PRIVACY NOTICE
This clinical trial recruitment website (“Website”) is operated by James Lind Care with a registered office address at Langebrogade 6E, Copenhagen K, Region Hovedstaden, 1411, DK (“James Lind Care”, “JLC”) in relation to the Miranda Trial (“Trial”) sponsored by Medimmune Limited (part of the AstraZeneca group) with a registered office address at 1 Francis Crick Avenue, Cambridge Biomedical Campus, Cambridge, CB2 0AA, GB (“AstraZeneca” ”AZ”).
In this Privacy Notice, we refer to James Lind Care and AstraZeneca collectively as “We”, Us” or “Our”, as applicable and the website and the related call centres together as the “Services”.
On the Website We may assess (“Assessment”) whether you may be eligible to be referred for further screening for potential participation in our Miranda Trial (“Trial”).
About this Privacy Notice
This Privacy Notice describes the relationship between James Lind Care and AstraZeneca and our data protection responsibilities for personal data that you provide in respect of your participation in the Assessment. It also describes what types of personal data is shared about you, how it is used by us, how we share the information with others, how you can manage the information we hold and how you can contact us.
Regarding data protection JLC and AZ are “joint controllers” for certain aspects of the processing of your personal data as described in this Privacy Notice. This means that both businesses work together to decide why and how your personal information is processed. It also means that we are jointly responsible to you under the law for that processing.
What Personal Data is collected?
Some of the Personal Data detailed below will be collected in connection with the Assessment and other Personal Data will be collected by JLC as operator of the Services.
AZ and JLC will process the following Personal Data collected through the Services:
- Health related data: to check whether you are eligible for Trial participation:
- Type of Participant and Disease Characteristics
- Sex and Contraceptive/Barrier Requirements
- Age
JLC will collect the following types of Personal Data as operator of Services:
- Contact information. Your first name, last name, telephone number and, if you choose to provide them, your email address and mobile number.
- Demographic data. Your year of birth.
- Nationality data. If you choose to provide it, information about your nationality.
- Health information. Details you provide about your health and any conditions you may have.
- Zip code/postal code, city, state, province, or region. Information you provide so We can find your nearest Trial sites.
JLC will collect Personal Data contained in any feedback you provide to Us through the Website or call center personnel. AZ does not have access to this Personal Data.
JLC processes certain Personal Data to create statistical reports when you access the Website. This Personal Data which is collected automatically by JLC and includes:
- Identifiers and device information. When you visit the Website, the web servers automatically log your Internet Protocol (IP) address and information about your device, including device identifiers (such as MAC address), operating system, browser and other software configuration. This may vary by country, and where relevant, the Website will provide more information about the specific identifiers and device information logged by the Website. In countries that require cookies notices or consents, the Website will present you with the relevant notices and choices and give you a way to change your initial choices as per art. 6(1)(a) GDPR. We receive reports about how users access the Website (so we can plan improvements to the content, user interface and for security). We may receive the underlying technical information.
- Geolocation data. Depending on your device settings, the Website may collect your geolocation data to display regional content that is relevant to you. This is based on consent as per art. 6(1)(a) GDPR.
Usage data. We automatically log your activity on the Website, including the URL of the website from which you came to our sites (which may be relevant to our assessment of the effectiveness of our advertising campaigns), pages you viewed, how long you spent on a page, access times, and other details about your use of and actions on the Website. We receive reports with information about how users use the Website (so we can plan improvements, new features, and content). We also may receive the underlying technical information.
For further information about how JLC processes your personal data, and your data protection rights please click here: https://britishresearchpanel.co.uk/data-privacy-policy/.
Purpose of the Processing of your Personal Data
The main purpose of the Services is to inform you about Our clinical trial and to give you the opportunity to complete questionnaires to determine if you may be eligible to participate in the Miranda Clinical trial.
The legal basis for our processing of your Personal Data
AstraZeneca relies on your explicit consent as per art. 9(2)(a) GDPR to process the Personal Data (including your health information) that you submit through the Services to determine your eligibility to participate in a Trial that We are currently recruiting for (including through any automated decision making).
AstraZeneca relies on your explicit consent as per art. 9(2)(a) GDPR to disclose your Personal Data (including your health information that you provide to Us here) to third-party healthcare professionals who are conducting the Trial that you are eligible for, to relevant Trial sites and their service providers, to the service provider that hosts the Website and to AstraZeneca’s other service providers in connection with recruitment for the Trial described on this Website. AstraZeneca will not directly receive your Personal Data in their systems as all processing activities will be managed by the James Lind Care unless there is a clear legal reason or need to do so.
JLC relies on its legitimate interest in improving the Services (and planning similar future services) to use certain non-sensitive Personal Data that you provide when giving your feedback on our services.
Please note that where you have given your consent to any use of your Personal Data, you can withdraw or revoke this consent at any time. However, if you withdraw your consent for your Personal Data to be used by Us for the purposes of the Trial or Assessment, you will effectively be cancelling your registration on the Website. Please note that if you have already been referred to a study site for a Trial and you no longer wish for your Personal Data to be used by that study site for the Trial, you may need to contact the specific study site directly to exercise your rights if we have already deleted your Personal Data. To withdraw or revoke your consent for your Personal Data to be used for the purposes described in this Privacy Notice, visit www.astrazenecapersonaldataretention.com to exercise your data protection rights. The processing of your Personal Data prior to receipt of such withdrawal or revocation will remain lawful.
Some of the Personal Data described above is required so We can determine, via the Services, whether you are eligible to participate in any Trial (or to proceed for further screening). However, choosing not to register, or withdrawing or revoking your consent after registration, will not result in any detriment to you. You always have a choice concerning whether or not you provide Personal Data as part of the registration process and you are under no obligation to register.
Security, Data Transfers and Data Retention
All the Personal Data that We receive about you through the Services will be stored on James Lind Care’s secure servers in Frankfurt, Germany at the Amazon Data Center. Service providers who host the Website or otherwise help Us provide the Services will have access to the Personal Data collected through the Website and call centres but will only use it to provide the Services under a written agreement with us (which is consistent with this Privacy Notice) and not for their own purposes. As stated above, if you consent, We will disclose your Personal Data to third-party healthcare professionals who are conducting the Trial that you are eligible for, to relevant Trial sites and their service providers, and to AstraZeneca’s other service providers in connection with recruitment for the Trial described on this Website. We may also transfer your personal data to other AstraZeneca group companies, to third parties for technical support purposes, or in accordance with any legal obligations. For more details on how We share your Personal Data, please click here.
[Text behind “click here” link: Your data may also be shared with certain third parties such as: IT software providers involved in the development and maintenance of the Services; auditors and consultants to verify our compliance with external and internal requirements; statutory bodies, law enforcement agencies and litigants, as per a legal reporting requirement or claim; and a successor or business partner to an AstraZeneca group company in the event that it sells, divests or sets up a collaboration/joint venture for all or part of its business.]
Such AstraZeneca entities and third parties may be based anywhere in the world, which could include countries that may not offer the same legal protections for personal data as your country of residence. For more information about how We safeguard the international transfer of your Personal Data, please click here.
[Text behind “click here” link: Irrespective of which country your Personal Data is transferred to, We would only share your Personal Data under a strict ‘need to know’ basis and under an adequacy determination made by the authorities in your country of residence or appropriate contractual restrictions (such as AstraZeneca’s Binding Corporate Rules and EU Standard Contract Clauses). You may be entitled to receive a copy of AstraZeneca’s Binding Corporate Rules and/or the AstraZeneca’s EU Standard Contract Clauses upon request by contacting AstraZeneca on privacy@astrazeneca.com.]
Your Personal Data will be stored for 3 years effective from the date of information submitted to James Lind Care.
Exercising your Data Protection Rights
You may contact AstraZeneca at www.astrazenecapersonaldataretention.com at any time to request access to the Personal Data we hold about you, to correct any mistakes or to request deletion of the same or withdraw your consent to certain types of processing and object to certain types of processing of your personal data. If it is the data held by JLC you may contact JLC directly wwww.jameslindcare.com/contact. For more information about how AstraZeneca responds to such requests, please click here.
[Text behind “click here” link: If such a request places AstraZeneca or its affiliates in breach of its obligations under applicable laws, regulations, or codes of practice, then AstraZeneca may not be able to comply with your request, but you may still be able to request that we block the use of your personal information for further processing. You may also have a right to data portability to another Data Controller under certain circumstances.]
AstraZeneca has assigned a data protection officer responsible for overseeing AstraZeneca’s compliance with EU and UK data protection laws, whom you may contact at privacy@astrazeneca.com or by mail at the Global Data Protection Officer, 1 Francis Crick Avenue Cambridge Biomedical Campus CB2 0AA Cambridge, UK, in case of any questions or concerns regarding the processing of your Personal Data. If AstraZeneca’s processing of your Personal Data is covered by EU or UK law, you can also lodge a complaint with the corresponding data protection supervisory authority in your country of residence. You can find the relevant EU supervisory authority name and contact details under https://edpb.europa.eu/about-edpb/board/members_en and the UK data protection supervisory authority’s contact details under https://ico.org.uk/global/contact-us/.
If you use the Services on behalf of another person
It may be appropriate in some circumstances for you to use the Services on behalf of someone else when you have their permission. If you use the Services on behalf of another person, you must ensure that you are lawfully authorised to provide their Personal Data to Us and that the information that you provide is correct to the best of your knowledge.
Children under the age of 18
The Website is not intended for the use of children under the age of 18 and if you are under 18 you are not eligible to participate in Our clinical trial.
Changes to this Privacy Notice
We may update this Privacy Notice from time to time. When required, We will seek your consent in accordance with applicable laws, and if you do not consent to the proposed change, We will continue to treat your Personal Data in accordance with the last version of this Privacy Notice that you accepted.
Last updated September 2024
______________________
Wording for consent pop-up:
[Click to agree button - mandatory] I agree to the processing of my Personal Data for the purposes set forth in this Privacy Notice relating to evaluating my potential eligibility for Trial described on this Website and the transfer of my Personal Data to relevant clinical trial sites and service providers to contact me and further evaluate my eligibility for the Trial.