To communicate with clients and sponsors regarding medical writing services, project updates, and contractual obligations. Name, contact numbers, email address, address are the personal data of client or sponsor point of contacts (POCs) would be collected directly from the clients/sponsors or third parties (e.g., partner organizations). The data is shared internally within SIRO group as approved and required for project management and externally with vendors (e.g., MS SharePoint) as necessary to fulfil contractual obligations.

To manage employee relationships, including recruitment, payroll, and HR administration. Name, contact information, email address, other details (e.g., employment history, qualifications) are the personal data to be collected. The data to be collected directly from the employees. Shared internally within SIRO for HR purposes. No external sharing with vendors unless required for HR- related services (e.g., payroll processing) as necessary for contractual obligation (to fulfil employment contracts).

To process clinical study participant data for the preparation of Common Technical Documents (CTDs) and other regulatory submissions. Participant details (e.g., identifiers), biological test data, health data are the personal data collected of are the personal data collected of Clinical study participants which is collected from third parties (e.g., clinical research organizations or sponsors) as necessary to perform the contractual obligations (to fulfil contracts with sponsors for medical writing services) and data is shared internally within SIRO for document preparation and externally with vendors (e.g., MS SharePoint) as necessary to fulfil contractual obligations.

• To Provide Services: To deliver medical writing services, including preparing clinical study documents, communicating with clients/sponsors, and managing employee data.
• To Comply with the Contracts: To meet contractual obligations with clients, sponsors, and employees.
• To Comply with Legal Obligations: To adhere to applicable laws, regulations, or legal requests (e.g., responding to subpoenas or regulatory audits).
• To Improve Our Services: To analyze anonymized data to enhance our processes and service quality.
• To Prevent Fraud: To screen orders or transactions for potential fraud or risk, particularly in clinical study data processing.

• Internally: Personal data is shared within SIRO for project management, HR administration, or document preparation, as outlined in the Records of Processing Activities (RoPA) document.
• With Vendors: We share data with service providers (e.g., MS SharePoint) to support our operations, such as data storage and project management. These vendors are bound by contractual obligations to protect your data and comply with applicable data protection laws.
• With Third Parties: We may share data with third parties (e.g., regulatory authorities, auditors) to comply with legal or regulatory requirements or to fulfil contractual obligations with clients/sponsors.
• In Corporate Transactions: If SIRO is involved in a merger, acquisition, or asset sale, your personal data may be transferred to the new owners, with prior notification to you.

• Essential Cookies: To ensure the functionality of our website and services.

• Encryption of data in transit and at rest.
• Access controls to restrict data access to authorized personnel only.
• Regular security audits and compliance with industry standards.

• Client/Sponsor Data: Retained for the duration of the contractual relationship and as required by law.
• Employee Data: Retained for the duration of employment and as required by labor laws.
• Clinical Study Participant Data: Retained as per regulatory requirements for clinical studies (e.g., ICH-GCP guidelines).

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal obligations.
• Restriction: Request restriction of processing under certain conditions.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Object: Object to processing based on legitimate interests or for direct marketing.
• Withdraw Consent: Withdraw consent where processing is based on consent.

• Standard Contractual Clauses (SCCs) for transfers to third countries.
• Adequacy decisions by the European Commission, where applicable.

• Email: dataprivacy@siroclinpharm.com
• Address: Asmaco House, Plot No. B-41, Unit No. 201, 2nd Floor, Road No. 27, Wagle Industrial Estate, Opp. I.T.I, Thane (West)- 400604, Maharashtra, India