Privacy Notice for the persons in charge of the research
This Privacy Notice explains how EORTC will process the Personal Data that you provide as a data sharing Requester about yourself and about other persons involved in the research that you will conduct. This Privacy Notice explains how EORTC collects such Personal Data, for which purposes and with whom EORTC may share it.
What Personal Data will EORTC collect ?
EORTC collects and processes Personal Data about you and other persons involved in the research when completing this data sharing request form. The types of Personal Data that EORTC collects may include the following categories: full name, contact information (i.e., telephone number, e-mail address), information contained in the CV and professional affiliation.
How will EORTC use this Personal Data and with who will EORTC disclose it ?
This Personal Data will be processed by EORTC with the purpose of treating your data sharing request. Furthermore, this personal information may be made available to Disease Oriented Groups (DOGs), former Principal Investigators (PIs) and other collaborative groups involved in the studies from which data is requested, to verify that there is no conflict related to the research project proposal nor any legal or contractual constrains.
EORTC may also be obliged to disclose this Personal Data where required by applicable laws, court orders or government regulation.
What information is relevant about cross border data transfers ?
EORTC may transfer this Personal Data to recipients (EORTC executives, members, experts, partners, collaborators, funders, competent/public authorities, and subcontractors), including recipients outside EU, to countries with less stringent privacy legal framework (such as USA) when required by its activities. EORTC will, when necessary and/or applicable, put in place appropriate safeguards (for example in a form of signed agreements and/or specific technical measures) to protect your privacy and the privacy of other persons involved in the research.
What rights can be exercised concerning this Personal Data ?
Processing of this Personal Data by EORTC falls under the EU General Data Protection Regulation (GDPR) and the Belgian Personal Data Protection Act of 8 December 1992 and its subsequent amendments (Belgian Law). In this scope the following rights can be exercised: request to access your Personal Data and/or to have one copy of it free of charge; request to correct your Personal Data; request the deletion of it; request to receive a copy of the Personal Data provided to us for the purpose of transmitting it to other party(ies); and to object / restrict its processing.
How long may this Personal Data be stored ?
Personal Data will be stored at least 10 years after the data sharing is granted (in case of any claims) or longer periods if required by any applicable legislation.
How to contact EORTC ?
Please, do not hesitate to contact the EORTC Data Protection Officer, shall you or other persons involved in the research have any question in relation to your privacy by sending an e-mail to privacy@eortc.org or by regular mail to EORTC Data Protection Officer av Mounier 83/11, 1200 Brussels, Belgium.
Lodging a Complaint with a Regulator
You or other persons involved in the research have also the right to file a complaint about this Personal Data processing with the data protection authority in your country if you believe it is not handled appropriately.