Privacy Notice

Last update: June 14th, 2023

Curewiki™ and your personal data

This website is operated by Curewiki SRL, a company incorporated and registered in Belgium with company number 0786.411.860 whose registered office is at Cantersteen 12, 1000 Brussels, Belgium.

In so far as we process your Personal Data, Curewiki acts as the Data Controller. You can contact us via email: privacy@curewiki.health for any question regarding your privacy.

The protection of your Personal Data is of importance for Curewiki and we treat your privacy with utmost care.

We have established this Privacy Notice to explain to you how Curewiki treats your Personal Data. The Privacy Notice applies to the Personal Data that you provide and that we Process about you as a natural person when you visit our website.

Which Personal Data do we collect when you visit our website?

We Process the Personal Data that you provide to us when you interact with us via this website by signing up (i.e. completing and sending us the patient registration form) or, when signed in, finetuning your patient profile based on additional eligibility criteria questions. These Personal Data are:

a. Identification data

Identification data of yourself: (name, first name, postal address, date of birth, etc).
Identification data of your referring hospital or medical center (if applicable);

Telephone and e-mail data (e-mail address and telephone number);
Any other information that you voluntarily give us. Please be aware that, to the extent this information contains Personal Data of others (relatives, your doctor), you should only share it with us if you have that person’s informed consent.

In the event that non-personal data is combined with personal data in such a way that it is possible to identify the persons concerned, we will treat this data as personal data until it is impossible to link it to a specific person.

b. Health data

Data relating to your current health status: healthy or ill (previous and current diagnoses, any interventions performed, etc.);

Data relating to any medication you are taking;
Data relating to your general physical condition (disability, pregnancy, etc.);
Data on your general psychological state (mental illness, behavioural problems, etc.);
Any other medical information necessary to establish whether you are eligible for the clinical trial;
Any other information you voluntarily give us.

c. Cookies and other tracking data

Like almost every website, our website also uses cookies. Some of these are necessary to make your website visit possible, other allow us to optimize your browsing experience or the way we interact with you. Find out more about our cookies in our cookie policy.

d. Curewiki Ambassadors

If you decide to become a Curewiki Ambassador, we collect the following identification data:

Name

E-mail
Blog or website
Facebook
Instagram
Any other information you voluntarily give us.

How do we collect your Personal Data?

We collect your personal data through the answers you provide when you register on our site (direct collection method) either as an interested patient or as a Curewiki Ambassador.

In order to provide you with clinical trials relevant to your medical condition, our website asks you a series of questions about your health status. The purpose of these questions is to determine whether you meet (or do not meet) the selection criteria for clinical studies of which Curewiki is aware.

It is also possible, subject to your consent, that we may collect your health data directly from your doctor (indirect collection method).

Indirectly collected data will only be processed if it is not possible for us to determine from the information you have provided directly whether you meet the selection criteria for a particular clinical trial (or not). However, contact with your doctor is also only made on the basis of your explicit consent.

Why do we collect your Personal Data?

We Process your Personal Data only for the following purposes:

To ensure that the subject is uniquely identified;
To organise the registration of interested subjects;
Linking the various medical parameters of a patient with the selection criteria of a particular clinical trial;

Determining their eligibility in clinical trials;
Linking subjects with institutes (investigation sites) that can offer them clinical trials relevant to their disease;
Notifying subjects by e-mail of existing trials.
If you decide to become a Curewiki ambassador: the registration of your details as requested to set up your account as a Curewiki ambassador and any subsequent Processing for direct marketing and social media purposes.

Why are we allowed to Process your Personal Data? (legal basis)

With regard to the purposes stated above, we Process your personal data exclusively on the basis of your explicit informed consent, which is registered when you sign up via the website (and which may be explicitly requested/confirmed at key points of interaction).

You have the right to withdraw your consent at any time by unsubscribing from the list of interested subjects or as a Curewiki ambassador.

With whom do we share your Personal Data?

a. Communication to internal recipients 

We only give access to your personal data to internal persons at Curewiki whose function requires it. Access to your data is strictly limited to them. We regularly check these accesses and secure the information provided, as far as possible.

b. Communication to third-party recipients in the context of clinical trials

In line with the stated purpose of the Website, Curewiki will share the following information with functional third parties:

Party / Information /Consent
1) Clinical Trial Sponsors / Aggregated (anonymous) information on number of subjects in a certain territory that meet predefined eligibility criteria for Sponsor led clinical trials / Not required as these data do not constitute Personal Data

2) Clinical Trial Sponsors / Individualized pseudonymized Personal Data on subjects that meet predefined eligibility criteria for Sponsor led clinical trials / By signing up on the Website, you give your explicit informed consent

3) Investigation Sites partaking in clinical trials: Individualized Personal Data on subjects that meet predefined eligibility criteria for Sponsor led clinical trials, either at the subject request or the Sponsor request

Your explicit informed consent will be requested prior to any data transfer

c. Communication to other third parties - service providers, government authorities

Curewiki will provide access to or share Personal Data on an as-needed basis with other third parties, i.e.:

trusted service providers
consultants and contractors who are granted access to Curewiki’s facilities and systems or who provide services to Curewiki

government agencies or authorities, competent courts and others as required by law or if it is necessary to fulfil your request.

Third-party service providers include IT services and website hosting companies, (internet) connectivity providers, providers of data analytics (Google) and tracking services, providers of press release and newsletter distribution networks, as well as service providers that provide technical and administrative support for the Website and underlying IT systems.

These service providers provide their services from locations within and outside of the European Economic Area (“EEA”), including the USA. Curewiki will only share your Personal Data with third parties whom Curewiki has contractually restricted from using or disclosing the Personal Data except as necessary to perform services on our behalf or to comply with legal requirements.

By virtue of the laws that apply to them and their public duties, certain EU or Member State authorities and/or institutions may require Curewiki to provide them with some of your personal data. When such a case arises, it is therefore possible that Curewiki may be obliged to pass on your personal data to these “third party authorities” without asking for your prior consent. On the other hand, Curewiki commits itself to transmit to them only the data that these authorities/institutions strictly need for the exercise of their missions, and this by application of the principle of minimisation.

What if your Personal Data is transferred outside the European Economic Area (EEA)?

Curewiki may need to transfer your data to countries outside the EEA, where privacy protection is less developed, including the USA.

Curewiki relies on available legal mechanisms to enable the legal transfer of Personal Data across borders. To the extent that Curewiki relies on the Standard Contractual Clauses (also called the Model Clauses), to authorize the transfer of Personal Data, Curewiki will comply with those requirements, including where there may be a conflict between those requirements and this Privacy Notice.

In the absence of the aforementioned appropriate safeguards, Curewiki may where permitted by applicable data protection laws (including the GDPR) rely on a deroga-tion applicable to the specific situation at hand (e.g. the data subjects’ explicit con-sent, the necessity for the performance of an agreement, the necessity for the de-fense of legal claims).

How do we secure your Personal Data?

We use reasonable and appropriate technological and operational security measures to keep your Personal Data protected against any unauthorized access or unlawful use. Such measures include:

Ensuring the physical and digital security of our equipment and devices by using appropriate password protection and encryption where necessary;

Ensuring the physical security of our offices and other sites;
Maintaining a data protection policy for, and delivering data protection training to, our employees; and
Limiting access to your Personal Data to those at Curewiki who need to use it in the course of their work.

Due to the fact that we process some of your health data, we undertake to provide a framework for the Processing of your data with increased security.

However, due to the nature of internet communications, we cannot guarantee or warrant that the transmission of your Personal Data to us is secure.

For how long do we keep your Personal Data ?

In accordance with the principle of limited retention, the period of retention of data will be strictly for the period necessary for the fulfilment of the purposes for which the processing is justified, not beyond. Under no circumstances will your data be kept for an unlimited period.

Unless otherwise agreed or required by Law, we keep all data for a period of 15 years, starting from the completion of your registration on our website.

When data is no longer required for the purposes for which it was processed or if you withdraw your consent and no other legal basis can be proven, the data must be destroyed so that it is impossible for anyone to trace your identity.

What rights can you exercise?

Based on the applicable Belgian and European privacy legislation, and provided that you meet the requirements set by this legislation, you can contact us to exercise the following rights:

Withdrawing your consent for the Processing of your Personal Data, to the extent that the Processing of your Personal Data was initially based upon your consent. To do so, simply use the unsubscribe option here.
Seeking access to, correcting, deleting or restricting your Personal Data.
Objecting to any Processing for direct marketing.
Objecting to any Processing based on our legitimate interest.

Seeking the portability of your Personal Data, which you have communicated to us and that we have Processed.

You can send your requests to exercise your above mentioned rights, together with evidence of your identity, by email at privacy@curewiki.com or by post to Curewiki, Data Protection Officer, Rue d’Angoussart 79, 1301 Wavre, Belgium.

We will examine the admissibility of your request based on the applicable Belgian and European privacy legislation. We will then inform you, in principle within a month, if we can answer positively to your request.

Third party applications and websites

Third party applications and website

This Website contains links to other websites operated by third parties, including but not limited to certain social media sites such as Facebook, Twitter, Linkedin, YouTube, etc. This Policy does not apply to any website, other than this one. Third party websites are governed by their own terms and conditions. You should therefore always carefully check the privacy and cookie policies of third party websites before accepting to be redirected to them.

We also display social media buttons on our Website. When you click on any of those buttons, your personal data may be transferred to these companies and they may also set cookies or other tracking technologies on your browser. The privacy policies and terms of use of each of those companies govern the collection and use of your personal data when you click on their buttons on our Website.

Prior to installing third party cookies or enabling you to click through to a third party website, we will have requested your consent to do so. Where consent was not given, the cookies will not be installed and the click through to third party websites will only occur after a pop-up notifying you that you are leaving the Curewiki space and requesting whether you wish to continue.

Notice for parents, guardians and children

Our website is intended for visitors who are at least 18 years of age, or the age of majority in their jurisdiction of residence. Curewiki does not knowingly solicit information from or market products or services to children. If you do not meet the age requirements set out above, please do not enter your Personal Data on this website.

How may Curewiki change this Privacy Notice?

As Curewiki expands and improves its website, or as legal requirements change, we may need to update this Privacy Notice. This Privacy Notice may be modified from time to time without prior notice. We encourage you to review this Privacy Notice on a regular basis for any changes. The date of the latest version will be identified at the bottom of the Privacy Notice.

Do you have any questions?

If you have any questions about this Privacy Notice or data protection at Curewiki, you can contact our Data Protection Officer either by mail:

Data Protection Officer

Cantersteen 12, 1000 Brussels, Belgium

or by e-mail at privacy@Curewiki.com

You also have the right to lodge a complaint with the supervisory authority in the European member state of your habitual residence, your place of work or the alleged infringement of applicable data protection legislation:

In Belgium, the Supervisory Authority is:

Belgian Data Protection Authority
Rue de la Presse 35 / Drukpersstraat 35
1000 Bruxelles / 1000 Brussel

Tel. +32 2 274 48 00

Fax +32 2 274 48 35

contact@apd-gba.be