PRIVACY NOTICE

This application has been developed and/or commissioned by MedImmune UK Ltd (hereafter referred to as “AstraZeneca”, “We”, “Us”) with the assistance of trusted third party vendors, who provide and support the technology. The web portal and application will collect certain personal data from you such as:

• Personal characteristics (such as year of birth),
• Personal Contact Details (such as email address),
• System User details (patient eCode, which is the code number used by the study to replace your name and other personal details),
• IP address (a unique string of numbers that identifies a device on the internet or a local network that can be used to determine general location - note location is not transmitted or shared in the study) and
• Health related information.

Please also note that this application may activate the location function on some devices in order to enable Bluetooth connection to pulse oximetry device. Although the location function is active, your location will not be transmitted or shared.

Our need to process your personal data is based on your explicit consent.

The main purpose of this application is to enable patients to perform study-related tasks remotely. Specifically, these tasks include completion of health-related questionnaires, measuring the amount of oxygen in your blood (also known as oxygen saturation, pulse oxygen or SpO2), pulse rate and respiration rate and also providing regular reminders/notifications. In order to do this, we will need to collect, transmit, and store information entered into the application so it can become part of your coded data. Coding is done by replacing your contact details with a code.

AstraZeneca will only have access to coded data and there will be no identifying confidential information. As such, personal identifiable data is not user accessible by AstraZeneca employees.

All the information supplied through this application will be stored on secure servers and in accordance with your local country regulation. We may also transfer your personal data to other AstraZeneca group companies and with third parties for technical support purposes, or in accordance with any legal obligations.

Your data may also be shared with certain third parties such as: IT software providers involved in the development and maintenance of this Application; auditors and consultants to verify our compliance with external and internal requirements; statutory bodies, law enforcement agencies and litigants, as per a legal reporting requirement or claim; and a successor or business partner to an AstraZeneca group company in the event that it sells, divests or sets up a collaboration/joint venture for all or part of its business.

Such AstraZeneca entities and third parties may be based anywhere in the world, which could include countries that may not offer the same legal protections for personal data as your country of residence. Irrespective of which country your Personal Data is transferred, We would only share your Personal Data under a strict ‘need to know’ basis and under appropriate contractual restrictions (such as AstraZeneca’s Binding Corporate Rules and EU Standard Contract Clauses). You may be entitled to receive a copy of AstraZeneca’s Binding Corporate Rules and/or the AstraZeneca’s EU Standard Contract Clauses upon request by contacting AstraZeneca on privacy@astrazeneca.com.

The study site and the sponsor are obliged to keep all study data for 15 years to a maximum of 25 years after the end of the study, unless there is a legal requirement for keeping them longer. Personal data you have submitted through this application will then be deleted or anonymized. For more information on AstraZeneca’s internal Document Retention policy you may go to www.astrazenecapersonaldataretention.com. Also for additional information on the way your personal data would be handled and your privacy rights, please read the relevant section in your informed consent form.

You may contact AstraZeneca at www.astrazenecapersonaldataretention.com at any time to request access to the personal data we hold about you, to correct any mistakes or to request deletion of the same or withdraw your consent to certain types of processing of your personal data. If such a request places AstraZeneca or its affiliates in breach of its obligations under applicable laws, regulations or codes of practice, then AstraZeneca may not be able to comply with your request but you may still be able to request that we block the use of your personal information for further processing.

AstraZeneca has assigned a data protection officer responsible for overseeing AstraZeneca’s compliance with EU and UK data protection laws, which you may contact at privacy@astrazeneca.com or by mail at the Global Data Protection Officer, Astra Zeneca Middlewood Court, Silk Road, Macclesfield, Cheshire SK10 2NA, in case of any questions or concerns regarding the processing of your personal data. If AstraZeneca’s processing of your personal data is covered by EU or UK law, you can also lodge a complaint with the corresponding data protection supervisory authority in your country of residence. You can find the relevant EU supervisory authority name and contact details under https://edpb.europa.eu/about-edpb/board/members_en and the UK data protection supervisory authority’s contact details under https://ico.org.uk/global/contact-us/.

Stopping the application will not affect your usual care or participation in this study.