Data Protection

CRS takes the protection of your personal data very seriously.

We ensure that your personal information is treated confidentially and in accordance with data protection laws.

Our Data Protection Officer is responsible for monitoring compliance with the statutory requirements and can be contacted at: datenschutzbeauftragter(at)crs-group.de.

The entity responsible for data protection (“controller”) within the sense of the Federal Data Protection Act (Bundesdatenschutzgesetz) is CRS Clinical Research Services Andernach GmbH, Lohmannstrasse 2, 56626 Andernach, Germany, under the management of Dr. Torben Thomsen and Ekkehard Herrmann.

Processing of data when using this website

The use of our website generally does not require users to provide personal data and there is no automated processing of data.

Processing of data from customers and other contractual partners

We only collect, process or use personal data insofar as it is necessary for the establishment, definition or modification of the legal relationship (inventory data). The legal basis for this is article 6(1) b) f) EU General Data Protection Regulation (GDPR) and section 40(1) Medicinal Products Act (AMG).

CRS customer data (company name, contact person, contact data, contact content) is collected and stored in an electronic file for customer data management. This data is collected directly from the customer and is used to prepare and execute contractual relationships for clinical trials and customer acquisition. In addition, we also collect and process personal data from our suppliers (name, contact data, company assessment) within the framework of our supplier qualification procedure.

The information in the electronic customer data management file can only be accessed by employees in the Business Development and Marketing department and by the Management. It is not disclosed to third parties.

Contractual information and supplier qualification data is essentially for internal use by employees from the Business Development, Project Management and Quality Assurance departments, as well as the persons responsible for clinical trials. It may also be viewed by commissioned third parties in the event of inspections by the authorities or sponsor audits.

Information in the electronic customer data management file and on supplier qualification will be stored for as long as the company exists. Clinical trial agreements are kept for a period of at least 25 years in accordance with EU Regulation No. 536/2014.

You generally have the right to request the correction or deletion of your personal data free of charge, and to restrict the processing of your personal data at CRS. Under certain conditions, you also have the right to file an objection against the further processing of your personal data. As of 28 May 2018, you may request to receive the personal data, which you have provided to CRS, in a structured, commonly used and machine-readable format (Right to data portability). In such cases, please get in touch with your contact person in the Business Development department at CRS or contact the CRS Data Protection Officer. In addition, you also have the right to lodge a complaint with the responsible supervisory authority.