Monocl General Privacy Policy

Last updated: July 11, 2024

Welcome to Monocl!

Monocl* (“we” “us” or “our”) operates the Monocl Platform a globally accessible software as a service available at app.monocl.com housing vast database of information about healthcare professionals and academics (“Experts”) which is curated into Expert Profiles. Expert Profiles are made available to enterprise customers who use this information to research which Experts they could potentially collaborate with.

*References to Monocl in this Privacy Policy means collectively Monocl AB and Monocl Company (collectively “Monocl”). Monocl is a subsidiary of Definitive Healthcare LLC. References to “you” and “your” mean any individual whose information we collect and process under this Privacy Notice.

1. Applicability of this Privacy Policy

This General Privacy Policy (the “Privacy Policy”) explains how Monocl collects, uses, processes and shares your information where:

*(see more in Section 3 entitled What information do we collect about you below)

This Privacy Policy does not apply to:

Monocl is generally not a data processor in respect of its processing activities.

2. GDPR, and US State Notices

If you are resident of the EEA (European Economic Area) and/or Switzerland or the GDPR applies to you, Monocl AB is the data controller in respect of the processing of your personal information. You can find out more specific information about your rights and how to exercise them in the GDPR Privacy Policy Supplement at Section 8 below.

For residents of any U.S. state with a Comprehensive State Privacy Law, please review our U.S. Supplemental Privacy Policy at Section 14 below to learn more information, including how to exercise your rights under your state' law.

3. What information do we collect about you?

For the purposes of this Privacy Policy, reference to personal information includes any information relating to an identifiable person.

We collect information about you in the following ways:

Where you are a Customer employee/representative (Registered User) We license our product to our enterprise customers’ (”Customer(s)”) who nominate certain employees and/or representatives to access the Services on the Customers’ behalf. If you are such an individual nominated by a Customer to access the Services, the Customer may provide us with information such as your name, title, and e-mail address in order to create a credentialed log-in for our Services. You will then further agree to the Monocl End User Licence Agreement (EULA) and become Registered User (“User”). If you are a User, we also collect certain information directly from you such as your password information in order for you to access your user account.

After receiving log-in information, you may choose to use our Service for the purposes for which the license was granted. During your time using our Service as a User, we may collect some or all of the following additional data:

Under your organization’s license agreement, some individuals at your organization (or nominated by your organization) may have the right to access information for all Users at your organization for purposes of tracking usage patterns across the organization. If you have questions about who at your organization can see your data, please contact your organization’s point of contact for Monocl. If you do not know your company’s point of contact, we can if necessary, provide you with that information.

You otherwise submit the same to us. Including for example when you subscribe to Monocl’s newsletter (or updates), request a demo from Monocl or you engage in an instant message “chat” or communicate with one of our representatives you may provide us with your name and email address to enable us to contact you.

Through our support services, Webinars and/or Events. We may receive personal information from or about you such as your name and contact details such as your email address when we meet you at an Event, when you sign up for or participate in a Webinar, or when you contact us for a Support Call. If we receive a question for support, we collect and store the question as well as the answer to the question. We may also collect aggregated statistics connected to support issues.

From third parties or external sources. We may receive your contact information from commercial partners with whom we partner to present Webinars. We may also directly collect personal information about you that is publicly available from publicly available websites.

Cookies. We collect information through the Services using “cookies” and similar technologies. As a User you accept that cookies we deploy are required in order that you may use the Services in a way that the Customer and you the User expect. The cookies that we deploy will allow you to access the Services and give you feedback about how you use the services to improve the same for your benefit. For more information please visit our Cookie Policy.

Log Files. We may also collect information through our Internet log files, which record data such as user IP addresses, browser types, and other statistical data involving the use of the Services. This information may be used to analyze trends, to administer the Services, to monitor the use of the Services and to gather general demographic information. We may link this information to personal information for these and other purposes such as personalizing your experience and evaluating and improving the Services in general.

From and through our affiliates. Where your information comes to us directly from or via an affiliate.

4. Children’s Information

We are committed to protecting the privacy of children. The Services are not designed for or directed to children under the age of 13. We do not knowingly collect personal information from any person under the age of 13.

5. How do we use your information? (Purpose):

We use the information collected in the following ways and for the following purposes:

To provide the Services to you. Including giving Users access to the Monocl Platform and the Services through each user account.

To enhance, provide support and maintain our Services. We use your information to support delivery of the Services, address service errors or technical issues, to contact you for customer service and for Support Call purposes.

For analytics purposes to improve your experience to help us understand who uses the Services (and how). For internal operations such as operating and improving your user experience. We may also use the information gathered to perform statistical analysis of user behaviour or to evaluate and improve the Services.

To provide you access to particular features. such as a Webinar that you sign up for or participate in.

To communicate with you. If you identify yourself to us by sending us an e-mail with questions or comments or requests for customer service or using a chat function, we may use your personal information to respond to your questions or comments, and we may file your questions or comments for future reference.

To tell you about changes to applicable terms and policies technical or other important updates. We may also use your information to let you know about changes to this Privacy Policy or other legal terms of relevance. We may contact you through email, by notices messages and other ways through the Services (or as we see fit) to inform you about technical updates; service-related issues; important changes to, and/or availability of our services. We can also contact you in this way regarding your safety and security when using the Services and send you important security notices about potential fraud or security breaches. We may also if needed reach out to you to find out more about your user experience and to improve our products. These communications are part of the Services and you may not opt out of them.

To send you alerts. If you are a User, we use your information (including your email address) to send you alerts about updates, and new information added to the Monocl Platform which may be of benefit or interest to you. You are free to opt out of such communications using the available settings in your account and by unsubscribing from the emails themselves.

To facilitate our marketing activities. And, unless you opt out (to the extent permitted by applicable law, so that we (and where applicable, third parties acting on our behalf) can contact you about products and services that may be of interest to you: In particular, unless you opt out (to the extent permitted by applicable law), we and third parties acting on our behalf may send you electronic newsletters, contact you about particular products, services, information and news that may be of interest to you, and provide you with targeted feedback. Some of this information may be tailored to you based on your usage of the Services. If you no longer desire to receive these communications, we will provide you with the option to change your preferences in each communication we send to you. You may also inform us by email to: privacy@monocl.com.

6. How do we share your information?

We generally disclose information we gather under this Privacy Policy to the following categories of third parties and/or as otherwise set forth in this Privacy Policy and/or as specifically authorized by you.

Where required by Law. We may disclose your information (including personal information) if we believe in good faith that we are required to do so in order to comply with an applicable statute, regulation, rule or law, a subpoena, a search warrant, a court or regulatory order, lawful requests by public authorities, including to meet national security or law enforcement requirements, or other valid legal process. We may disclose personal information in special circumstances when we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be violating a contract with us, to detect fraud, for assistance with a delinquent account, or to protect the safety and/or security of our Users, the Monocl Platform, the Services or the general public.

Analytics Service Providers. When you use our Services third-party providers of analytics products for example analytics cookies deployed as part of the Services may directly collect information about your activities over time.

Service Providers. We may employ third party independent contractors, vendors and suppliers (collectively, “Service Providers”) to provide specific services and products, such as hosting and maintaining the Services, providing fraud screening, and developing applications for the Services. In the course of providing products or services to us, these third-party Service Providers may have access to information we collect about you. While we may seek to require Service Providers to follow appropriate privacy policies and will not authorize them to use your personal information except for the express purpose for which it is provided, we cannot control the actions of such third parties.

To our marketing service providers. We may share your personal information with our marketing vendors and partners to send emails on our behalf, and/or for co-branded and/or co-sponsored marketing and promotional events (such as conference events) offered in conjunction with another company or companies. If you register for or participate in such marketing and promotional events, we and the relevant partner companies may receive information collected in conjunction with the co-branded and/or co-sponsored marketing and promotional events.

Sale of Business. If applicable, we reserve the right to transfer information to a third party in connection with a sale, merger or other transfer of all or substantially all of the assets of Monocl or any of its affiliates (as defined below), or that portion of Monocl or any of its affiliates to which the Services relate or to which any other activities of Monocl that are subject to this Privacy Policy relate, or in connection with a strategic investment by a third party in Monocl, or in the event that we discontinue our business or file a petition or have filed against us a petition in bankruptcy, reorganization or similar proceeding.

Affiliates. We may disclose information (including personal information) about you to our affiliate companies as required.

Where you consent. To any other party should you consent to the disclosure.

7. How do we keep your information secure?

Monocl takes the security of your information seriously. We invest considerable resources in implementing technical and organizational measures to secure your information. We value your trust in providing us your personal information and strive to use commercially acceptable means of protecting it. Monocl takes reasonable steps to ensure that personal information is reliable for its intended use and all such information is up-to-date, accurate, and complete, and we remind you however, that no method of electronic transmission or electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

8. GDPR Privacy Policy Supplement

To the extent you are located in the European Economic Area, Switzerland or the United Kingdom (UK) this section of the Privacy Policy sets out our practices and obligations under the General Data Protection Regulation 2016/679 and the UK GDPR (collectively, the “GDPR”).

Data Controller. If processing of your personal information is subject to the GDPR, Monocl AB is the data controller (as defined in the GDPR) in respect of the processing of your personal information to which this Privacy Policy applies.

If you wish to contact the data controller to exercise your rights under the GDPR you can do so using the contact information in Section 13 Contact us below.

Sensitive personal information. We do not request personal information relating to your race, ethnicity, political opinions, religious or philosophical beliefs, trade union membership, physical or mental health, sexual orientation or criminal record (which is defined as "Sensitive Personal Information" under the GDPR.)

Legal Grounds for processing. Pursuant to the GDPR, legal bases for our processing your personal information may include (without limitation):

Your rights under the GDPR. Please see the section Your Privacy Rights below. If you want to contact the data controller to exercise any of your rights under the GDPR or need further information concerning the lawful basis on which we collect and use your personal information, please contact us using the information at Section 13 Contact us below.

9. Overseas transfers.

In certain circumstances personal information collected under this Privacy Policy may be transferred from time to time to our affiliate offices, personnel, and/or to Service Providers who may be located in various places throughout the world. In addition, the Monocl Platform may be viewed and hosted anywhere in the world, including in countries that may not have laws of general applicability regulating the use and transfer of such information or which may not provide the same degree of protection as the country in which you are resident. Without limitation of the foregoing, you hereby expressly grant consent to the Monocl to: (a) process and disclose such information in accordance with this Privacy Policy; (b) transfer such information throughout the world, including to the United States or other countries that do not ensure adequate protection for personally identifiable information (as determined by the European Commission, each, an “Inadequate Jurisdiction”) and/or countries that may not have laws of general applicability regulating the use and transfer of such information as necessary and required; and (c) disclose such information to comply with lawful requests by public authorities, including to meet national security or law enforcement requirements.

If you are located in the EEA, Switzerland, UK or if the GDPR applies to you, should it be absolutely necessary for us to transfer your personal information to an Inadequate Jurisdiction, we will rely on legally provided mechanisms designed to ensure a similar degree of protection is afforded to your personal information including (but not limited to) where applicable implementation or use of European Commission-approved Standard Contractual Clauses or other legally approved mechanisms. If you require further information on the specific mechanisms used by us or have any concerns in this regard, please get in touch using the information in Section 13 Contact us below

10. How long do we retain your information?

We endeavour to retain your personal information only for as long as necessary to fulfil the purposes for which we collected it. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of that information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. If you have any questions about our data retention processes, please contact us at privacy@monocl.com.

11. Your privacy rights

We generally use personal information as described in this Privacy Policy as authorized by you or as otherwise disclosed at the time, we request such information from you. In certain other circumstances, you “opt in” and/or give us permission to use your personal information. You may in such a case exercise your opt out rights as for example in the case of marketing communications either by following the directions provided in association with the communication or such other directions we may provide or by contacting us at privacy@monocl.com.

You may have certain rights related to your personal information, subject to local applicable data protection laws in your country. Please note your rights and choices may vary depending upon your location. Certain personal information may be exempt from such requests under applicable law.

United States: If you are a resident of any U.S. state with a Comprehensive State Privacy Law, please review our U.S. Supplemental Privacy Policy at Section 14 below to learn more information, including how to exercise available rights under state law.

EEA/EU/UK/Switzerland: If the GDPR applies to you, you may have the following specified rights:

Request access to your personal information (commonly known as ‘subject access request’). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.

Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

Request erasure of your personal information. This enables you to ask us to delete or remove your personal information where there is no good reason for us to continue processing it. You also have the right to ask us to delete or remove all of your personal information in certain circumstances.

Object to processing of your personal information where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.

Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of your personal information, for example, if you want us to establish its accuracy or the reason for processing the same.

Request the transfer of your personal information to another party.

Lodge a complaint with the relevant supervisory authority (as defined in the GDPR). See details of our lead supervisory authority in Section 13 “Contact us below. If you have any complaints about the way we process your personal information, please do contact us. Alternatively, you may lodge a complaint with the supervisory authority which is established in your country.

Please note that Monocl’s lead supervisory authority in the EU is:

The Swedish Data Protection Authority (Sw.Integritetsskyddsmyndigheten)
Box 8114
SE-104 20 Stockholm
Sweden Phone number: +46 8 657 61 00
Email: imy@imy.se

If you want to exercise your available rights under the GDPR or UK GDPR, you can do so by contacting us at privacy@monocl.com.

Similar rights as above may be afforded to you under other global applicable data protection laws and regardless of your location. If you wish to review, verify, correct or request erasure of your personal information, object to the processing of same, or request that we transfer a copy of your personal information to another party.

If you want to exercise your available rights under other privacy laws applicable to you, you can do so by contacting us at privacy@monocl.com.

Such updates, corrections, changes and deletions will have no effect on other information that we maintain, or information that we have provided to third parties in accordance with this Privacy Policy prior to such update, correction, change or deletion. To protect your privacy and security, we may take reasonable steps to verify your identity before granting you access or making corrections.

You should be aware that it may not be technologically possible to remove each and every record of the information you have provided to us from our system. The need to back up our systems to protect information from inadvertent loss means that a copy of your personal information may exist in a non-erasable form that will be difficult or impossible for us to locate. After receiving your request, we will use commercially reasonable efforts to update, correct, change, or delete, as appropriate, all personal information stored in databases we actively use and other readily searchable media as appropriate, as soon as and to the extent reasonably practicable.

To protect your privacy and security, we may take reasonable steps to verify your identity before granting you access or making corrections or otherwise processing your request.

12. Changes to this Privacy Policy

We reserve the right to modify or revise this Privacy Policy from time to time. If we make material changes that result in significant additional uses or disclosures of your personal information, we will provide you notice through the Services and/or or by other means including if necessary, communication with you, to provide you the opportunity to review the changes before they become effective. We may also make non-significant changes to this Privacy Policy that generally will not significantly affect our use of your personal information, for which such communications/notices are not generally required. We encourage you to check this page periodically for any changes; the date for the latest updated version of this Privacy Policy is specified at the top of this Privacy Policy. If any changes to this Privacy Policy are unacceptable to you, you should stop using the Services Your continued use of the Services following the posting of changes to this Privacy Policy constitutes your full acceptance of those changes.

13. Contact us

We are committed to protecting your privacy and to being transparent about our privacy practices. If you have any questions, comments or want to provide feedback about this Privacy Policy, please contact us through the Monocl privacy team:

By e-mail:
privacy@monocl.com

By postal mail or courier:
Attn: Data Protection Officer
Monocl AB
Hvitfeldtsplatsen 7,
411 20 Gothenburg
Sweden

You can also check out our Frequently Asked Questions

14. U.S. Supplemental Privacy Policy

This U.S. Supplemental Privacy Notice (“Supplement”) provides supplemental information to the general Privacy Policy above and applies to residents of U.S. states with Comprehensive State Privacy Laws, as defined below. This Supplement describes the types of Personal Information that Monocl may collect or process from U.S. residents in those states, how we may use and disclose that information, and how you may exercise any rights you may have regarding our processing of your Personal Information.

This Supplement applies to Personal Information collected or processed by Monocl from or about U.S. residents in states with comprehensive privacy laws (collectively, hereafter, “Comprehensive State Privacy Laws”), including, for example, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (“CPRA”), together referred to as (“CCPA”); the Colorado Privacy Act (“CPA”); the Connecticut Personal Data Privacy and Online Monitoring Act (“CTDPA”); the Virginia Consumer Data Protection Act (“VCDPA”); and similar state privacy and data protection laws. This Supplement only applies to residents in those states unless otherwise noted.

Personal Information subject to this Supplement does not include the information covered by certain federal and state laws, such as the Health Insurance Portability and Accountability Act of 1996 (HIPAA), clinical trials, or other exemptions as described in Comprehensive State Privacy Laws. In addition, even Personal Information covered in this Supplement may be collected and processed—including by disclosure to governmental entities or third parties—outside the requirements of this Supplement where applicable Comprehensive State Privacy Laws allow, including where such action is necessary to comply with federal, state, and local laws; to prepare for any law suit; to protect the vital interests of a consumer or other individual; to act in the public interest in areas of public health; to cooperate with government authorities; or to protect against security threats and illegal, fraudulent, or malicious activity and any subsequent investigation of that activity.

14.1 Consumer Information Collected. In the past 12 months we may have collected, processed the following categories of Personal Information in developing and providing the Monocl Services:

Category Examples Business or commercial purposes for which we collect, use, and sell consumer information
A. Identifiers. Name, e-mail address, job title, company, Support chat transcripts, city, country, continent, postal address, IP address, online identifier, company size, department, prospective use-cases, interests, telephone number, and any other information you may choose to share with us.
  • To provide the Services to you;
  • To provide a Webinar that you sign up for or participate in;
  • To help us understand how you use the Services;
  • For internal operations such as operating and improving the Services ;
  • To contact you for customer service and for Support Call purposes; and
  • To facilitate our marketing activities and to market the Services
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). Name, telephone number, postal address, and job title.
  • To provide the Services to you;
  • To provide a Webinar that you sign up for or participate in;
  • To help us understand how you use the Services
  • For internal operations such as operating and improving the Services
  • To contact you for customer service and for Support Call purposes; and
  • To facilitate our marketing activities and to market the Services
C. Internet or other similar network activity. IP address, search history, user log-in information, language, internet service provider, demographic information, browser types, browser system, unique device identifiers, email client, device types, requested URL, referring URL, traffic source, browser language, the pages you view, content you engage with, the date and time of your visit, location (city, country, continent), the duration of your visit, operating system, domain names, and statistical data involving the use of the Site.
  • To provide the Servicesto you;
  • To provide a Webinar that you sign up for or participate in;
  • To help us understand who uses the Services
  • For internal operations such as operating and
  • improving the Services
  • To contact you for customer service and for Support Call purposes; and
  • To facilitate our marketing activities and to market the Services
D. Professional or employment-related information. Name, telephone number, address, and job title.
  • To provide the Services to you;
  • To provide a Webinar that you sign up for or participate in;
  • To help us understand who uses the Services
  • For internal operations such as operating and improving the Services and the Monocl Platform;
  • To contact you for customer service and for Support Call purposes; and
  • To facilitate our marketing activities and to market the Services

14.2 Use of Consumer Information; Categories of Sources. Use of Consumer Information; Categories of Sources. We collect and use consumer information for the business or commercial purposes described in the table above and in the manner described in Sections 3 and 5 of this Privacy Policy.

14.3 Disclosures of Consumer Information for a Business or Commercial Purpose. Monocl may disclose your consumer information described in the table above to a third party for a business or commercial purpose, as described in the table above and in Section 6 of this Privacy Policy with respect to personal information. In the preceding twelve (12) months, Monocl has disclosed each of the categories of consumer information described in the table above for a business or commercial purpose to the following categories of third parties (as further described in Section 6 of this Privacy Policy):

14.3.1 Service Providers and Corporate Affiliates. In the preceding twelve (12) months, Monocl has disclosed internet or other similar network activity to the categories of third parties referenced in Section 6 of this Privacy Policy and captioned as “Service Providers”.

14.4 Sales of Consumer Information. In the preceding twelve (12) months, Monocl has not sold, nor does it or will it sell, consumer information that is subject to this Privacy Policy; however, please see Monocl’s Expert Privacy Policy for details regarding Monocl’s collection and use (including sale) of publicly available information relating to Experts, including sharing of such publicly available information relating to Experts with Monocl’s enterprise customers.

14.5 Your Privacy Rights

As a resident of a state with a Comprehensive State Privacy Law, you may have some of the following privacy rights, subject to some limitations or exemptions as required or allowed by law:

If you wish to exercise your rights, please submit a Privacy Rights Request by:

14.6 Verifiable requests

We will make reasonable efforts to promptly respond to your requests in accordance with applicable laws, but your rights under Comprehensive State Privacy Laws are not absolute. For example, any such request must provide sufficient information that allows us to verify that you are the consumer whose Personal Information we have collected. We may, after receiving your request, require additional information from you to honor your request and verify your identity. Please be aware that we may be unable to afford these rights to you under certain circumstances, such as if we are legally prevented from doing so.

14.7 Requests by authorized agents

Where required by applicable Comprehensive State Privacy Laws, we permit residents of certain states to designate an authorized agent to submit certain requests on your behalf, as outlined below.

California residents may designate an authorized agent to submit a request to opt-out of sale or share of Personal Information, to limit the use of Sensitive Personal Information, or to access, correct, or delete your Personal Information. In each case, the agent must provide us with documentation demonstrating that you have provided signed permission to the agent to exercise these rights with us on your behalf. We may deny the request if we do not receive such proof. In addition, for requests to access, correct, or delete your Personal Information, we may also require you to do either of the following: (1) verify your own identity directly with us; or (2) directly confirm with us that you have provided the authorized agent permission to submit the request on your behalf. These requirements of proof do not apply if the agent has a power of attorney pursuant to California Probate Code.

Colorado, Connecticut, Oregon, Montana, and Texas residents may designate an authorized agent to submit a request to opt-out out of our processing of personal data for the purposes of targeted advertising or sale. If you use an authorized agent to submit a request, we will not act on that request unless we are able to authenticate, with commercially reasonable effort, both your identity and the authorized agent’s authority to act on your behalf.

For all requests via authorized agents, we require that your agent provide us with your Personal Information as required on the request form and provide signed documentation demonstrating that you authorized the agent to submit a request on your behalf. The request must also include sufficient detail that allows us to properly understand, evaluate, and respond to the request. If we need more information to process your request, we will contact you via e-mail or in writing.

Authorized agents may submit requests using one of the following designated methods.

Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with your state’s law pertaining to powers of attorney.

14.8 Our products and services are directed at business professionals and are not targeted to children under the age of 18. We do not knowingly collect or maintain any personal information for children under the age of 18. If we discover we have collected any information for persons under the age of 18, we will delete their personal information.

15. Questions? Monocl is committed to protecting the privacy of Consumers’ Personal Information and being transparent about our privacy practices. To exercise any rights you might be entitled to under applicable Comprehensive State Privacy Laws, please utilize the designated mechanisms provided in the “Your Privacy Rights” section, above. For other questions, comments, or feedback on this Supplement or our Privacy Policy, please contact us through the Monocl privacy team:

By e-mail:
privacy@monocl.com

By postal mail or courier:
Attn: Data Protection Officer
Monocl AB
Hvitfeldtsplatsen 7,
411 20 Gothenburg
Sweden

By Phone:
Call us at 1-888-211-9007;