Information on the processing of personal data
CTC Clinical Trial Consultants AB, corporate ID no: 556849-1848, with address Dag Hammarskjölds väg 10B, 752 37 Uppsala (hereinafter referred to as ”CTC”, ”we” or ”us”) is the data controller for the processing of personal data we collect from you, as further described in this information on personal data processing. CTC processes all personal data in accordance with applicable legislation and aims to be transparent about how your personal data is handled. This information describes how and for what purposes we collect, use, and protect your personal data. We use the information you provide, along with your consent, to maintain a long-term relationship with you once you have registered to be part of our database of research participants, and to process your personal data therein for the purposes further described in this information.
If you wish to know more about CTC, please visit one of our websites: www.ctc-ab.se or www.forskningsperson.se. CTC's privacy policy can be found at www.ctc-ab.se.
You are welcome to contact our Data Protection Officer via email dpo@ctc-ab.se if you have any questions, concerns, or complaints regarding the handling of your personal data.
How and for what purposes do we collect and use your information?
CTC's website www.forskningsperson.se is used to inform potential research participants about our ongoing clinical studies and how to participate in these studies as a research participant. The information collected about you via our registration forms on the website and during subsequent contact with you for recruitment to a specific study is transferred, stored, and managed in our systems and database. When you register on our website, information about you is saved in our database of research participants, both when you register generally on our website and for a specific study. Even if you do not participate in any study or have already participated in a study, information about you is saved in our general database of research participants for future studies. We continuously use the stored information to find research participants for our studies and to inform you via email, SMS, or phone about upcoming studies at CTC. We also use your information to contact you via email, SMS, or phone and to manage communication with you, as well as to schedule your visits with us when you participate in a study. If you participate in a study, we may at a later stage process personal data for the purpose of paying out any compensation to you for your participation in the study.
If you participate in a study with us, further information about you will be processed within the scope of the study's execution. You will receive separate information on how your data will otherwise be processed within the framework of a study, i.e., in the form of both medical record data and study data, when you are asked for consent to participate in the study. Depending on the study, a party other than CTC may be the data controller for parts of the personal data processing that occurs within the framework of a study you participate in. This is because, in such cases, CTC is considered to collect and process your personal data in the study on behalf of another party. You will be informed of this, along with all other information regarding the study, when you are asked for consent to participate in the study.
What information do we collect about you?
When you register through our application forms on forskningsperson.se, and when we subsequently contact you for recruitment to a specific study, we collect the following personal data about you:
Contact information (such as name, phone number, email address).
Certain health information (such as height/weight, any medication treatments, and illnesses).
We will also collect information about whether you have participated in studies before. If you participate in a study, we may later collect your bank details to pay any compensation for your participation in the study.
When you contact us for other reasons, for example, to ask questions before registering for our database or a specific study, we collect the following personal data about you:
Contact information (such as name, phone number, email address)
With whom do we share your information?
Your personal data will be accessible to relevant personnel within CTC and any individuals outside CTC who work for us. We may also share your personal data with our suppliers according to our instructions and for our defined purposes, such as suppliers for IT/telephony services and for project systems used to administer the database and schedule study visits.
Where do we store information about you?
Personal data we collect from you is stored within the European Union/European Economic Area (EU/EEA) but may also be transferred to and processed in a country outside the EU/EEA. These countries may have a lower level of data protection than within the EU/EEA. In cases where personal data is processed outside the EU/EEA, we ensure that our suppliers meet the same level of security and protection as applied within the EU/EEA by implementing appropriate safeguards to protect your personal data in accordance with applicable laws. This can be done, for example, by using standard contractual clauses developed by the EU. You can obtain a copy of the safeguards implemented by contacting us (see contact details below).
How long will we store your information?
After you have given your consent, we will store the personal data we need in our database to fulfill the purposes outlined in this information, as long as you do not inform us otherwise. This means that if you have previously applied to participate, or have participated, in a study with us, and have therefore already registered in our database, we will store your personal data indefinitely. You can choose to withdraw your consent at any time and thus be removed from our database. If you request it, we will securely delete your personal data or anonymize your data so that it no longer constitutes personal data. If you no longer wish to be registered in our database and want to withdraw your consent for personal data processing, please contact us or send your request here. In cases where we have paid you compensation after participating in studies with us, your personal data will be stored in accordance with the Accounting Act for a period of 7 years. If you participate in a study, you will receive separate information on how your data will be processed and preserved within the scope of the study when you receive information and are asked for consent to participate in the study. It is important to know that if you have already participated in a study, CTC may have the right to continue processing your personal data within the framework of that study to, for example, meet the requirements set by applicable laws.
How do we protect your personal data?
We implement a number of technical and organizational measures to ensure a security level appropriate for protecting your personal data that we process in accordance with the requirements of GDPR, and we also impose the same requirements on our sub-processors. All our employees who have access to, or are involved in, the processing of your personal data are legally obliged to respect its confidentiality and are also bound by agreements to do so. At CTC, we also have a Data Protection Officer who has overall responsibility for personal data management. Contact details for our Data Protection Officer are provided at the bottom of this information.
What legal basis do we rely on for processing your personal data?
For personal data processing to be permissible, there must always be a basis in the General Data Protection Regulation, known as a legal basis. The legal basis for processing your data as described in this information is consent. You provide this consent when you register on our website. When we process your personal data for the purpose of paying compensation for your participation in a study, the legal bases are the fulfillment of a contract and a legal obligation. When you contact us for other reasons, for example, to learn more about our studies, we process your personal data based on our legitimate interest in managing our contact with you, including informing, marketing, and answering questions about our operations. Please note that the legal basis for personal data processing within the actual conduct of a study is provided in the information you receive when you are asked for consent to participate in the study.
What are your rights?
Right to information. You have the right to access your personal data and to know how it is used after collection. Upon request, once per year, we can provide a free copy of the personal data we store.
Right to restriction. In certain cases, for example, if you have objected to the processing, you have the option to request a restriction on the processing of your personal data. In practice, restricting your data will mean that we anonymize or delete your personal data in our database (see more about deletion below).
Right to rectification. We want to ensure that the personal data we hold about you is accurate and up-to-date. If any information is incorrect, please contact us. You can request to have your personal data corrected at any time.
Right to erasure and withdrawal of consent. You can withdraw your consent and request that we delete your personal data. If you no longer wish to be registered in our database and want to withdraw your consent, please contact us or send your request here. We will then securely delete your personal data or anonymize your data so that it no longer constitutes personal data. It is important to know that if you have already participated in a study, CTC may have the right to continue processing your personal data to, for example, meet the requirements set by applicable laws. If you participate in a study, you will receive separate information on how your data will be processed and preserved within the scope of the study when you receive information and are asked for consent to participate in the study.
Data portability. We do not apply data portability at CTC due to the potential for sensitive personal data and because data portability has no practical application in our operations.
Complaints. You can file a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe that we are processing your personal data in violation of the General Data Protection Regulation.
If you wish to exercise any of your rights described above, please contact us (see our details below). If you wish to file a complaint with the Swedish Authority for Privacy Protection, you will need to contact them directly.
How to contact us?
You can always contact us if you would like more information on how we handle or store your personal data, if you have any complaints about how we collect, store, or use it, or if you wish to withdraw your consent and no longer have your personal data included in our research participant database. Our contact details are listed below.
CTC's Data Protection Officer: dpo@ctc-ab.se
General email to CTC: info@ctc-ab.se
Phone: 018-30 33 00
Cookies
A cookie is a text file that a website asks to save on a visitor's computer or mobile device (e.g., tablet or mobile phone).
Cookies are used to provide website visitors with better service and to allow them access to various functions on the website. For more information on how CTC uses cookies, please refer to our separate cookie policy.
Links to other websites
Our website contains links to websites operated by other organizations, each with its own privacy policy. Please make sure to carefully read their terms and privacy policies before submitting personal data on another organization's website, as we do not assume any responsibility for these external sites.
Social Media
Our websites include features connected to various social media platforms, each with its own privacy policy. Please make sure to carefully read their terms and privacy policies before submitting personal data, as we do not assume any responsibility for these features.
Changes to the Information
We reserve the right to make changes to this information at any time and therefore encourage you to check our website for updates. In the event of significant changes, we will clearly announce this on our website and, if we deem it appropriate, inform you of the changes via an electronic message.
This information was last updated: March 2024.