Investigators and research staff | ALK

Privacy notice for investigator and research staff

February 2026

The purpose of this privacy notice is to inform you about how ALK-Abelló A/S (“ALK”) processes your personal data in connection with your role, or potential role, as an investigator or member of the research staff involved in the conduct of a clinical trial sponsored by ALK. As part of your participation, or potential participation in the trial, it is necessary for ALK to process certain personal data about you.

1. Who is the data controller?

ALK, as the data controller, is responsible for processing your personal data. Therefore, ALK solely determines the purposes and measures for processing your personal data.
 

Our contact information: 

ALK-Abelló A/S

Address: Bøge Allé 1

2970 Hørsholm

Denmark

Tel.: 45747576

Email: data.protection@alk.net
 

Data Protection Officer: 

Bech-Bruun Advokatpartnerselskab

CVR nr.: 38538071

Gdanskgade 18

2150 Nordhavn

Denmark

Tel.: +45 72 27 30 02

Email: dpo.alk@bechbruun.com

Encrypted email via: https://dpo.bechbruun.com/alk

 

If you have any questions regarding the processing of your personal data, you can always reach 
out to ALK or to our Data Protection Officer. We encourage you to use the Secure E-mail Function if your inquiry or request contains sensitive or confidential information.

2. Why is ALK processing your data?

Your personal data will be processed to accomplish the following purposes: 

  1. Managing your role and/or participation in the trial and communicate with you regarding the trial.
  2. Seeking approval for the trial and/or Investigational Medicinal Product (the “IMP”) by governmental or regulatory authorities.
  3. Satisfying any legal or regulatory requirements affecting the trial and/or IMP
  4. For public disclosure by competent authorities as required by legal or regulatory requirements in connection with the trial conduct and/or marketing authorisation of the IMP.
  5. Submitting the trial for publication on mandatory websites and databases that serve a comparable purpose
  6. Complying with reporting obligations of applicable laws and regulations or national industry code requirements regarding disclosure of transfer of value from pharmaceutical companies to healthcare professionals; in those cases, in which it is not possible to do it on an aggregated basis.
  7. Reporting any adverse reaction and complying with applicable pharmacovigilance obligations.
  8. Storage in ALK's site database kept for the purposes of selecting sites in future clinical trials. 

3. Legal Basis for Processing Personal Data

Our legal basis for processing your personal data is as follows:

  • EU General Data Protection Regulation (“GDPR”) Article 6(1)(b): Processing is necessary for the performance of contract with you or involving you.
  • GDPR Article 6(1)(c): Processing is necessary for compliance with applicable regulations, such as the clinical trial regulation.
  • GDPR Article 6(1)(f): In some cases, processing is based on our legitimate interests. 

4. Data Sources

ALK will collect your personal data from you directly and/or from the institution where you work or support research activities.

5. Categories of Personal Data Processed

Below, you can read which data we collect about you:

  • Contact information
    • name, profession, title, telephone number, email, and place of work
  • Professional information
    • professional qualifications and experience, curriculum vitae, education, areas of expertise
  • Financial information
    • payment-related information and information regarding any financial relationship with ALK
  • Information regarding your participation in the trial and the training you have received

6. Transfer of Personal Data

ALK may share your personal data with others in connection with the purposes described in this notice, and we may make your personal data available to:

i. ALK EMPLOYEES & EXTERNAL PROCESSORS

The recipients of your personal data will be employees of entities belonging to the ALK Group and external processors providing specific services and processing personal data on our behalf (i.e. CROs, infrastructure and IT service providers, as well as third-party consultants). They will receive your personal data only on a ‘need-to-know’ basis, subject to confidentiality obligations and after signing appropriate legal agreements.

ii. INDEPENDENT THIRD PARTIES

When needed, we may disclose your personal data to independent third parties such as attorneys, public authorities, ethic committees/institutional review boards, regulators, external shipment or payment providers or third-party auditors. 

iii. TRANSFERS OF DATA FROM EU/EEA TO THIRD COUNTRIES

In some cases, the third parties may be located in countries outside the European Economic Area (EEA) that may not be considered as providing an adequate level of protection of Personal Data; in these cases, ALK will rely on appropriate safeguards such as binding corporate rules/standard contract clauses, the EU-US Data Privacy Framework or on the need to perform the contract with the third party or on the need of the establishment, exercise or defence of legal claims in accordance with articles 46, 49(1)(c) and 49(1)(e) of GDPR. 

7. Retention Period

If you are not selected to have a role in the trial, your personal data will be stored until completion of the trial. If you are selected to participate in the trial, your personal data will be processed for the period necessary to comply with the purposes described above. These retention periods may be extended if applicable laws and regulations require that your personal data is retained and processed for a longer period or if ALK is required to preserve your personal data for a longer period in connection with litigation, investigations and proceedings. In any case, once the trial is concluded, your personal data will be duly secured by technical and organisational measures so it cannot be easily accessed nor compromised by anyone inside or outside ALK’s personnel. 

8. Data Subject Rights

Under the General Data Protection Regulation (GDPR), you have certain data protection rights:

  1. Right to access
    You have the right to request access to your personal data held by ALK, as well as additional details.
  2. Right to rectification
    You have the right to request correction of inaccurate or incomplete personal data.
  3. Right to erasure
    Under certain circumstances, you may have the right to obtain deletion of your personal, prior to the expiry of our general retention periods.
  4. Right to restrict processing
    Under certain circumstances, you may have the right to request the restriction of your personal data.
  5. Right to object
    You have the right to object to the processing of your personal data.
  6. Right to data portability
    In specific situations, you are entitled to receive your personal data in a structured, widely used, and machine-readable format.

If you would like to exercise any of these rights, please contact us using the contact details provided in section 1. 

9. Right to Complain

You have the right to file a complaint with the Data Protection Authority if you are dissatisfied with the way we process your personal data. Contact information for the Data Protection Authority can be found here.

If you have any questions or concerns about this privacy notice or our processing of your personal data, please contact us using the contact details provided in section 1 or via data.protection@alk.net.

Last updated: 03.02.2026