Privacy Policy 3

Privacy Policy

Introduction

At Astrum CRO S.L. (“Astrum”), we are committed to safeguarding the privacy and personal data of our clients, partners, study volunteers, and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and applicable national data protection laws.
By using our website or services, you acknowledge and agree to the practices described in this Policy.

Data Controller

Entity: Astrum CRO S.L.
Tax ID (NIF): B10753010
Registered Office: Calle Almagro 3, 28010 Madrid, Spain
Email: info@astrumcro.com

Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, organization, role
Contact data: email address, phone number, postal address
Professional data: company, job title, study-related details
Website usage data: IP address, browser type, cookies, analytics information
Volunteer data: health and demographic information (only if you voluntarily participate in clinical studies, subject to specific informed consent and ethics approvals)

How We Use Your Data

We process personal data for the following legitimate purposes:

To respond to inquiries, provide information, and deliver services
To prepare, negotiate, and perform contracts, proposals, or study-related activities
To comply with regulatory and legal requirements (e.g., GCP, EMA, FDA, ANVISA)
To send newsletters, updates, or event invitations (only with prior consent)
To improve our website’s functionality, user experience, and security

Legal Basis for Processing

Processing of your personal data is based on one or more of the following:

Consent – where you choose to receive communications or register for a study
Contractual necessity – to deliver services or fulfil agreements with you
Legal obligations – to comply with EU and international regulatory frameworks
Legitimate interests – to maintain business relationships and develop services

Data Sharing & International Transfers

We do not sell or rent personal data. Information may be shared with:

Astrum CRO affiliates and partner clinical sites within the EU
Trusted service providers (e.g., IT hosting, cloud, analytics) bound by confidentiality agreements
Competent regulatory authorities when legally required

Any transfer of personal data outside the EU will only occur with appropriate safeguards, such as Standard Contractual Clauses or equivalent mechanisms..

Data Retention

Study-related data: retained in accordance with GCP and regulatory timelines (up to 25 years)
Marketing/contact data: retained until you withdraw consent or request deletion
Other business-related data: retained only as long as necessary for the stated purposes

Your GDPR Rights

our may at any time exercise the following rights concerning your personal data:

Right of access
Right to rectification
Right to erasure (where legally permissible)
Right to restrict processing
Right to data portability
Right to object (e.g., to direct marketing)
Right to withdraw consent (where processing is based on consent)

Requests can be submitted by email to: [Insert DPO/privacy contact email].

Cookies & Website Tracking

Our website uses cookies and similar technologies to:

Facilitate website functionality and navigation
Analyze usage patterns and improve performance
Personalize digital communications

You can manage or disable cookies at any time through your browser settings.

Security Measures

Astrum implements appropriate technical and organizational measures to safeguard personal data against unauthorized access, alteration, loss, or misuse, such as:

Data encryption
Role-based access and secure authentication
Staff training on data protection
Regular system monitoring and audits

Updates to this Privacy Policy

We may update this Policy from time to time to reflect legal, technical, or operational changes. The latest version will always be available on our website.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
Astrum CRO S.L.
Calle Almagro 3, 28010 Madrid, Spain
Email: info@astrumcro.com