Data Sharing Agreement Overview
Data Providers and Technical Partners (“Data Controllers”) are part of a consortium for the purpose of a project in the EU HORIZON Research and Innovation Action, Grant Agreement No: 101080756 (“AI4LUNGS” or “Project”).
To develop and validate the Project’s key results (“Results”), the Data Controllers collect, share, and use certain personal data (“Shared Data”). Data Controllers have therefore signed a data sharing agreement (“DSA”) that sets out their respective responsibilities for complying with the GDPR and ensures full transparency.
This document is intended to offer a transparent and comprehensive overview of the DSA for all data subjects concerned.
Should you have any questions or concerns, please contact the Data Controllers using the contact for data protection matters provided below.
1. Data Providers
-
Get the right approvals and collect Shared Data ethically – The Data Providers will first obtain approval from the relevant ethics boards and then collect the Shared Data in line with an agreed study protocol.
-
Protect data subjects privacy before sharing – Data Providers will make sure Shared Data is handled lawfully and that any information that could identify data subject is removed or replaced (anonymised or pseudonymised) before sharing it with the Technical Partners, so it can be used for the Project in a safe and agreed way.
STICHTING AMSTERDAM UMC (AMC); contact for data protection matters - a.i.abrahams@amsterdamumc.nl
FOLKEHELSEINSTITUTTET (NIPH); contact for data protection matters hilde.kvammen.olav@fhi.no
MOR RESEARCH APPLICATIONS LTD (MOR); contact for data protection matters -ronental@clalit.org.il
CENTRO HOSPITALAR DE VILA NOVA DE GAIA/ESPINHO EPE (Gaia); contact for data protection matters -jose.oliveira.ribeiro@ulsge.min-saude.pt
FUNDACIO PRIVADA INSTITUT D'INVESTIGACIO ONCOLOGICA DE VALLHEBRON (VHIO); contact for data protection matters -clopez@vhio.net
2. Technical Partners
-
Develop Project’s Results – The Technical Partners will develop, test, and/or check (validate) the Results, including AI4LUNGS Decision Support System, to make sure they work as intended and meet the Project's goals.
EXUS SOFTWARE MONOPROSOPI ETAIRIA PERIORISMENIS EVTHINIS (EXUS); contact for data protection matters - e.jaho@exus.ai
FRAUNHOFER GESELLSCHAFT ZUR FÖRDERUNG DER ANGEWANDTEN FORSCHUNG EV (FhG); contact for data protection matters - datenschutz@zv.fraunhofer.de
I3S - INSTITUTO DE INVESTIGACAO E INOVACAO EM SAUDE DA UNIVERSIDADE DO PORTO (i3S); contact for data protection matters - dpo@i3s.up.pt
INESC TEC - INSTITUTO DE ENGENHARIADE SISTEMAS E COMPUTADORES, TECNOLOGIA E CIENCIA (INESC TEC); contact for data protection matters - dpo-global@inesctec.pt
SOMEKH CHAIKIN PARTNERSHIP (KPMG); contact for data protection matters - aglanz@kpmg.com
Land Rheinland-Pfalz, represented by RHEINLAND-PFALZISCHE TECHNISCHE UNIVERSITAT (RPTU); contact for data protection matters - datenschutz@math.rptu.de
The Shared Data are securely transferred from Data Providers to Technical Partners through YONALINK LTD acting as data processor.
The Aims of AI4LUNGS
The AI4LUNGS project aims at developing AI models to improve patient stratification, optimizing diagnosis and treatment of respiratory diseases and deploying all the developed models on a single platform for clinicians to use in their daily routines (“AI4LUNGS Platform”).
The AI4LUNGS Platform will support clinicians' decision making by providing insights and suggestions about clinical outcomes based on patient data when all the models are applied.
Shared Data
Retrospective Data: data generated during the clinical routine from four clinical centers in Portugal, Spain, the Netherlands and Israel and from the Cancer Registry of Norway already available in electronic format (e.g., electronic health records, clinical registries, administrative datasets imaging data, etc).
Prospective Data: data collected in a prospective study in the same scope as for Retrospective Data, plus novel data from digital auscultation on Interstitial Lung Disease (ILD) and infectious lung diseases and liquid biopsy for lung cancer patients.
Main agreed purposes of processing Shared Data
-
Collecting the Shared Data in line with agreed protocols;
-
Storing, integrating and curating the Shared Data (including harmonising Shared Data into a common format and injecting them into the YonaLink platform); and
-
Using the Shared Data for the purpose of developing the Results and allowing the Technical Partners to use Shared Data for this purpose.
Allocation of tasks between Data Controllers
Data Controllers may take and implement decisions about the processing of Shared Data when necessary to carry out their respective tasks in the Project. In addition to fulfilling their own tasks, each Data Controller must reasonably assist the others in meeting GDPR and Data Protection Laws requirements related to the Project. Specifically, each Data Controller shall:
-
consult with the other Data Controllers about any notices given to data subjects in relation to the Shared Data;
-
assist the other Data Controllers in complying with any data subject request;
-
assist the other Data Controllers in complying with their obligations under the GDPR and Data Protection Laws with respect to security, breach notifications, impact assessments and consultations with supervisory authorities and regulators;
-
use compatible technology for processing Shared Data to ensure that there is no lack of accuracy or security;