Finally, it tells you how you can exercise your preferences to manage the information we have about you, and, if for some reason you do not want to be in Inato’s database anymore, how to ask us to take you off.
Inato’s marketplace matches the best untapped sites for any given clinical trial based on the site’s capabilities as a fit of a study protocol.
As such, Inato complies with the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”).
Inato is qualified as Data Controller regarding the personal data processed on its website. That means we are fully responsible for the data collected on the Website and which we process. Our full contact details are as follows:
176 avenue Charles de Gaulle – 92200 Neuilly-sur-Seine
The following provisions only apply to marketplace members, as personal data are necessarily processed to the extent necessary for using the marketplace.
Inato helps pharmaceutical companies find the best Investigators and Sites to participate in a clinical trial, for a specific therapeutic area. Inato acts as the sole Data Controller regarding its processing pipeline and in the creation of its database.
The purpose of such processing is to evaluate the relevance of both Investigators’ and Sites’ historical experience in the designated therapeutic area. Inato’s mission is to help pharmaceutical companies identify and select the best hospitals to participate in a trial.
What personal information we collect:
Inato limits the information collected by applying the principle of data minimization to the data which we think is likely to enable our Clients to engage with Investigators in a meaningful and targeted way.
The data collected directly from marketplace members include basic information that help us match sites to trials such as:
Inato does not hold any sensitive personal data about you.
How we collect your personal data:
The vast majority of the information we hold about you comes from publicly available sources (this includes all publications available on PubMed and all trials published on Clinical Trials.gov).
We also collect data from other sources including:
The purpose for which we will use your personal data:
Inato uses this information to create an Investigator profile for its Client, which is included in Inato’s database. Our pharmaceutical or CRO company Clients have access to Inato’s database through our Marketplace allowing them to view your profile and send you a questionnaire on a clinical trial that they think you might be interested in (as described hereinafter in section “The Questionnaire”).
Therefore, Inato’s main purpose for using your personal data is to create a repository of data regarding Investigators (the Inato database) and make it available to our Clients on a paying basis, for the benefit of matching you to trials you qualify for.
Your personal data may also be processed in one or more of the following ways:
Legal basis for processing your personal data:
Inato’s primary role is to facilitate communication between pharmaceutical companies and Investigators.
Therefore, Inato believes it is in its legitimate interest to process data about you, for the following reasons:
Inato considers and balances any potential negative impact on you and your rights before processing your personal data for its legitimate interests.
Inato does not use your personal data for activities where it believes that its interests are overridden by any unwarranted adverse impact on you.
If at any time you want us to remove you from our Database please email us at firstname.lastname@example.org and we shall do so as soon as possible.
Inato also uses your contact details for marketing purposes, solely based on your consent. If you initially accepted commercial communication from Inato, and wish to withdraw your consent, please contact us at email@example.com.
The questionnaire we propose to our Clients to identify the best Investigators is an adaptive questionnaire. It means that initially Investigators will only see one question, then additional questions will appear progressively based on their answers.
The purpose of this processing is to support the identification of relevant Sites for clinical trials and to assess the reliability of contacted physicians.
The legal basis for this specific processing is consent.
Inato’s database is not intended for children. Inato does not knowingly collect personal data relating to children. If you are under the age of 18, you are not allowed to use this service or to have your data collected by us, please do contact us right away in such case so we can ensure its deletion.
Inato may use your personal data for automated profiling purposes. The profiling we carry out and how it is used is quite limited. No automated decisions are based on this profiling.
We use profiling to evaluate your experience, therapeutic area of expertise, department and make this information available to our Clients in response to particular enquiries that they may make via Inato’s Marketplace.
Inato may, for example, use profiling to help a Client understand which clinical trial you might be interested in.
You have the right to object profiling with your personal data. If you would like us to stop profiling with your personal data, then please contact us at firstname.lastname@example.org and we shall remove you from the Inato database.
When Inato’s Clients send you communications via our Marketplaces, those communications may contain software that lets the sender know if you have opened the communication, and if so, which links you have clicked on. This helps understand what content you are or are not interested in, and tailor future communications accordingly.
Inato may share your personal data with its Clients, and other parties detailed below. We may also transfer your personal data outside of the European Economic Area (EEA), but only when specific safeguards have been put in place in order to protect your personal data, meaning that an adequate level of protection is ensured.
Inato may share your personal data with one or all of the following parties, acting as Data Processors:
We may also share your personal data gathered from public sources with third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets.
Personal data provided to us might be shared with third parties, as you gave consent to such usage of your data.
All third parties are compelled to respect the security of your personal data and to treat it in accordance with the law.
Inato does not allow its third-party service providers to use your personal data for their own purposes and only permits them to process your personal data for specified purposes and in accordance with binding contractual obligations which satisfy the requirements of the data protection legislation.
Some of the third parties to whom we transfer your personal data are also based outside the EU, so their processing of your personal data will involve a transfer outside the EU.
Any personal data transferred outside the EU is processed according to the Standard Contractual Clauses approved by the European Commission, in order to ensure that there is an adequate level of protection for your personal data.
Inato is committed to protecting your personal data. We implemented safeguards including robust and appropriate technologies, processes, and contractual arrangements, so that the data we have about you is protected from unauthorized access and improper use or deletion. Your personal data won’t be kept for longer than is necessary.
The following safeguards are in place to protect your personal data:
Any personal data shared directly with Inato in the questionnaire might be used in any subsequent trial but will be deleted 3 years after you last contacted us.
Under the GDPR, you have a number of rights in relation to your personal data.
Inato respects these rights and will help you to exercise them insofar as we are able. These rights are not absolute – in some cases they will not apply to you, or to the particular use that we are making of your data, and there are exceptions (for example if we have to process the data to comply with our own legal obligations) but if that is the case we will let you know.
Your rights include:
For further information on each of these rights, including the circumstances in which they apply, you may consult the relevant Data Protection Authority’s website of your country.
You also have the right to file a complaint at any time to the relevant data protection authority of your country, (e.g. for France, the CNIL is the French supervisory authority for data protection issues).
We hope that we would be able to resolve any concerns that you may have before you approach the CNIL so please do contact us in the first instance.