INVESTIGATOR PORTAL

DATA PROTECTION NOTICE: HEALTHCARE PROFESSIONAL

Revised in November 2025

PSI CRO AG (PSI, we) is a global contract research organization (CRO) located in Baarerstrasse 113a, 6300 Zug, Switzerland. Our professional interest is to help pharmaceutical companies, sponsors, to conduct clinical trials.

What is the purpose and the legal basis for processing your personal data

The services we provide to sponsors include finding healthcare professionals for clinical studies. Based on the legitimate interest related to our core business, we would like to collect, store and use some of your personal information to be able to assess your eligibility to participate in the trials managed by PSI and consider inviting you to work with us in future clinical trials. In some cases, we search for investigator sites that meet specific criteria, and we may be obtaining contact information of these sites’ representatives for further collaboration. We may also use the information that you provide in refining our internal processes related to CRO services. For these purposes, PSI will act as the data controller.

Which of your personal data we need to collect and how we obtain personal data

Personal data that we need to collect include contact information (full name, telephone number, email address), professional interests, qualification, and place of work. We also collect information about your participation and performance in the past and current clinical trials. As part of normal activities, whether managing a clinical trial or contacting you in relation to your areas of expertise, PSI performs eligibility assessments of healthcare professionals and adds the results of such assessment into our databases.

We may be searching for potential investigators and investigator sites at professional websites, databases related to clinical trials and websites of the medical institutions that may post contact information of their staff and department heads. Such resources will be public, and we will also engage with commercial professional resources.

Who will have access to your personal data

PSI will keep your information in internal data repositories that will not be available outside of PSI. PSI personnel from PSI Group companies whose responsibility is identifying and selecting professionals and investigator sites for clinical trials, will have access to these databases. As for our business, we may have to share your personal data, including our assessment of your eligibility for a trial, with trial sponsors who will decide whether your qualifications match trial requirements. The applicable law may require PSI to disclose some of your data to the auditors and competent regulatory authorities. In this case, we will have to do so. We may need to engage third party service providers who help PSI with certain processes. PSI may allow access to data of healthcare professionals for such service providers under the condition that they are bound by the obligations to comply with all applicable laws, PSI’s instructions and implement appropriate security measures.

When the parties with whom we need to share your data are located abroad, your personal data will need to be sent or/and accessed from abroad, including to/from countries where the data protection laws may differ from that in your country. PSI makes reasonable efforts to ensure that these PSI staff and external recipients, regardless of their location, commit to protecting your personal information. Such efforts include technical and organizational measures, as well as contractual measures designed to keep your data secure. You may contact PSI at any time to learn more about these safeguards or to review the applicable protective measures.

How long your personal data will be kept

We will keep your information only for as long as necessary to fulfill the purposes for which it was collected. You can ask us to delete your data or exercise other data protection rights as described below. Please note that we may need to retain certain information to meet our legal obligation. To help ensure your information stays accurate, we encourage you to let us know about any updates or changes to your personal details. We will gladly make such corrections.

How to exercise your rights regarding your personal data

You can exercise your rights of access to data, objection, correction, erasure, restriction of data processing, as well as data portability in accordance with the applicable laws. If, at the time of your enquiry, you have joined a trial managed by PSI, the data use terms specific to that trial will apply. These terms will be explained to you in the data protection notice provided to you in the context of this trial.

Please address your enquiries to PSI Data Protection Officer at privacy@psi-cro.com

In some countries, including the EU and UK, you have the right to lodge a complaint to the national data protection authority.