Privacy Notice – Study Participants
Introduction
This privacy notice (“Notice”) addresses how Mölnlycke Health Care AB, reg. no 556547-5489, (“Mölnlycke”) ensures individuals’ privacy when conducting clinical studies which Mölnlycke is responsible for (“Study”), and, if you consent to it, the use of your personal data for purposes beyond those necessary to conduct the Study (so called “Secondary Purposes”).
As Mölnlycke is the organisation that initiates and manages the Study, Mölnlycke is responsible for processing your personal data in the role as data controller. This means that we determine the purposes and means of the processing of personal data. Your personal data will be collected by the clinic, hospital, or other healthcare facility where the Study is being conducted (“Study Site”) or by other third parties, such as your primary care doctors. Mölnlycke may also appoint a clinical research organisation (“CRO”) to assist us with the Study. The collection of your personal data will then be administered and handled by the CRO. When any information relating to you is shared with Mölnlycke, it will be pseudonymised, which means that you will not be identified by any direct personal identifier.
In this Notice, we explain what personal data will generally be processed as part of the Study and what rights you have with respect to your privacy. For more information about the background, purpose and operation of the Study, please see the Patient/Subject Information Sheet, the Informed Consent Form or other information provided to you when you entered the clinical study process.
We may need to make updates or changes to this Notice. You can find the latest version of this Notice on our website www.molnlycke.com. The Study staff will also keep you informed about relevant changes during your participation in the Study. If we will make changes to the processing of your personal data after the Study has ended, we will make sure to inform you about such changes.
What personal data do we process?
You cannot participate in the Study without our processing of your personal data. In the event we do not need your personal data, we will make this clear to the Study Site. Your personal data will be obtained from you directly during the Study and may also be obtained from your health records held at the Study Site and other health service providers for the purpose of the Study.
The table below sets out the type of personal data we process or may process during the Study:
Definition |
Type of personal data |
Identity Details |
This data will be used in limited circumstances where you contact us directly, or you suffer a Study-related injury, or where we need to obtain the data from the Study Site in order to contact you in an emergency. |
Study Data |
|
Pseudonymisation and other safeguards
The Study Site will keep all Study Data pseudonymised and will not pass on any identifiable information to Mölnlycke. Only the Study Site and relevant health care staff and Study staff will know that the Study Data is linked to you. No publication related to the Study will refer to you by name or any other information that can directly identify you.
We will take specific steps (as required by applicable data protection laws) to protect your personal data from unlawful or unauthorized processing and accidental loss, destruction or damage. Staff involved in the Study will have access to your Study Data on a strict need-to-know basis.
In addition to pseudonymisation (replacing your name with a code/reference number), we may also convert some of your personal data into statistical or aggregated form to better protect your privacy, or so that you are not identified or identifiable from it. Such anonymised data cannot be linked back to you.
How we process your personal data for Primary Purposes
In this section we describe the processing of personal data related to the Study (the “Primary Purposes”). We process Study Data to support and conduct the Study, as described in the Patient/Subject Information Sheet and the Informed Consent Form, and to fulfil our statutory obligations with respect to each Study. For each processing activity where we process information that falls under the special category of personal data, such as data concerning your health, we need to have an additional legal basis (also called an “exemption”) to use these types of personal data. Our additional legal bases to process special categories of your personal data are:
- as it is necessary for our scientific research purposes according to the Study plan, including to plan and conduct our research activities as stated therein ; and,
- as it is in the public interest in the area of public health to ensure high standards of quality and safety of medical devices.
To conduct scientific and medical research in the context of the Study
What we do and why: |
|
Our legal basis for processing: |
We have a legitimate interest to process your Study Data for the purpose of performing the Study, and to be able to conduct our scientific and medical research within the scope of the Study. We consider that the wider public interest in advancing wound care and healing through medical research means that we can lawfully process your personal data for these purposes. |
To administer the Study and to conduct business operations related to the Study
What we do and why: |
|
Our legal basis for processing: |
We have a legitimate interest to process your personal data in order to administer and coordinate the Study and your participation in the Study, as well as to conduct business operations that are related to the Study. We consider that the wider public interest in advancing wound care and healing through medical research means that we can lawfully process your personal data for these purposes. |
To ensure reliability and safety of the Study
What we do and why: |
|
Our legal basis for processing: |
We have a legal obligation to process your personal data to ensure the safety and reliability of the Study in compliance with the rules regulating the conduct of clinical investigations (such as the EU Medical Device Regulation or the US Food, Drug and Cosmetic Act). We may also be required to process your personal data where this is necessary to protect your life (or someone’s else’s life). |
How we process your personal data for Secondary Purposes
In addition to the purposes described above we may process your Study Data for purposes beyond those necessary to conduct the Study (the “Secondary Purposes”), provided you have given your explicit consent to processing for such purposes.
Professional educational purposes
What we do and why: |
We process your Study Data when using it in training materials and textbooks, as well as in live training sessions and recorded educational videos published or delivered by or on behalf of us, which are aimed at educating healthcare practitioners in wound care. |
Our legal basis for processing: |
We will only process your Study Data for this Secondary Purpose if you have given your explicit consent to the processing. You have the right to withdraw your consent at any time. A withdrawal of your consent will mean that your Study Data will stop being used for this specific purpose. |
To develop new or improved Mölnlycke products or services
What we do and why: |
We process your Study Data for the purpose of product development (including development in areas of artificial intelligence and machine learning). Your Study Data will be used to assist Mölnlycke in developing digital products and solutions (e.g., SaMD (Software as a Medical Device) and AIaMD (AI as a Medical Device)), aimed at improving quality of care and outcomes for patients by supporting diagnostics and monitoring, the treatment and management of wounds and the prevention of infection and disease. The technology used for product development may include elements of so-called profiling. Profiling means the processing of your personal data to analyse aspects of your physical traits. Mölnlycke does not use profiling to make any decision that would affect you in any way. |
Our legal basis for processing: |
We will only process your Study Data for this Secondary Purpose if you have given your explicit consent to the processing. You have the right to withdraw your consent at any time. A withdrawal of your consent will mean that your Study Data will stop being used for this specific purpose. |
Advertising, publications and promotional activities
What we do and why: |
Your Study Data may be used in our advertising, scientific publications or promotional/marketing activities in relation to Mölnlycke’s products and Mölnlycke research and clinical study activities. These activities will be aimed at the medical sector, including hospitals, clinics and health care practitioners. Any pseudonymised wound label will be removed or redacted from all photographic images used for these purposes. |
Our legal basis for processing: |
We will only process your Study Data for this Secondary Purpose if you have given your explicit consent to the processing. You have the right to withdraw your consent at any time. A withdrawal of your consent will mean that your Study Data will stop being used for this specific purpose. |
Legal claims
In addition to the processing purposes listed above, we may be required to process personal data in the event of legal claims, if it is necessary for the establishment, exercise or defence of those legal claims. This processing of your personal data is based on our legitimate interest of establishing and/or defending legal claims.
How long do we keep your data?
Information about your participation in this Study may be recorded in your health records. Please contact your clinic and/or doctor for details of how long they retain your data.
Mölnlycke will retain all information related to the Study, including your Study Data, during the conduct of the Study and for 10 years following the conclusion of the Study, or as otherwise required under applicable law, whichever is longer. All retention of personal data will be in accordance with good clinical practice.
If you decide to consent to the use of your personal data for Secondary Purposes (which is optional), your Study Data will be retained for an additional period of 10 years after our latest use of the Study Data for Primary Purposes (including archiving). Please note that where we anonymise your Study Data for Secondary Purposes, i.e., create statistics or permanently delete any additional information that may identify you, we can keep the Study Data for an indefinite period of time as it no longer constitutes personal data.
As we only possess pseudonymised data, we cannot identify which Study Data relates to you without asking the Study staff to reveal your identity and linking the pseudonymised data to you. Therefore we strongly recommend that you in first hand request access to your Study Data directly from the Study Staff (as explained in the Patient/Subject Information Sheet and the Informed Consent Form), as this will better protect your privacy in relation to Mölnlycke. At your request, we will however confirm whether your Study Data is being processed in a Study and take measures to provide you with any of your personal data that is processed in such Study. You also have the following rights in relation to the processing of your Study Data (please note that not all rights listed below are absolute and there are exemptions which can be valid):
- Where our processing is based on your consent, you may withdraw your consent at any time by contacting us. If you withdraw your consent, this will only take effect for future processing of your Study Data.
- You have the right to ask us to correct your personal data if it is incorrect. If any of the personal information you give to your clinic/doctor as part of the Study changes, or something is incorrect, please inform your clinic/doctor without delay.
- In certain circumstances, you may ask us to erase your personal data (also known as the ‘right to be forgotten’).
- You also have the right to ask us to restrict, or object to, our processing of your personal data in certain circumstances. For example, you may be able to object to your data being processed for a future Study, even if you agreed to this at an earlier time.
- You may have the right in certain circumstances to receive your personal data you provided to us in a structured, commonly used and machine-readable format and the right to have the data transmitted to another controller.
If you decide to withdraw your consent to participate, or successfully object to your personal data being processed as part of the Study, the data processed up to the time you decide to stop participating will be kept and used by us to guarantee the validity of the Study. No new data may be collected from you.
Complaints to the supervisory authority
The data protection authority in Sweden is ‘Integritetsskyddsmyndigheten’. If you believe that our processing is performed in breach of applicable data protection legislation, we encourage you in first-hand to contact us in order for us to oversee your complaints. You may at any time also file a complaint with the supervisory authority in Sweden, or with your local supervisory authority in the EU member state where you are located. You can find contact details to each local supervisory authority by visiting this link.
Contact details
If you have any questions about the processing of your personal data, please contact us at:
Email: privacy@molnlycke.com
Post: Mölnlycke Health Care AB
Attn: Chief Privacy Officer
P.O. Box 13080, SE-402 52 Gothenburg, Sweden
For residents of Germany,
Mölnlycke Health Care GmbH
Grafenberger Allee 297
40237 Düsseldorf, Germany
Email: info.de@molnlycke.com
You can contact the external data protection officer of the controller at:
datenschutz@molnlycke.com
Phone: +49 (0)89 91 92 94 – 900