Privacy notice

BMJ Impact Analytics in collaboration with Overton

The BMJ Impact Analytics tool has been developed in collaboration with Overton. The tool checks for citations of academic work in other papers and other media. We want to understand how people use BMJ Impact Analytics, and to continually improve and develop the tool. To do this we (BMJ) need to collect and use some information about you. Here are the details of what we’d like to use, and what rights you have.

What should I expect?

When you use the BMJ Impact Analytics tool, BMJ will collect information including your email address, the topics/conditions viewed, and how you navigate around the tool.

BMJ will email you about the BMJ Impact Analytics tool to explain its features and uses.

What does BMJ collect and why?

Type of information	What it is used for	Lawful basis
Organisation, name, work, email address, password	To provide access to the BMJ Impact Analytics tool and to create a unique ID for you. Your work email address may include your name.	Necessary for contract
Organisation, name, work, email address, password	To personalise user experience of the BMJ Impact Analytics tool, so that relevant information is more easily available to users.	Legitimate interests
Name Email address	To identify users for the purposes of support and group administration.	Necessary for contract
Name Email address	To send you information on how to use the BMJ Impact Analytics tool, and to encourage you to use the tool. To contact you to collect survey responses and get your feedback on the tool.	Legitimate Interests
Analysis of how you interact with the tool	The tool tracks how it is used, and how often it is accessed against your unique identifier. Our legal basis is that it’s in our legitimate interests. We want to understand how it’s being used, and what we might be able to do to improve it.	Legitimate Interests
Analysis of how you interact with the tool	Where your access has been arranged by an organisation (such as an employer providing access for work purposes), we may provide them with usage data if requested. It is within their legitimate interests to understand if and how tools are being used.	Legitimate Interests

Where our ‘legal basis’ under data protection law is legitimate interests, our interests are summarised in the table above. However, you can contact us at any time if you object.

Where our basis is that the processing is necessary for the purpose of our contract with you, if you don’t provide the information, we won’t be able to provide access to the BMJ Impact Analytics tool.

Which organisations are involved?

The BMJ Impact Analytics tool, which has been developed together with a company called Open Policy Limited (trading as “Overton”). Overton hosts the tool, and so Overton will store your organisation, name, email address and password to allow you to log in to the tool. The data sets are held by Overton, and you can find Overton’s privacy notice here. We will anonymise your data before sharing it with any other organisation.

Where an organisation such as a hospital or company pays for access to BMJ Impact Analytics, they may be able to access user data to check that the tool is being used and how.

Is my data going to be processed overseas?

Yes. BMJ uses information storage based in the Republic of Ireland (RoI). The RoI has very similar data protection laws to the UK, and BMJ has strict contractual agreements to ensure that any personal data is handled properly and securely. Overton’s servers, where your user login details are stored, are based in France.

How long will my data be held?

BMJ will hold data on the Impact Analytics trial for ten years after your unique identifier is last used to access BMJ tools. If you use your work email address to use other BMJ products and services, your login and usage data will be held for ten years after the last time you access products and services.

What are my rights?

You have rights over your data. You can contact us if you would like to:

Have a copy of your personal data
Correct factually inaccurate information about you
Erase information about you
Restrict how your data is used
Object to our use of your data (including marketing)

You can find advice about your rights on the website for the Information Commissioner’s Office (the regulator for data protection law in the UK).

If you would like privacy information about any other BMJ products or services you may use, please refer back to the privacy information provided during your registration, or view our main privacy policy here, or search for the specific product at www.bmj.com.

If you have any questions, concerns or complaints, please contact us at BMJ in the first instance. You also have the right to complain to the Information Commissioner’s Office if you’d like to.

EU representative

Wherever you are in the world, you can get in touch with BMJ in the first instance through our email address: dataprotectionlead@bmj.com. However, in accordance with the requirements of the GDPR (Article 27), BMJ has a data protection representative in the EU:

activeMind.legal Rechtsanwaltsgesellschaft m.b.H.

Geschäftsführer: RA Klaus Foitzick

Kurfürstendamm 56

10707 Berlin

HRB 185355 Amtsgericht München

Email: euprivacy@bmj.com

Tel: +49 (0) 30 / 770191070

Web: www.activemind.legal