TimeTeller privacy
TimeTeller Privacy Policy
1. GENERAL INFORMATION
This Privacy Policy explains how we use, store and protect the personal data of TimeTeller users.
TimeTeller treats your personal data confidentially and in accordance with the statutory data protection regulations, as well as this data protection declaration.
2. DATA STORAGE AND PROCESSING
Personal data is data that can be used to identify you personally. When you provide us with your data, e.g. when participating in the study, when using the TimeTeller app or when contacting us by e-mail or telephone, we may collect and store your data. In the following, you will learn which data we process, to what extent and for what purpose.
2.1. Scientific study
As part of our study, we collect and process personal data that directly identifies you, such as your name, date of birth, address and contact details. Furthermore, mRNA expression data is collected as part of the analysis of the biosamples. These research data are sensitive in the sense of Art. 9(1) DS-GVO.
You may withdraw from the study or revoke your consent to this study at any time, even without giving reasons, and request the destruction of the samples taken and/or the scientific data associated with them. Consent to this scientific study is voluntary.
Your personal data: Surname, first name, gender and date of birth will be collected by the doctor informing you and recorded by him/her on the consent form. A unique, consecutive number is assigned to each study participant. Using this number as an identification number, the study and personal data are stored in separate lists, so that study data can only be directly linked to personal data if both lists are accessible.
The consent form is kept in paper form in the research laboratory of the Relógio working group. The consent form and the list with the unencrypted data will remain with the study management. The results obtained in this study will be stored electronically in encrypted form (pseudonymised) together with the previously formed password. The key needed to associate this data with your personal data is stored on a computer separate from the data by the study director and is only accessible to him/her. The results of the study will be published anonymously.
The data collected in this study can be made available in anonymised form to scientific and commercial cooperation partners within the TimeTeller project (project management – Prof. Dr. Angela Relógio; clinical management – Prof. Dr. Angelika Eggert/Prof. Dr. Johannes Schulte; assistant physician Marius Ludwig).
Storage/Deletion
According to the rules of good scientific practice, we are obliged to prove for a period of 10 years that the published data can be traced back to original data. For this purpose, we continue to retain the personal data. The pseudonymised research data as well as the data identifying the study participant are stored electronically on servers and kept for 10 years. Once the retention period has expired, we will delete the identifying data or anonymise it by destroying the re-pseudonymisation list. This will make the study results anonymous. Please note that from the time of anonymisation, it is no longer possible to revoke consent, provide information, correct or delete or block data, as we can no longer assign the data to your person.
Biomaterial:
In addition, biomaterial (saliva) will be collected and analysed as part of the study. These samples will only be identifiable by a code so that the identity of the study participant is not revealed. The samples will be analysed after coding to AG Relógio’s laboratory for analysis, or if the laboratory does not have the necessary capacity due to the large number of samples, we will send the analysis to the laboratory QIAGEN GmbH (QIAGEN Strasse 1, 40724 Hilden) and Cerascreen GmbH Güterbahnhofstraße 16, 19059 Schwerin. The data resulting from the analysis will be communicated to the study management as well as to the Relógio WG.
After analysis, the samples are sent back to the laboratories of AG Relógio and stored there for 10 years.
Publication:
We intend to publish the results of the study in a form that does not allow any conclusions to be drawn about the identity of the study participant.
2.2. TimeTeller Mobile App
The TimeTeller software is hosted on the servers of Charité – Universitätsmedizin Berlin. The app was developed in React Native for use on iOS and Android devices and must be downloaded and installed from the Apple App Store or Google Play Store.
The mobile app is currently only available for study purposes and is not accessible via the public app stores. To use the TimeTeller Mobile App, a personal invitation email with a unique code is required to register as a user. After registration, the user can create a personal account to log in to the app with a self-defined username and password. The user can use the app to register their TimeTeller kit and each of their saliva samples and track their sleeping and eating times over a period of approximately 48 hours. Once sampling is complete, the user can notify the TimeTeller laboratory that their sampling is complete and send their biological samples to the laboratory.
When the lab has analysed the user’s samples and generated the test results, the user will receive an email notification that their personal test report is available in the TimeTeller app. The user must be logged into their account to access the report.
The TimeTeller software is hosted on the servers of Charité – Universitätsmedizin Berlin. The data collected by TimeTeller, all data analysis and data processing, the creation of test reports and the databases are hosted exclusively on servers of Charité – Universitätsmedizin Berlin and are processed in accordance with the legal data protection regulations. Data handling
The data you send to us will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Mandatory statutory provisions – in particular statutory retention periods – remain unaffected by this.
2.3. Contact us by e-mail or telephone
If you contact us by email or telephone, we may collect and store your data in order to respond to your enquiries or to provide you with our services. This may include personal data such as names and contact details (email and/or telephone).
3. REVOCATION OF YOUR CONSENT TO DATA PROCESSING
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
3.1 Rights of the participants
You have the following rights in relation to the personal data processed in the context of this study:
- Revocation of consent: You can revoke the consent you have given at any time. Please note that the lawfulness of the processing of your data that has taken place up to that point is not affected, Art. 7(3) DS-GVO. This means that the data that have already been included in scientific evaluations are not affected by the revocation.
- information about all your processed and stored data as well as about the recipients to whom data are or have been passed on, Art. 15 DS-GVO;
- to rectification of inaccurate personal data, Art. 16 DS-GVO;
- data portability. This means the transfer of your data provided to us for research purposes in a common machine-readable format, Art. 20 DS-GVO, e.g. to your doctor, provided that we have collected this data on the basis of your consent or you have actively provided us with the data, e.g. by responding to surveys;
- object to further processing of personal data which has been carried out without your consent on the basis of a public interest or in order to safeguard the legitimate interests of the controller(s). The objection to further processing must be justified so that it becomes clear that special circumstances based on your person outweigh the aforementioned interest in further processing, Art. 21 of the GDPR.;
- to deletion, provided that certain reasons exist. This is the case in particular in the event of unlawful processing or if the data are no longer necessary for the purpose for which they were collected or processed, you revoke consent and there is no other legal basis for the data processing, or instead of the aforementioned objection pursuant to Art. 21 DS-GVO under the conditions stated there. Insofar as deletion would frustrate or significantly complicate the objectives of a research project conducted in the scientific interest, there is no right to erasure, Art. 17(3) DS-GVO. After a retention period of 10 years, your personal data will be deleted.
- restriction of the processing of personal data, in particular if the processing is unlawful and you request restriction instead of erasure (see there) or as long as it is disputed whether the processing of personal data is lawful, Art. 18 GDPR..
4. NOTE ON THE RESPONSIBLE BODY
The controller for the processing of personal data is:
Prof. Dr. Angela Relógio
Molekulares Krebsforschungszentrum (MKFZ)
Charité – Universitätsmedizin Berlin
Campus Charité Virchow-Klinikum
Forum 4 Augustenburger Platz 1
D-13353 Berlin
Phone +49 30 450559196
E-mail: angela.relogio@charite.de
If you have any concerns about data processing and compliance with data protection requirements, you can also contact the Data Protection Unit of Charité – Universitätsmedizin Berlin:
Data Protection Unit of the Charité – Universitätsmedizin Berlin
Charitéplatz 1, 10117 Berlin
Telefon: +49 30 450 580016
E-Mail: datenschutz@charite.de
In the event that you consider data processing to be unlawful, you have the option of lodging a complaint with the supervisory authority responsible for Charité – Universitätsmedizin Berlin:
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstraße 219, 10969 Berlin
Phone: +49 30 13889-0
E-Mail: mailbox@datenschutz-berlin.de
Fax: +49 30 2155050
IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6 SECT. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21 SECT. 1 GDPR).
IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21 SECT. 2 GDPR).
6. RIGHT OF APPEAL TO THE COMPETENT SUPERVISORY AUTHORITY
In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
7. RIGHT TO DATA PORTABILITY
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
8. RIGHT TO INFORMATION, BLOCKING, DELETION
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data. For this purpose as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.
9. DATA PROTECTION OFFICER
Prof. Dr. Angela Relógio
Molekulares Krebsforschungszentrum (MKFZ)
Charité – Universitätsmedizin Berlin
Campus Charité Virchow-Klinikum
Forum 4 Augustenburger Platz 1
D-13353 Berlin