Privacy Notice for ASCEND PLUS trial staff and investigators
This Privacy Notice is provided to comply with the General Data Protection Regulation (GDPR) 2018 and other relevant regulation. It aims to inform you how we will use, store and process personal data about you in connection with the ASCEND PLUS study.
Who is responsible for your data?
The University of Oxford is the data controller with respect to the processing of your personal data for the purposes of the ASCEND PLUS study. The Information Commissioners Office (ICO) registration number for the University of Oxford is Z575783X.
Types of personal data
In connection with the ASCEND PLUS Study, the personal data that we process could include your name and contact information (e.g. phone, email, business address), your participation in ASCEND PLUS and your role (e.g. Principal Investigator, Research Co-ordinator etc.), your date of birth, work experience and professional qualifications, curriculum vitae (CV) and educational background (if you have provided these details), information provided by you in any Financial Disclosure Forms (if relevant) and processing of personal data arising from your use of the ASCEND PLUS web-based IT systems).
Purposes for which we process your personal data
We are processing your personal data for the purposes of conducting the ASCEND PLUS trial in accordance with the protocol. This may include
- Monitoring, source data/document verification, audits, pharmacovigilance etc.
- Processing of personal data arising from your use of the ASCEND PLUS web-based systems, for example IP addresses and information gathered through cookies. Cookies are small text files that are placed on your computer by websites that you visit. For more information about cookies visit http://www.allaboutcookies.org.
We may also process your personal data in order to select investigators for future studies.
Where we store and process your data
The data are stored on secure servers managed by the University of Oxford. We ensure that your personal data are protected against unauthorised access, unlawful use, accidental loss, corruption or destruction.
Sharing your data
We may share your personal data for the purposes mentioned above with service providers (including third party electronic Trial Master File providers).
The ASCEND PLUS study data or reports, including your personal data, may be shared with third parties in line with the principles for responsible clinical trial data sharing.
Your personal data may be shared with ethics committees/institutional review boards, governmental or regulatory authorities and Novo Nordisk and its designated representatives.
Some of the recipients may be based in countries outside the European Union. In compliance with applicable law, we have taken steps to ensure that your data remains secure.
How long do we keep your data?
We will keep your personal data for up to 25 years after the end of the ASCEND PLUS trial. Because of planned follow-up of study participants after the scheduled treatment period, the end date of the ASCEND PLUS trial has not been specified but will not be later than 2050.
What is the legal basis for processing your data according to GDPR?
The University of Oxford is using your personal data for research purposes, it will only process personal data as necessary to undertake research that is being carried out in the public interest. Under data protection law the “legal basis” for processing your personal data is GDPR article 6(1)e.
Full details on your rights to access and modify your personal data are available on the NHS website.
If you wish to raise a complaint about how we have handled your personal data, you can contact our Data Protection Officer, who will investigate the matter. If you are not satisfied with our response or believe we are processing your personal data in a way that is not lawful you can complain to the ICO.
If you would like to contact us directly for more information about how we process and protect data collected for research, please contact the ASCEND PLUS team.