Version 3 - published on September 19, 2023
At Greenlight Guru (”Greenlight Guru Clinical”, ”we”, ”us” or ”our”) confidentiality and data protection is a high priority. This privacy policy sets out the guidelines for our processing of your personal data in the Greenlight Guru Clinical Product and provides you with the information you have the right to receive according to applicable data protection law. You must read the privacy policy before submitting your personal data to Greenlight Guru.
Data Controller
The data controller for your personal data is:
SMART-TRIAL ApS (d.b.a. Greenlight Guru)
K. Christensens Vej 2L
9200 Aalborg SV
CVR no. 35 13 97 10
1. If you visit our applications
This section sets out the policy of Greenlight Guru’s processing of personal data regarding users of Greenlight Guru Clinical’s applications.
1.1 If you create a user account
Types of personal data
When you create a user account on our websites, Greenlight Guru collects, processes and stores the following personal data about you:
Purposes of the processing
Your personal data may be processed for the following purposes:
Legal basis
Greenlight Guru will mainly process your personal data based on one or more of the following legal bases:
Legitimate interests: The processing of your personal data will be based on our legitimate interest in, for instance, conducting statistics, analysis, as well as improving and developing our products and services (Article 6 (1) (f) of the General Data Protection Regulation).
Contractual obligation: We process your personal data with the purpose of complying with our agreement to deliver a user account to you (Article 6 (1) (b) of the General Data Protection Regulation).
Retention period
Your personal data related to a user account which is not associated with a clinical trial or a Greenlight Guru customer will be retained for 2 years from your last user account activity. If your user account is associated with a clinical trial or a Greenlight Guru customer, we refer to the privacy policy of the entity responsible for the clinical trial in question or the Greenlight Guru customer, respectively.
Anonymized personal data may, however, be kept for a longer period of time.
2. Contact persons at customers, suppliers and other business partners
This section sets out the policy for Greenlight Guru’s processing of personal data in the Greenlight Guru Clinical product collected from owners of sole proprietorships or contact persons at customers, suppliers and other business partners who collaborate with Greenlight Guru.
Collection of personal data
Greenlight Guru may collect, process and store personal data about you in the following instances:
Types of personal data
Greenlight Guru may collect, process and store the following personal data:
Such information may be provided directly by you (primarily via emails and other correspondence) or by a third party such as your employer.
Purposes of the processing
Your personal data may be processed for the following purposes:
Contractual obligation: The processing of your personal data will in some cases be necessary for the performance of a contract (Article 6 (1) (b) of the General Data Protection Regulation).
Legitimate interests: We may process your personal data pursuant to our legitimate interest in, for instance, to manage daily operations according to lawful and fair business practices, including planning, performing and managing the business relationship or our legitimate interest in e.g. statistics, analysis, providing support as well as improving and developing our products and services. The processing may also be necessary for our legitimate interests in preventing fraud or establish, exercise, or defend legal claims (Article 6 (1) (f) of the General Data Protection Regulation).
Legal obligation: The processing of your personal data will in some cases be necessary to comply with legal obligations, such as our obligations to prevent illegal activity (Article 6 (1) (c) of the General Data Protection Regulation).
Retention period
Your personal data will be retained for 3 years as from termination of the cooperation between Greenlight Guru and your company or the company you are employed with.
Any personal data included in bookkeeping records will be stored for 5 years as from expiry of the financial year at which time the data will be deleted. The storage period has been determined on the basis of the storage requirements laid down in s. 10 of the Consolidated Bookkeeping Act and, consequently, with a view to complying with applicable law.
Anonymized personal data may be kept for a longer period of time.
3. Disclosure to other data controllers and transfer to data processors
To fulfill the purposes described above we may provide access to your personal data for third parties who, on the basis of a contractual relationship with Greenlight Guru, provide relevant services, e.g. IT-providers or email providers. Such service providers will only process personal data in accordance with our instructions pursuant to the data processor agreements entered into.
In connection with Greenlight Guru’s development, the company structure may change, e.g. through a full or partial sale of Greenlight Guru. In case of a partial hand over of assets containing personal data, the legal basis for the related disclosure of personal data is, as a general rule, Article 6(1)(f) of the GDPR, as Greenlight Guru has a legitimate interest in handing over part of its assets as well as making commercial changes.
Aside from above, it is a general rule that your personal data is not disclosed to a third party without your permission. However, under certain circumstances and in accordance with applicable law, we may need to disclose your personal data to
4. Your rights
5. Questions or complaints
If you have any questions in relation to this privacy policy or if you wish to make a complaint in connection to our processing of your personal data, please contact us:
SMART-TRIAL ApS
K. Christensens Vej 2L
9200 Aalborg SV
Denmark
Email: clinical.info@greenlight.guru
If your complaint is not resolved by us and you wish to proceed with the case, you can send your compliant to the supervisory authority in your country. A list of European supervisory authorities is available here.
6. Changes to the privacy policy
We reserve the right to make changes to this privacy policy from time to time. When updated, the date at the bottom of the privacy policy will be updated accordingly. The, at all times, applicable privacy policy will be available at our websites.