Privacy Policy for AnneaPRO

1. INTRODUCTION

Studies&Me® will process your personal data when you use our app. You can read more specifically about the different categories of personal data processed and the purpose of the data processing below. Studies&Me processes data in accordance with the regulations of all jurisdictions in which work is performed, including but not limited to HIPAA and GDPR.

Studies&Me A/S, CVR no: 41600020, Sølvgade 10, 5. Sal, DK-1307, Copenhagen K (“Studies&Me”) is the data controller of your data in relation to your app profile (such as login details).

DPO E-mail: dataprotection@sanos.com

The Sponsor of the clinical trial you are participating in is the data controller of the data you provide in the app related to the clinical trial. Data relating to the clinical trial is pseudonymized before sharing with sponsor, and your email and telephone number is not disclosed. For more information on the Sponsor’s processing of personal data relating to the clinical trial, please see Sponsor’s Privacy Notice.

2. CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR PROCESSING

Studies&Me will process your personal data as described below.

Only users who have given informed consent to participate in a clinical trial will be able to use the app.

The processed personal data includes general categories of personal data, and may include your name, trial participant number, email address, IP address and telephone number, and is used to enable you to access the app, as well as regain control of your profile in the event of, for example, a forgotten password.

The legal basis for the processing of your personal data is Article 6(1)(b) of the General Data Protection Regulation (“GDPR”) to fulfil an agreement with you.

3. SOURCES AND DISCLOSURE OF PERSONAL DATA

Studies&Me collects personal data directly from you.

Data processors, such as IT platform providers may have access to your profile data. Data processors are only allowed to process data on behalf of the data controller and are therefore not allowed to process your data with other purposes.

4. TRANSFER OF PERSONAL DATA TO RECIPIENTS IN THIRD COUNTRIES

In certain situations, your personal data may be transferred to a country outside of EU/EEA – for instance if we require support assistance from a data processor located outside EU/EEA.

Studies&Me ensures that such transfer(s) will be carried out in accordance with the applicable data protection legislation. Such transfer may only take place if we ensure an adequate level of data protection e.g., entering into the EU standard contractual clauses with the recipient or pursuant to Article 49 of the GDPR.

If you wish to obtain a copy of the appropriate safeguards provided for the transfer, please contact Sanos DPO at dataprotection@sanos.com.

5. SECURITY

Studies&Me has implemented reasonable security measures to protect both personal and non-personal data against loss, misuse and unauthorized access, disclosure, alteration or destruction.

6. RETENTION PERIOD

We will only keep your personal data for as long as it is deemed necessary to fulfil the above-mentioned purposes of processing your personal data, hereunder as long as the study is ongoing.

7. YOUR RIGHTS

Under the GDPR, you have the rights of data subjects listed below.

You also have the right to lodge a complaint with the competent supervisory authority, which in Denmark is the Danish Data Protection Agency. The contact details of the Danish Data Protection Agency are available on their website www.datatilsynet.dk. You can also read more about your rights as a data subject on the Danish Data Protection Agency’s website here (available in Danish only).

8. CONTACT

If you have any questions and/or comments regarding the above and/or wish to exercise your rights as a user, please contact us at dataprotection@anneapro.com or our DPO at dataprotection@sanos.com.

– November 2025