This Information on the processing of personal data sets out how the company YONCARE s.r.o., ID No.: 193 27 587, with registered office at Keltská 279, Točná, 143 00 Prague 4, registered in the commercial register maintained by the Municipal Court in Prague, section C., insert 384825, (hereinafter the “YONCARE”) uses and protects any information you give it. YONCARE undertakes to ensure the security of your personal data (hereinafter also „PD„).
In this information memorandum, we would like to provide you with clear and comprehensible information, especially about how we process your personal data and in which categories, scope and purpose, and to whom we pass it on. Here you will also find information about your rights in the field of personal data processing.
YONCARE processes personal data in accordance with the legal regulations governing the protection of personal data (in particular with Act No. 110/2019 Coll., on the processing of personal data, (hereinafter referred to as the „Act„) and Regulation of the European Parliament and of the EU Council 2016/679 of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as „GDPR„). YONCARE strives by all available and reasonable means to ensure that any processing of personal data takes place in such a way that the privacy of the persons to whom the personal data relates is sufficiently protected and secured. To this end, YONCARE has implemented and continuously improves the security of personal data by means of technical, physical and organizational measures to prevent accidental or unlawful destruction or loss, alteration, unauthorized disclosure or access and all other unlawful ways of processing personal data. Furthermore, YONCARE has introduced standards for the information technology used and other internal regulations and processes aimed at securing the personal data it processes.
CONTROLLER
The controller of your personal data is YONCARE. YONCARE is responsible for ensuring that your personal data is processed properly and in accordance with applicable legislation. You can also exercise your rights with YONCARE in relation to your personal data, which can be found below in this information memorandum.
YONCARE becomes the controller of your personal data in particular if, as a participant in a medical clinical evaluation trial (hereinafter referred to as a „patient„), you decide to take advantage of the offer to participate in the „Clinical Study Participant Comfort“ program, i.e. logistical support (travel planning, or various options for reimbursement of expenses (travel, food, accommodation) and other approved logistics services) and you will provide us with your personal data mentioned above, which we absolutely need to provide the approved services. Part of the transferred personal data is also your signature of this information memorandum, which will help us to demonstrate compliance with our information obligation under the GDPR.
PERSONAL DATA WE PROCESS
Personal data is information that can identify you as a living individual, either by itself or together with other information that we have or may have available.
We process personal data only to the extent that we meet legal requirements, protect our legitimate interests, and at the same time provide you with quality and comfortable service.
In order to provide quality services, we process your personal data provided above, i.e. name, residential address, bank account number, telephone number and e-mail address, and in order to prove that we have fulfilled our obligation to provide information, we also process your signature on this information memorandum.
WHERE WE STORE YOUR PERSONAL DATA?
Your personal data that we received from you are directed to one or more IT systems, where they will be stored on our secure servers in our IT systems in the Czech Republic. We keep the originals of the signed information memorandum with your PD in a safe in the secure premises of YONCARE.
In order to settle the payments provided, your PD will also be stored on the server/cloud of the company Block Clinical Inc. in Paris, France. From this server, your PD may be processed (especially in the form of a preview) by our partner company Block Clinical, Inc., 16787 Bernardo Center Dr., Ste 7, San Diego, CA 92128, which ensures the provision of logistical support and payment of costs to patients, namely on the basis of a contract with the sponsor of clinical evaluation trial.
WHAT IS THE USE OF THE OBTAINED PD?
Your personal data is always processed by YONCARE for a specific purpose and for the time necessary to fulfill it. After fulfilling the original purpose (for example, fulfilling a contract), we may further process some of your personal data for other purposes (for example, to fulfill our legal obligation). We generally archive your personal data for the period specified by law, the contract or on the basis of our legitimate interest (for example, for the duration of limitation periods when we may be interested in exercising or defending our legal claims).
PURPOSE OF PROCESSING YOUR PD
a) performance of the contract / provision of agreed performance and compensation,
b) fulfillment of our legal obligations – the processing of your personal data is required by law or other valid legal regulation,
c) YONCARE internal administrative purposes – Internal record keeping.
DATA PROCESSING PERIOD
We will process the provided PD for a period of 3 years from the end of the clinical evaluation study in which you are participating.
METHOD OF PROCESSING AND SAFEGUARDING THE PD
We are committed to ensuring the security of your PD. To prevent unauthorized access or disclosure, we have implemented appropriate physical, electronic and managerial procedures to protect and secure the information we collect through this information memorandum.
The processing of your personal data can be both manual and automated. Automated processing takes place in YONCARE information systems, or in the information systems of our contractual processors. Your personal data is primarily processed by selected YONCARE employees and processors who participate in their processing. Both our employees and the processors and their employees are obliged to maintain confidentiality about all facts and data (personal or otherwise) that they learn about in the course of their work. We have a written agreement with all external processors on the processing of personal data, which places particular emphasis on the security of processed personal data.
We process your personal data on the territory of the Czech Republic and possibly in other countries of the European Union, where the same level of personal data protection as in the Czech Republic is ensured. In addition to these countries, some personal data is transferred outside the European Economic Area, and this transfer is based on appropriate safeguards (specifically the Standard Contractual Clauses on the Protection of Personal Data, approved by the EU).
YOUR RIGHTS DURING THE PROCESSING OF PD
We process your personal data in a completely transparent manner. At any time during the processing of your personal data, you can use the following data subject rights guaranteed by the GDPR.
On the basis of the right of access to information, you have the right to obtain from YONCARE, as the controller, confirmation as to whether or not personal data relating to you is being processed, and if it is being processed, then you have the right to obtain access to this personal data and other information provided to you will be provided to YONCARE as administrator in accordance with the law.
Furthermore, you have the right to correction, which consists in the fact that YONCARE, as the controller, has the obligation to correct inaccurate data concerning you, as the data subject, and you also have the right to request the completion of your incomplete personal data.
Based on the right to erasure, you have the right to have YONCARE, as the controller, erase all personal data concerning you as a data subject, if there is a legal reason for doing so. YONCARE would like to point out that it may not comply with the deletion request if there is another legal reason for the processing, e.g. if the processing is necessary for the performance of the contract, is necessary for the fulfillment of legal obligations that apply to YONCARE, or is necessary for the protection of the legitimate interests of YONCARE.
Furthermore, you have the right to limit processing, which you can use, in particular if you consider that the processing of personal data is inaccurate, unlawful, if you require it for the determination, exercise or defense of legal claims or if you object to the processing.
Based on the right to be notified of correction, erasure or restriction of processing, you have the right to be informed about the recipients of information to whom YONCARE will notify the fact that the correction, deletion or restriction of processing of personal data has taken place, but only if this does not prove to be impossible or does not require unreasonable effort.
You have the right to the portability of personal data, which consists in obtaining from YONCARE personal data concerning you in a structured, commonly used and machine-readable format, and you also have the right to transfer this data to another controller. However, this is only if the processing of personal data is based on consent or the processing of personal data is necessary for the fulfillment of the contract and the processing is carried out automatically. If it is technically feasible, you have the right to have YONCARE transfer personal data directly to the administrator designated by you.
According to the right to object, you can object to the processing of your personal data.
Furthermore, you have the right not to be the subject of automated decision-making, including profiling, which has legal effects for you or significantly affects you in a similar way.
We would like to inform you that if there is a breach of the security of your personal data, on the basis of which your rights will be threatened, YONCARE will notify you that such a situation has occurred, without undue delay.
In all matters regarding your personal data, you can contact YONCARE directly.
If you believe that YONCARE is not processing your personal data in accordance with applicable legislation, you are entitled to file a complaint about such processing of personal data by YONCARE with the Office for the Protection of Personal Data, Pplk. Sochora 727/27, 170 00 Prague 7, www.uoou.cz .
Finally, please note that this document will be updated regularly.
In Prague on 1 September 2023