Data Protection for Study Participants in Studies sponsored by ABCSG/ABCSG GmbH

This data protection declaration informs Study Participants in ABCSG/ABCSG GmbH sponsored clinical studies in general about data protection aspects:

Both– Verein zur Prävention und Therapie bösartiger Erkrankungen, Austrian Breast and Colorectal Cancer Study Group (“ABCSG”) and ABCSG GmbH perform studies and serve as sponsors according to applicable law (in Austria: Arzneimittelgesetz).

For this reason ABCSG / ABCSG GmbH (“Sponsor”) would like to inform you about the following data protection topics:

  • As already explained in the patient Information and informed consent, ABCSG GmbH has the right, through its study monitors and auditors at the study site, to access your personal data which has been collected at the study site in order to verify the quality of the data transfer in the study. Within the scope of this access and quality check (data processing), ABCSG GmbH is responsible for your personal data and is therefore controller within the meaning of the GDPR.
  • As the personal data collected in the course of this study can be retained for a period of 15 years or longer, data processing by ABCSG GmbH is also possible for these periods. For more information about how ABCSG GmbH handles the access of your personal data by its study monitors and auditors, you will find more information below.
  • The use of your personal data by ABCSG GmbH for the purposes described in the patient information and informed consent is based on your consent and on legal requirements covering the conduct of clinical trials.
  • If you have consented to your personal data being used for other scientific purposes in addition to the study, you have the right to object to that use. If you wish to object to such use, please contact your investigator.
  • If we send your data to another country, it will only be done in a form that does not allow tracing back your identity. Personal data can only be transferred to a country outside the EU/EEA if the transfer is covered by a contract which has been approved by the respective Data Protection Authority (DPA) or a decision made by the DPA. If you are a Study Participant you can find further details in your Informed Consent Form.
  • You can ask the investigator to have access to the personal data that has been collected about you. If you believe that any of these data are incorrect, you may ask your investigator in writing if they can be rectified or erased. You may also request that the use of your personal information be restricted.
  • If you change your mind about participating in the study, no further personal data of you will be collected. However, your personal data that has been collected up until consent withdrawal will still be used.
  • If you have any questions about how your personal data will be used in the study, please first contact your investigator.

According to the GDPR, you are generally entitled to the rights of access, rectification, erasure, restriction of processing, data portability and objection, provided that this does not render impossible or seriously impair the objectives of the clinical trial and provided that this does not conflict with other applicable laws, if ABCSG is Sponsor of the study. There will be no automated decision making, including profiling; therefore, no automated processing of your data is undertaken for the purpose of analyzing or predicting certain personal aspects of you, such as health, personal preferences, behavior. If personal data is processed for a purpose other than the one for which the personal data was collected, we will inform you of such other purpose if such processing is not covered by applicable law.

You can also contact the privacy officer of ABCSG GmbH directly: Chief Privacy Officer, ABCSG/ABCSG GmbH, Nussdorfer Platz 8, 1190 Vienna,<

If you are not satisfied with the answers you receive, you can also lodge a complaint with a supervisory authority according to GDPR, eg in Austria with the Austrian Data Protection Authority, Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Wien, Telefon: +43 1 52 152-0, E-Mail:

Learn more about how the sponsor handles access of your personal data through its study monitors and auditors

Data about you will be collected and processed as part of a study. A basic distinction must be made between

  1. Personal data by which a person is directly identifiable (e.g. name, date of birth, address, national insurance number, photographs, etc.).
  2. Pseudonymised personal data, i.e. data in which all information that allows direct conclusions to be drawn about the specific person is either removed, replaced by a code (e.g. a number) or made unrecognisable (e.g. in the case of images). However, despite compliance with these measures, the possibility of unauthorised re-identification cannot be completely ruled out.
  3. Anonymised data that cannot be traced back to a specific person.

The investigator and other employees of the Site who are involved in the study or your medical care have access to the data by which you are directly identifiable (see point 1). In addition, authorised representatives of the Sponsor who are bound to confidentiality as well as representatives of domestic and/or foreign health authorities and the relevant ethics committees may inspect this data to the extent necessary to verify the proper conduct of the study. All persons who have access to this data are subject to the applicable national data protection regulations and/or the EU General Data Protection Regulation (GDPR) when handling the data.

The code that makes it possible to assign the pseudonymised data to your person is only stored at your Site.

How is personal data processed?

Your personal data will be used to verify that the study has been or will be conducted properly and whether the study medication is safe and effective. Your encrypted personal data will be examined together with the encrypted personal data of all other participants in the study to learn more about the effect of the medicine.

Part of the processing of your data can be automated, the Sponsor can therefore use computers and other technologies to process your data.

Where is personal data stored and kept secure?

The encrypted personal data collected in a study is entered into Sponsor’s own secure electronic systems and these can be used and operated by companies that work with the sponsor. Your encrypted personal data and your medical record will be kept in accordance with the law after the end of the clinical trial. A summary of the study results can also be published at conferences or in scientific journals. However, if the results of the clinical trial are publicly presented, you will never be mentioned by name. Some authorities may require the sponsor to disclose study data for reasons of transparency. The transmitted data will not identify you in any case.

Who at Sponsor can see your personal data?

Only certain research personnel of Sponsor (such as monitors, auditors and sponsor-authorized agents ) has access to your personal data to verify the accuracy of the records. These persons, for example, have access to your medical records collected by investigator and check whether the data has been correctly entered into the study database. These persons are subject to a confidentiality obligation.

The following persons only have access to your encrypted data: ABCSG, ABCSG GmbH, third parties (including possibly also third parties which are subject to a different legal system).

Who can process anonymized data?

Anonymised data, i.e. data that cannot be traced back to a specific person may be transmitted by the sponsor to external parties. With this data, for example, research is carried out to find out about better treatment options for the future, or more about a disease.

Last modified on March 20,2024

Share on