Data Privacy Policy

General Principles

Clinical Study Center S.c. is committed to protecting the privacy of individuals who entrust them with their personal data.

They process personal data in accordance with Polish and EU law, specifically mentioning the General Data Protection Regulation (GDPR).

Data Protection Rights

Data Access and Modification: Patients and service providers (doctors, nurses, coordinators) have the right to access and modify their data.

Data Withdrawal: Individuals can withdraw their consent to data processing by emailing contact@clinicalsc.pl, which will result in data deletion.

Data Transfer: Personal data will not be transferred to other entities unless required by law.

Data Controller

The data controller is Clinical Study Center S.c.

Contact them at contact@clinicalsc.pl for any data protection inquiries.

Data Processing Principles

The data controller will implement appropriate technical and organizational measures to protect personal data.

Data is processed lawfully, fairly, and transparently.

Data is collected for specific, explicit, and legitimate purposes.

Data is adequate, relevant, and limited to what is necessary.

Data is accurate and kept up to date.

Data is kept only as long as necessary.

Data is processed securely.

Profiling is not used.

Data Collection and Purpose

Personal data is collected and processed for specific, lawful purposes, including:

Contacting patients regarding their participation in clinical studies (based on consent or for recruitment purposes).

Managing relationships with service providers.

Handling complaints and requests.

Responding to inquiries.

Fulfilling legal obligations (e.g., accounting, financial reporting).

Key Points:

This privacy policy emphasizes compliance with data protection laws, particularly the GDPR.

It outlines the rights of individuals regarding their personal data, including access, modification, and withdrawal of consent.

It details the purposes for which data is collected and processed, as well as the data controller's responsibilities in ensuring data security and confidentiality.

The policy also clarifies that personal data will not be transferred to other entities without legal basis and that profiling is not used.