GDPR Compliance

GDPRCompliance

Your data protection rights under the General Data Protection Regulation

Last updated: 5 July 2026

What is GDPR?

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area. ClinicaLister is committed to ensuring compliance with GDPR requirements and protecting your personal data.

Your Rights Under GDPR

Right to Access

You have the right to request access to your personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data under certain circumstances.

Right to Portability

You can request a copy of your data in a machine-readable format.

Right to Object

You can object to certain types of processing of your personal data.

Right to Restrict

You can request limitation of processing of your personal data.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you explicitly agree to processing for specific purposes
  • Contract: Processing necessary for performing our services
  • Legitimate Interest: For improving our services and user experience
  • Legal Obligation: When required by law

Data Protection Measures

We implement appropriate technical and organizational measures including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication measures
  • Staff training on data protection
  • Data breach notification procedures
  • Privacy by design and default principles

Exercise Your Rights

To exercise your GDPR rights, please use the options below or contact our Data Protection Officer:

Request Data ExportUpdate My DataDelete My Data

Privacy contact

Email: privacy@clinicalister.com
Response time: within 30 days, as required by GDPR

Data Transfers

When we transfer your data outside the EU/EEA, we ensure adequate protection through:

  • Adequacy decisions by the European Commission
  • Standard Contractual Clauses (SCCs), with the Swiss addendum
  • The EU-US and Swiss-US Data Privacy Framework, where the recipient is certified

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority. You can also contact us directly at privacy@clinicalister.com to resolve any concerns.