PSI US Employee Data Privacy Notice
Latest revision of 19 November 2025
PSI CRO AG, the parent company and PSI Pharma Support America, Inc., (PSI, we) will need to collect and use information about your professional qualifications and other personal data to manage the employment relationship between you, the employee and PSI, the employer.
This Data Privacy Notice (Notice) is an overview of how we process your personal data, namely collect, use, store, and disclose your personal information.
WHICH PERSONAL INFORMATION DO WE PROCESS?
Personal Information that we may need to process about you may include:
Identification and contact: name, e-mail address, phone number, signature, position, work address, etc.
Job, position: job title, job function, department, region, supervisor, etc.
Passport and business travel: date of birth, gender, birth country, birth city, national ID type, national ID, citizenship status, citizenship country, nationality, travel details, national and international passport, visa applications, visa details.
Images: individual photographs and videos.
Appraisal: performance rating history, appraisal records, line manager and peer assessment, etc.
Payroll: bank account number, monthly salary amount, tax deductions, etc.
Expense and compensation: company credit card expenditures, company paid expenses, benefits, housing allowances, travel allowances, staff travel details, car or commuting allowances, expenses refund and advances, etc.
Training: professional improvement courses, exam certifications, training records, etc.
Staff-onboarding and off-boarding: opinions expressed at exit interviews, via surveys, questionnaires, etc.
User data: IP address, device ID, password, user login name and IDs, etc.
WHAT ARE THE PURPOSES AND LEGAL BASES FOR PROCESSING YOUR PERSONAL INFORMATION?
PSI will use your personal information for the management, development, maintenance, and control of the employment relationship between you as the employee and PSI. Examples of such processing purposes are managing payroll, ensuring health and safety in the workplace, performing tax accountability, supporting professional career of the employee via conducting appraisals, trainings, promotions, incentives. In some countries, provision of social benefits, such as health and travel insurance, is part of the employment contract.
PSI may be required to collect information about your working hours, state-issued identification and limited family related information for providing you with applicable types of mandatory insurances, implementing baseline level of cybersecurity via monitoring your use of PSI’s information technology resources, etc.
The following activities are essential to PSI’s business operations. Therefore, PSI has a legitimate interest in processing your relevant personal data to perform these activities:
- Assigning you a role and tasks in a project/study conducted by PSI for a clinical trial sponsor and managing your engagement into this and other projects/studies in accordance with the study contract.
- Arranging your business-related travelling, enrolling you into corporate and project-related trainings.
- Identifying you in the corporate computer network and systems, creating user accounts to enable your access the corporate resources that you need for work.
- Monitoring access to the office premises via electronic access system and installing video cameras to safeguard you and the company’s assets.
- Monitoring activity of the users accessing the corporate network to ensure appropriate cybersecurity.
- Analyzing employee data to improve internal business processes and for benchmarking, including by deriving insights that support data informed decision making. Examples of such activities, include measuring and comparing performance and satisfaction via onboarding and exit staff interviews, interim staff surveys, polls regarding quality of working conditions, etc.
PSI may be offering you to join a social benefit or similar program for employees or may decide to share photographs picturing you and taken at a team building or other work-related event via PSI public media accounts. For such specific information uses, we will reach out for your consent.
WHO WILL HAVE ACCESS TO YOUR PERSONAL INFORMATION?
PSI personnel: As PSI is a global company with worldwide presence, we need to share information, including personal information of our employees, within PSI, to manage our business operations and comply with the applicable laws. This means that all PSI staff will have access to your PRIMA profile, as well as other personal information as needed to enable them to carry out their job responsibilities.
Third party service providers: When we need to process your information to fulfill our employer responsibilities, for instance manage payroll, provide trainings, ensure health and safety in the workplace, manage your request for the use of social benefits or advantages; we may need to share some of your personal information with the companies that PSI engages to assist with the provision of such services.
Sponsors, study vendors: When your job responsibilities require you to work as a member of a project team for different clinical studies, PSI will share your contact information, information about your professional qualifications and other relevant personal information with the study sponsors and vendors involved in the study.
Authorities: When we collect information for some of the purposes, we may do so in response to a statutory requirement. In such cases, to comply with the law, we will have to share your information with the authorities. In addition, regulatory authorities will have access to your personal information when this information makes part of the study file. There may be other cases when disclosure of your information will be required. We will follow the applicable laws in this regard.
HOW DO WE PROTECT YOUR DATA?
Whenever we process data, including disclosing your data to business partners who deliver services or/and collaborate with PSI, we implement technical and organizational measures to safeguard your data. Such efforts include technical and organizational measures, as well as certain contractual protections. Among such safeguards are de-identification and aggregation of data in case the collaborator does need to know your identity, access control, data minimization, etc. You can ask PSI to tell you more about these safeguards in application to a particular process or/and activity.
FOR HOW LONG DO WE RETAIN YOUR INFORMATION?
PSI will retain your personal information for as long as you are PSI’s employee. After the termination of employment relationship, we may keep your information during the legally established timelines, including as necessary to comply with the legal obligations to which PSI is subject.
When you are engaged in a study as a project team member, some of your personal information contained in your CV(s), study-related communication, etc., shall be retained as part of the study file in accordance with the laws applicable to clinical trials.
HOW TO EXERCISE YOUR RIGHTS REGARDING YOUR PERSONAL INFORMATION?
You have the right to request access to, rectification or erasure of your personal information, restriction of processing, as well as object to processing in some cases. You can request a digital copy of the personal information in a technically usable form. You can also withdraw your consent to processing for some purposes, if you initially consented to have your information processed, however please note that in such case the use of your information before you changed your mind, remains lawful.
Please note that the lists of processed personal information and processing activities laid down in this Notice are not complete. You may obtain more information about how we use your personal information, including the complete list of purposes for which your information is processed, categories of personal data processed by PSI entity that employed you, etc., as well as file any other enquiry via sending you request at privacy@psi-cro.com.
If you are a resident of California, please read PSI’s California-Specific Description of Privacy Rights.
HOW WILL YOU KNOW THAT PSI REVISED THIS PRIVACY NOTICE?
PSI reserves the right to modify this Notice as needed to reflect changes in laws, PSI practices and procedures, or requirements imposed by applicable regulation. If changes occur, PSI will notify you of the changes to this Notice that can have an impact on your obligations and rights.
