to date for the purposes for which it was collected.
Contact and Complaints
If you believe that the processing of your personal data does not comply with the GDPR or applicable data protection laws, you are encouraged to contact us so that we can address your concerns. If you have given us consent to process your data, you may withdraw this consent at any time without formal requirements. For this purpose, you may contact us at gdpr@nhta.com
Furthermore, you have the right to lodge a complaint with a data protection supervisory authority. (art.77 GDPR)
For any questions, comments, or requests regarding this Privacy Policy or the processing of personal data, please contact us at: gdpr@nhta.com
NHTA reserves the right to update this Privacy Policy from time to time. Any updates will be published on this page, and we encourage you to review it periodically.