Effective Date: 2025-05-29
1. Who We Are
We are a European Union-based provider of legal representative services under the EU Clinical Trials Regulation (CTR, Article 74), primarily supporting non-EU life sciences sponsors. Our registered office is in Prague, Czech Republic.
2. What This Notice Covers
This Privacy Notice explains how we collect, use, share, and protect your personal data when you visit our website, submit an inquiry, or engage with our services.
3. What Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity Data: Name, job title
- Contact Data: Email address, country, company name
- Usage Data: IP address, browser type, pages visited (via analytics tools)
- Inquiry Data: Messages, form responses, or questions submitted via our contact forms
We do not collect sensitive personal data or use automated decision-making.
4. How We Use Your Data
We process your data to:
- Respond to your inquiries
- Schedule consultations
- Provide our services as an EU Legal Representative
- Improve our website performance
- Comply with legal obligations (e.g., GDPR, CTR Article 74)
We only collect the minimum data necessary and never sell your data to third parties.
5. Legal Basis for Processing
We rely on the following GDPR legal bases:
- Consent: When you voluntarily submit your data through our forms
- Contract: When you become a client
- Legal Obligation: When acting as your authorized representative in EU clinical trials
- Legitimate Interest: For analytics and business development, balanced against your rights
6. Data Sharing
We may share your data with:
- Trusted service providers (e.g., web hosting, analytics)
- Legal authorities or regulatory bodies, when required
- Internal staff or subcontractors under strict confidentiality
All third parties are bound by data protection agreements.
7. International Data Transfers
If you are based outside the EU, your data will be processed in the EU. Where necessary, we use appropriate safeguards (e.g., Standard Contractual Clauses) to ensure lawful data transfer.
8. Data Retention
We retain personal data only as long as necessary:
- Contact form submissions: 12 months
- Client records: Up to 10 years, for regulatory compliance
- Analytics data: 26 months (anonymized)
9. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Correct or delete your data
- Object to processing or restrict use
- Withdraw consent at any time
- Lodge a complaint with your data protection authority
To exercise any of these rights, please contact: privacy@aayt.com
10. Cookies
Our site uses basic cookies to enable functionality and collect anonymized traffic analytics (e.g., Google Analytics). You can manage cookies in your browser settings.
11. Contact Us
AAYT
110 00 Prague
Czech Republic
Email: privacy@aayt.com
