Common use of Study Participants Personal Data Clause in Contracts

Study Participants Personal Data. Role and qualification of the Parties SPONSOR is subject to the rights and obligations as “data controller” set forth under the GDPR in relation to the processing of personal data for the purpose of conducting the Study in accordance with the Protocol. In that respect SPONSOR shall be considered as data controller of all Personal Data processed for Study purposes. INSTITUTION is subject to the rights and obligations as “data processor” set forth under the GDPR in relation to the processing of personal data for the purpose of conducting the Study in accordance with the Protocol. [Pursuant to Article 28.3 GDPR SPONSOR and INSTITUTION have concluded a data processing agreement attached in SCHEDULE F.] INSTITUTION is also subject to the rights and obligations as a separate “data controller” set forth under the GDPR in relation to the processing of personal data of its patients for purposes other than conducting the Study. In particular, INSTITUTION remains data controller of the data contained in its patients’ medical records for the purposes of providing medical care to its patients and for academic research purposes.

Study Participants Personal Data. Role and qualification of the Parties SPONSOR is subject to the rights and obligations as “data controller” set forth under the GDPR in relation to the processing of personal data for the purpose of conducting the Study in accordance with the Protocol. In that respect SPONSOR shall be considered as data controller of all Personal Data processed for Study purposes. INSTITUTION is subject to the rights and obligations as “data processor” set forth under the GDPR in relation to the processing of personal data for the purpose of conducting the Study in accordance with the Protocol. [Pursuant to Article 28.3 GDPR SPONSOR and INSTITUTION have concluded a data processing agreement attached in SCHEDULE F.] F. INSTITUTION is also subject to the rights and obligations as a separate “data controller” set forth under the GDPR in relation to the processing of personal data of its patients for purposes other than conducting the Study. In particular, INSTITUTION remains data controller of the data contained in its patients’ medical records for the purposes of providing medical care to its patients and for academic research purposes.