Privacy notice
BMJ Impact Analytics in collaboration with Overton
The BMJ Impact Analytics tool has been developed in collaboration with Overton. The tool checks for citations of academic work in other papers and other media. We want to understand how people use BMJ Impact Analytics, and to continually improve and develop the tool. To do this we (BMJ) need to collect and use some information about you. Here are the details of what we’d like to use, and what rights you have.
What should I expect?
When you use the BMJ Impact Analytics tool, BMJ will collect information including your email address, the topics/conditions viewed, and how you navigate around the tool.
BMJ will email you about the BMJ Impact Analytics tool to explain its features and uses.
What does BMJ collect and why?
| Type of information | What it is used for | Lawful basis |
| Organisation, name, work, email address, password | To provide access to the BMJ Impact Analytics tool and to create a unique ID for you. Your work email address may include your name. | Necessary for contract |
| To personalise user experience of the BMJ Impact Analytics tool, so that relevant information is more easily available to users. | Legitimate interests | |
| Name Email address | To identify users for the purposes of support and group administration. | Necessary for contract |
| To send you information on how to use the BMJ Impact Analytics tool, and to encourage you to use the tool. To contact you to collect survey responses and get your feedback on the tool. | Legitimate Interests | |
| Analysis of how you interact with the tool | The tool tracks how it is used, and how often it is accessed against your unique identifier. Our legal basis is that it’s in our legitimate interests. We want to understand how it’s being used, and what we might be able to do to improve it. | Legitimate Interests |
Where our ‘legal basis’ under data protection law is legitimate interests, our interests are summarised in the table above. However, you can contact us at any time if you object.
Where our basis is that the processing is necessary for the purpose of our contract with you, if you don’t provide the information, we won’t be able to provide access to the BMJ Impact Analytics tool.
Which organisations are involved?
The BMJ Impact Analytics tool, which has been developed together with a company called Open Policy Limited (trading as “Overton”). Overton hosts the tool, and so Overton will store your organisation, name, email address and password to allow you to log in to the tool. The data sets are held by Overton, and you can find Overton’s privacy notice here. We will anonymise your data before sharing it with any other organisation.
Where an organisation such as a hospital or company pays for access to BMJ Impact Analytics, they will be able to access user data to check that the tool is being used and how.
Is my data going to be processed overseas?
Yes. BMJ uses information storage based in the Republic of Ireland (RoI). The RoI has very similar data protection laws to the UK, and BMJ has strict contractual agreements to ensure that any personal data is handled properly and securely. Overton’s servers, where your user login details are stored, are based in France.
How long will my data be held?
BMJ will hold data on the Impact Analytics trial for ten years after your unique identifier is last used to access BMJ tools. If you use your work email address to use other BMJ products and services, your login and usage data will be held for ten years after the last time you access products and services.
What are my rights?
You have rights over your data. You can contact us if you would like to:
- Have a copy of your personal data
- Correct factually inaccurate information about you
- Erase information about you
- Restrict how your data is used
- Object to our use of your data (including marketing)
You can find advice about your rights on the website for the Information Commissioner’s Office (the regulator for data protection law in the UK).
If you would like privacy information about any other BMJ products or services you may use, please refer back to the privacy information provided during your registration, or view our main privacy policy here, or search for the specific product at www.bmj.com.
If you have any questions, concerns or complaints, please contact us at BMJ in the first instance. You also have the right to complain to the Information Commissioner’s Office if you’d like to.
EU representative
Wherever you are in the world, you can get in touch with BMJ in the first instance through our email address: dataprotectionlead@bmj.com. However, in accordance with the requirements of the GDPR (Article 27), BMJ has a data protection representative in the EU:
activeMind.legal Rechtsanwaltsgesellschaft m.b.H.
Geschäftsführer: RA Klaus Foitzick
Kurfürstendamm 56
10707 Berlin
HRB 185355 Amtsgericht München
Email: euprivacy@bmj.com
Tel: +49 (0) 30 / 770191070
Web: www.activemind.legal