Data Protection Notice
OActive is a European funded project which involves seven EU countries and 13 different partners. The aim of the project is to develop a new computer model which will have the ability to predict the progression of Osteoarthritis and provide personalized treatment for each patient.
|
Your data is controlled by: |
Data Protection Supervisory Authority |
|
UNIC – EDEX – EDUCATIONAL EXCELLENCE CORPORATION LIMITED (University of Nicosia), established in Makedonitisas Avenue 46, Nicosia 1700, Cyprus |
Office of the Commissioner for Personal data Protection Iasonos 1, 1082 Nicosia, Cyprus |
|
ANIMUS – ANIMUS KENTRO APOTHERAPEIAS KAI APOKATASTASIS ANONYMI ETAIRIA (ANIMUS), established In 8 KM LARISSA – TRIKALA, LARISSA 41500, Greece |
Hellenic Data protection Authority Kifissias 1-3, 115 23 Athens, Greece Call Centre: +30-210 6475600 Fax: +30-210 6475628 Email: [email protected] |
|
HULAFE – FUNDACION PARA LA INVESTIGACION DEL HOSPITAL UNIVERSITARIO LA FE DE LA COMUNIDAD VALENCIANA, established in Av Fernando Abril Martorell 106, Valencia 46026, Spain |
Spanish Data Protection Agency Agencia Española de Protección de Datos C/ Jorge Juan 6 28001-Madrid |
|
RIMED – FONDAZIONE RI.MED established in Via Bandiera 11, Palermo 90133, Italy |
Italian Data Protection Authority (Garante per la protezione dei dati personali) Piazza Venezia 11 – 00187 Roma Phone: +39-06-6967 71 Fax: +39-06-6967 73785 Certified email: [email protected] Email: [email protected]
|
|
KU Leuven – KATHOLIEKE UNIVERSITEIT LEUVEN (KU Leuven), for the purposes of this Agreement represented by KU Leuven Research & Development, established in Waaistraat 6, Leuven 3000, Belgium |
Autorité de protection des données / Gegevensbeschermingsautoriteit Rue de la presse 35, 1000 Bruxelles Tel : +32 (0)2 274 48 00 Fax : +32 (0)2 274 48 35 Email : [email protected] |
Your personal data is processed during the OActive project with the aim to develop a new computer model that would have the ability to predict the progression of Osteoarthritis and provide personalized treatment for each patient. In order to achieve this objective, the Consortium collects data form individual patients, to study various markers of the disease at different phases. Based on these observations, models of form of OA will be built.
The controllers identified above (hereafter we, us, our) process your personal data on the basis of their legitimate interest, to perform scientific research in the field of health. Where data was collected in the context of clinical study, you have furthermore consented to the participation to the study. In those cases, your consent is a general requirement under applicable legislation, but data processing is organised on the basis of legitimate interest, and/or on compatible further processing of personal data for scientific research purposes.
Your personal data is shared by the data controllers with in the OActive consortium with technical partners helping develop the OActive system, one which is located in the United Kingdom, and is contractually required to comply with European data protection law through standard contractual clauses. Moreover, your data may be shared with the European Commission if necessary (i.e. where EU law explicitly requires this), as the EU finances the OActive Action though the Horizon 2020 programme. Finally, we share your data a USA based services provider who manages the data base, which is contractually required to comply with European data protection law through standard contractual clauses
The data is collected and processed for scientific research purposes. The data is stored for the duration of the OActive project; afterward it will be stored for a duration of up to 10 years.
What are your rights?
|
Rights
Legal grounds |
Right to withdraw** |
Right of access* |
Right to rectification*
|
Right to erasure |
Right to restriction of processing* |
Right to data portability |
Right to object* |
|
Task carried out in the public interest |
|
Yes |
Yes |
Yes |
Yes |
|
Yes |
|
Legitimate interests |
|
Yes |
Yes |
Yes |
Yes |
|
Yes |
* these rights may be derogated to if their exercise is likely to render impossible or seriously impair the achievement of the scientific research purpose. These derogations are possible in Belgium and Spain.
** Please not that your decision to withdraw from the study does not impact the lawfulness of the processing of your personal data. If you do not wish for your data to be processed any longer, you have to exercise your right to object.
Right of access:
You have the right to obtain from the data controllers confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information:
- the reason why we process your personal data;
- the categories of personal data concerned;
- the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations and the safeguards applied by the data controllers;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- the existence of the right to request from us rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- where the personal data are not collected from you, any available information as to their source;
Please note that your personal data are processed for scientific research purposes, therefore, in compliance with 89.2 of the GDPR, the right to erasure does not apply in so far as it is likely to render impossible or seriously impair the achievement of the objectives of that processing.
Right to rectification:
You have the right to obtain from the data controllers without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Please note that your personal data are processed for scientific research purposes, therefore, in compliance with 89.2 of the GDPR, the right to erasure does not apply in so far as it is likely to render impossible or seriously impair the achievement of the objectives of that processing.
Right to erasure:
You have the right to obtain from the data controllers the erasure of personal data concerning you without undue delay and we have the obligation to erase personal data without undue delay where the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
Please note that your personal data are processed for scientific research purposes, therefore, in compliance with article 17.3 (d) of the GDPR, the right to erasure does not apply in so far as it is likely to render impossible or seriously impair the achievement of the objectives of that processing.
Right to restriction of processing:
You have the right to obtain from the data controllers restriction of processing where one of the following applies:
- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful, and you requested the erasure of the personal data and requests the restriction of their use instead;
- we no longer need the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
- you have objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.
In such situation, data may only be processed on the basis of your consent, unless data is processed in order to comply with a legal requirement (e.g. archiving and retention obligations imposed by law).
Please note that your personal data are processed for scientific research purposes, therefore, in compliance with 89.2 of the GDPR, the right to erasure does not apply in so far as it is likely to render impossible or seriously impair the achievement of the objectives of that processing.
Right to object:
You have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) (Task carried out in the public interest) or (f) (our Legitimate interests ) of Article 6 (1), including profiling based on those provisions. We shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Please note that your personal data are processed for scientific research purposes, therefore, in compliance with 89.2 of the GDPR, the right to erasure does not apply in so far as it is likely to render impossible or seriously impair the achievement of the objectives of that processing.
Should you have any additional questions or complaint you may reach the relevant data controllers (including their data protection officers) at this single point of contact: [email protected]
If you feel that your requests are not appropriately addressed by the data controllers, you have the right to lodge a complaint with a data protection supervisory authority as identified above.