We collect, process, or use personal data only as necessary for establishing, defining, or modifying legal relationships (inventory data). This processing is based on Article 6(1)(b) and (f) of the EU General Data Protection Regulation (GDPR), as well as Section 40(1) of the Medicinal Products Act (AMG).
CRS collects and stores customer data (company name, contact person, contact details, and communication content) in an electronic file dedicated to customer data management. This data is obtained directly from customers and is utilized to facilitate the preparation and execution of contractual relationships for clinical trials and customer acquisition. Additionally, we gather and process personal data from suppliers (name, contact information, and company evaluations) as part of our supplier qualification process.
Access to the electronic customer data management file is restricted to employees in the Business Development and Marketing departments, as well as Management, ensuring confidentiality and non-disclosure to third parties.
Contractual information and supplier qualification data are primarily intended for internal use by employees in the Business Development, Project Management, and Quality Assurance departments, as well as those responsible for clinical trials. In cases of regulatory inspections or sponsor audits, this information may also be accessed by authorized third parties.
Information stored in the electronic customer data management system and supplier qualification records will be retained for the duration of the company’s existence. Clinical trial agreements are preserved for a minimum of 25 years in compliance with EU Regulation No. 536/2014.
You have the right to request correction or deletion of your personal data free of charge, and to restrict its processing at CRS under certain conditions. Additionally, since May 28, 2018, you have the right to receive the personal data you have provided to CRS in a structured, commonly used, and machine-readable format (Right to Data Portability). To exercise these rights, please contact your Business Development department contact at CRS or the CRS Data Protection Officer. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.