Privacy Policy

Privacy Notice

CDR-Life (“Company”, “we”, “us”, or “our”) is committed to protecting the privacy and security of your personal data. Our registered business address is Tödistrasse 46, 8810 Horgen, Zurich Switzerland.

This privacy notice is addressed to all customers, vendors, suppliers, contact persons, and other individuals (“Data Subjects”, “you”) of or in contact with CDR-Life. It is meant to help you understand what personal data we collect, why we collect it, and how you can exercise your data protection rights. “Personal Data” in this document is any information relating to an identified or identifiable natural person, by direct or indirect means. In some countries, this may be called “personally identifiable information”.

You might have been provided with a privacy notice or contract for a specific purpose. If that is the case, the terms of the notice or contract will control your interaction with CDR-Life, to the extent that such notice or contract conflicts with this privacy notice.

We take your data privacy and the protection of your personal data seriously and our data privacy principles provide fundamental guidance to all our Company. We will process your personal data in compliance with the FADP, GDPR, and any applicable national and/or state privacy laws to meet our obligations.

we process personal data lawfully, fairly and in a transparent manner in relation to you, the data subject.
we only collect personal data for a specific, explicit, and legitimate purpose.
we ensure that personal data we process is adequate, relevant, and limited to what is necessary in relation to the processing purpose.
we take every reasonable step to update or remove data that is inaccurate or incomplete and guarantee to do so within the time frames set by any applicable laws.
we delete personal data when we no longer need it for the purposes for which it was collected or to meet applicable legal requirements.
we keep personal data safe and protected against unauthorised or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organisational measures.

Processing of your Personal Data

We usually process your personal data for contractual purposes and to communicate with you for commercial reasons when you or we purchase any goods or services from the other. For this purpose, we only process such data which is needed to fulfil the contract itself and to comply with additional obligations we are subject to.

In addition, we might use some of your personal data, based on our legitimate interest, to develop and offer our products and services, learn more about your interests, conduct marketing activities under local market rules, and continuously improve our offerings.

We also process personal data for our scientific research based on our legitimate interest, your consent, or as permitted for such research.

Please refer to the individual data privacy notices which we provide in the context of our business communication with you, for further details about the corresponding processing of your personal data in this context. Examples of this include an Informed Consent Forms or an Employee Privacy Notice.

We collect your personal information via disclosure directly from you or in some cases someone you have nominated. This might be via our website, email, post, telephone, or face to face engagement.

Categories, Type of Personal Data Collected and Purposes

The personal data we collect from you, will be the minimum required for us to achieve the intended purpose of its collection. This may be to respond to your requests to us for information or in seeking employment with us, working on our behalf within our clinical development activities or participating in a clinical study as a trial subject.

The categories and types of personal data collected will range from names and basic contact details to more sensitive medical and health related information. All personal data collected will be treated as confidential and protected.

We will not collect or process your personal data without ensuring that we are doing so on a basis which meets applicable privacy laws. In general, we will collect and process your personal data based on the following:

you have formally given us your expressed consent.
in meeting requirements of a contract between us.
it is in our or your legitimate interests.
it is in your vital interests.
to perform a public task.
we have a legal obligation to do so.

Securing and Processing Your Personal Data

We take appropriate technical and organisational security measures to protect your personal data in compliance with applicable privacy laws, which includes: protection against accidental or unlawful destruction, loss, alteration, unauthorized access to, or disclosure of your personal data.

When CDR-Life retains a service provider, that provider will be carefully selected and required to use appropriate measures in accordance with applicable laws to protect the confidentiality and security of personal data. That provider will only be permitted to process your data on the written instruction of CDR-Life.

In the unlikely event that we lose your data, or a device on which your data resides, or it is accessed by someone unauthorised, we will inform you if the loss or unauthorised access of your data has potential to cause you harm. We may report this to the Federal Data Protection and Information Commissioner (FDPIC), who are responsible for regulating data protection legislation in Switzerland
https://www.edoeb.admin.ch/edoeb/en/home.html

Sharing of Personal Data

Your personal data will only be shared with our own staff, associates, or contractors when it is necessary for them to have access to complete their assigned responsibilities or provide their contracted services. Sharing of your data will be relative to the nature of our engagement with you.

We use the services of other organisations who are critical for the provision of our service to you and will be viewed as data processors. Their access is restricted, and they are contractually bound to strict confidentiality and the protection of your personal data.

There may also be legal obligations under which we have to share data as requested by nationally recognised regulators or authorities and when we process your personal data as part of our clinical research and development activities.

There are some organisations with whom we may share your personal data, which are in states or countries that may not have an adequate level of data protection compared to your jurisdiction. Should a data transfer involve the transmission of your personal data to countries that do not protect your privacy rights, we will ensure appropriate safeguards are in place.

How long do we keep your personal data for

Personal data will not be kept for longer than is necessary to fulfil its purpose. As an exception, we may be required to retain your personal data for longer periods as required or permitted by law, or as necessary to protect our rights and interests. In such a case, you will be informed of the intended retention period in the applicable Privacy Notice, Informed Consent Form, or Patient Information Sheet.

Your rights in relation to your personal data

You have a number of rights related to the Personal Data that we process about you (this will depend on the jurisdiction where you reside, the purpose for processing and/or the legal basis that we use). Most often, exercising your right is free of charge. We may also have to clarify your request and explain if we can comply with it or if this is restricted in your situation.

Below we have listed individual rights that may apply depending on your jurisdiction.

You may have the right to:

receive a copy of your personal data we hold about you;
correct your personal data we hold about you;
where applicable, receive a machine-readable copy of your personal data (portability);
ask us to delete your personal data or restrict how it is used;
where applicable, object to the processing of your personal data for certain purposes, such as when we use it for marketing purposes (opt-out); and
where you have provided us with your consent to use your personal data, you can withdraw your consent at any time without affecting our use of such information before your withdrawal of consent.
lodge a complaint to your designated supervisory authority.

Exercising your rights, making an enquiry or complaint

If you took part in a clinical trial as a study subject, you should ideally contact the institute where your trial took place (as we will not be able to identify you from the study data). Contact details will have been given on your Informed Consent Form or Patient Information Sheet. Failing this you can contact us directly using the details below.

Data Protection Officer: Clinical DPO
Phone Number: +44 203 411 2848
Email: CDR-LifeDPO@clinicaldpo.com