Register for a Covid-19 vaccination at: +359 (0) 886 800 264 (Viber), +359 (0) 882 516 981 (Viber)
Privacy Notice

Privacy Notice for Clinical Research Site, Investigator and Partner on recruitment activities

Who we are?

We are Comac Medical Ltd., a full-service privately owned boutique CRO/SMO with more than 290 full-time employees, operating in several European countries covering population of over 390 mln: Bulgaria, Romania, Spain, Italy, Serbia, Macedonia, Croatia, Bosnia and Herzegovina, Montenegro, Moldova, Georgia (South-Eastern Europe), Lithuania, Latvia, Estonia (Baltic region), Belarus, Poland, Hungary, Slovenia, Kosovo, Albania, Cyprus, Greece, Kazakhstan, United Kingdom, Czech Republic, Turkey and USA.

Our details as a corporate entity and as a data controller are:

Comac Medical Ltd., UIC 103174683, having our registered address in Sofia, Bulgaria, 131 Odrin str., 5th floor, and correspondence address:

South Side Business Centre
38, Maystor Aleksi Rilets Str., 5th fl.
Res. Distr. Manastirski Livadi – West
1618 Sofia, Bulgaria
Tel: +359 2 892 10 00
Fax: +359 2 892 10 01

Data Protection officer:

If you are only visitor to our website, we do not process any particular personal data except for the basic information about IP address, location, device, cookies as stated below and in our Cookies Notice.

These application forms aim to declare your interest and to be included in our database of prospective Clinical research sites, investigators, and partners on recruitment activities (referring physicians (in short – referrals)). The database is intended to be used as a pool where we may search for site, investigators and/or referrals to be included in clinical trial conducted by us as a Contract Research Organization acting on behalf of the Sponsor. Entering into the database does not guarantee that you will be selected and/or offered to become a contractor to any particular clinical research or trial.

By way of providing the relevant information with regard to the personal data processing, it is vitally important to read this Privacy Notice before giving your consent. Should you have any questions and concerns in this regard, feel free to contact our Privacy Team at

  1. What kind of personal data do we collect and process?

In order to register the interest of being included in our Clinical Research Site, Investigator or Partner on recruitment activities Data Base, we need to collect and to process a specific set of information, including personal data.
For Clinical Research Site we process information of the name or the primary contact persons, email addresses, phone numbers. The rest of information provided in the registration form might not be considered as personal, because it is only related to the staffing number, the experience of the site, knowledge, organization, equipment and other organizational information. The latter is not related to any identified or identifiable person.
For investigators and partners on recruitment activities (referrals) form, we collect and process information about your name, title, phone number, e-mail, affiliation or membership to professional organization or workplace including their address. In addition, we collect and further process information on your professional qualification, specialty.

For all groups of users and website visitors, we may process information related to your location, IP address, your web preferences as it is stated in our Cookies Policy, the way you navigate and interact with this website. The purpose is to improve the functionalities of our website and our services.

Sometimes we may conduct remarketing campaigns for the purpose of enhancing the visibility and the transparency of our activity and our services.

  1. How do we obtain personal data?

For the purpose of maintaining the database described herein, we obtain your data directly from you. In some cases, we may validate the data you provided using external public information sources.
By way of using this web site and its forms, we may automatically collect information about your IP address, approximate location, device (type of device – mobile or PC) log data, usage information, and cookies.

The information about the location is not specifically tracked, but provides information about the geographic area where your device interacts with our web site as indicated by the IP address of another similar identifier.
More information about the cookies you may find in our Cookie Policy.

  1. For what purpose it is necessary to provide your personal information?

In order to be able to include you in our database of prospective Clinical research sites, investigators and referrals we need a set of personal data which is used to conduct a preliminary assessment of your eligibility. In addition, your personal data is necessary to contact you, in case further verification of your interest or additional information is needed. In case you are selected, we will invite you to participate in the respective clinical research/trial as Clinical research site, investigator or referral (partner on recruitment activities)

It is possible also to see ads for our activities, services and/or products by remarketing campaigns.

We may use the personal data for statistical and archiving purposes. In this case we apply appropriate technical and organizational measures to ensure personal data protection.

We do not plan to process further your personal data for purposes other than those specifically described herein. In case of changes, we`ll notify you prior to that further processing.

  1. Which is the legal basis of processing and why do we need your consent with regards to the personal data processing?

To be included in our database of prospective Clinical research sites, investigators and partners on recruitment activities (referrals) is a voluntary act, based on consent. By giving your consent you declare your will to be included in our database as well as your personal data to be used in this regard. Your consent needs to be freely given, specific to the purposes described herein, informed as it is stated in this Privacy Notice and unambiguous. You will have the opportunity to withdraw your consent at any time by sending an email to

For archiving and statistical purposes, we rely on legitimate interest or legal obligation, depending on the relevant circumstances.

For remarketing campaigns, we rely on legitimate interest or your consent, depending on the particular situation.

The international data transfer, when applicable, is based on consent.

  1. What would be the consequences in case you do not provide your consent to processing personal information?

If we do not have your valid consent for personal data processing, we cannot include you in our data base. We will exclude you and will immediately stop processing your personal data if your consent is not valid or If we have a reasonable assumption that your consent might be invalid.

  1. Do we share your personal information with internal organizations?

We may share your personal data with our affiliates and/or local offices in other countries, which are affiliates of Comac Medical too and we share the same pool of Clinical research information and resources. The Medical Center Comac Medical is an example of such affiliate which may be involved in recruitment activities.

  1. Do we share your personal information with external organizations?

If required for the respective potential clinical research/trial, we may share your information with the Sponsor, other clinical research sites, investigators, partners, contract research organizations, monitors, public authorities in accordance to their powers.

  1. For how long do we retain your personal information?

We retain your personal data for no longer than is necessary for the purposes for
which the personal data are processed. In some cases, your personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with the applicable law.

The longest retention period is 25 years when it is required by the law, the Good Clinical Practice or if the process is included in the Clinical study research/trial protocol.

  1. Do we transfer your personal data internationally and outside the EU?

If required for the respective potential clinical research/trial, we may have sponsors, partners, other investigators and sites these participants may be established or located in a foreign country including outside European Union. When we prepare a clinical trial/research or other related activities with international coverage, we may transfer your data to our affiliates, some of them outside EU.

We use interactive tools from Facebook, YouTube, LinkedIn, Google Maps and Google analytics which may transfer your IP address, web preferences as it is stated in our Cookies Policy in other countries, including outside EU.

  1. How do we protect your rights and freedoms in case of non-EU personal data transfer?

For several non – EU countries, the European Commission explicitly adopted a decision that these countries provide an adequate level of data protection mechanism and when your personal data is transferred to them no specific additional safeguards are needed from our side. Currently, The European Commission has so far recognized Andorra, Argentina, Canada (commercial organizations), Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland, Uruguay and the United States of America (limited to the Privacy Shield framework) as providing adequate protection.
In case we transfer your data to other countries not listed above we use standard contractual clauses to ensure the equal level of protection as in EU.

  1. Can you withdraw your consent on personal data processing?

You can withdraw your consent at any time by sending an email to

  1. Do we perform automated decision – making, including profiling?

We do not execute automated decision – making, apart the analytics described in our Cookie Policy.

  1. How do we protect your personal data?

The connection of our web site where you fill your personal information is ensured through secured Hypertext Transfer Protocol Secure.

Comac Medical Ltd. has implemented appropriate technical and organizational measures to protect your right and freedoms concerning personal data protection including to prevent unauthorized access, disclosure, loss and/or alteration.

  1. What are your rights with regards to the personal data processing?

• Right of access
You have the right to request information whether we process personal data related to you and certain additional information in this regard such as for purposes of processing, categories of personal data, recipients to whom your personal data have been or will be disclosed in particular recipients in thirds countries.

• Right of rectification
You have the right to request that your personal data be corrected if any changes have been made or found to be incomplete or inaccurate.

• Right to be erasure (“right to be forgotten”)
You have the right to request that your personal data to be deleted when it is no longer needed for the purposes for which it has been processed when you withdraw your consent on which the processing is based and where there is no other legal ground for the processing.
You are entitled to request the erasure of your data have been unlawfully processed; if your data need to be erased for compliance with a particular legal obligation.

After considering all the circumstances of this request, we may refuse to delete your personal data if the processing is necessary to comply with a legal obligation which is applicable to us or for reasons of a public interest in the area of public health, for archiving purposes in the public interest, scientific, statistical purposes or for establishment, exercise or defense of legal claims.

The exercise of the right of erasure may not affect the rights and freedoms of others.

• Right to restriction of processing
You have the right to request a restriction of processing while we consider your rectification request, until verifying the accuracy of your personal data.

You may also request a restriction on processing when you do not want your personal data to be deleted, including in connection with the exercise or protection of legal claims. Processing restriction may also apply to your objection to automatic decision-making against you or profiling or during the pending verification whether our legitimate grounds override yours.

• Right to data portability
You have the right to receive personal data that concerns you and that you have provided to us, in a structured, widely used and machine-readable format, and you have the right to request that we transfer this data to another controller in the following cases:

  • Processing is based on consent or on a contract and it is carried out automatically.

When exercising this right, the transfer can only be made by us to another controller when it is technically feasible.

This right shall not apply to the processing necessary for the performance of a public interest task.

The exercise of the right of portability may not affect the rights and freedoms of others.

• Right to object to automated decision-making against you.
When decisions are made against you (if any), it is only based on automated processing of your data, including profiling, that you may object.
This right may not be exercised when automated processing is necessary for the conclusion or performance of a contract between us.

When processing your data for direct marketing purposes (when such is done), you have the right to object to such processing at any time and your processing of personal data for that purpose is terminated.

Depending on your particular situation, at any time of the processing of your data on the grounds of legitimate interest, you have the right to object before us. In this case, we shall no longer process your data unless we demonstrate compelling this legitimate ground for the processing which overrides your interest, rights and freedoms or for establishment, exercise or defense of legal claims

• Right to lodge a complaint with a supervisory authority
Within the EU, you have the right to complain to a supervisory authority about how your information is handled and/or when you feel your rights and freedoms regarding personal data processing are violated.

  1. How to file an inquiry, complain or requests in terms of data protection?

You may file an inquiry, complain or requests in terms of data protection by sending an email to

To handle your request, we may require additional identification.

To facilitate the process, we may require also to fill specific request form to exercise your rights, especially if your request is unclear. In this case, we will provide you with the respective form.

If you act through a proxy or on behalf of someone else, you need you provide us with the valid power of attorney following the applicable law.

  1. Do we use cookies on our website?

For this site, sometimes we store small data files called cookies on your device, to make the website work properly. Most major websites also use this method. You can check through your browser what cookies you use; how long cookies are stored and how to manage them.

  1. Cookies and marketing tools integrated to this web site?

What are cookies?
Cookies are small text files that are saved to your computer or mobile device when you visit a website. They allow the website to store your actions and preferences (such as username, language, font size, and other display settings) for a specified period so you don’t have to enter them every time you visit the site or switch from page to page.

How to control cookies
You can block, disable and/or delete analytics and marketing cookies whenever you like – see for more information. In addition, you can delete any cookies already stored on your computer, and you can also set most browsers to block them. However, if you do this, you may need to manually adjust some parameters each time you visit a site, and some services and features may not work.
All modern browsers allow you to change your cookie settings. You can usually find these settings in the “options” or “preferences” menu of your browser. To be aware of these settings, the following links may help, or you can use the “Help” button in your browser menus for more details:
Cookie settings in Internet Explorer

Cookie settings in Edge

Cookie settings in Firefox

Cookie settings in Chrome

Cookie settings in Opera

Cookie settings in Safari

  1. Linking to external web pages?

Our website contains links and may redirect you to external websites which are independent data controllers and may process your data at their legal basis. Please, when you use other websites and external systems, nevertheless you are redirected from our website, read carefully their information regarding personal data processing.

Besides, there are embedded links to LinkedIn, Facebook, Google.

  1. Changes in this Privacy Notice?

We reserve the right to modify or amend this Privacy Notice. For instance, it may need to change as new legislation is introduced or as it is amended. The updated Policy will be posted on this website. When it is reasonable and/or in case of significant changes we will notify the data subjects, enrolled in our database via your registered email or by posting a visible message on our website.