Privacy notice: outreach channel to healthcare professionals

Why you received an email from us

You received an email because your public professional profile (your institution’s website, professional registries, publications, or medical directories) indicates that you treat patients who could benefit from clinical trials or health programs active at sites we work with. We wrote to present those studies and the way to refer patients, nothing more.

Who is the data controller

The controller of your data is [full name of the Provider, natural person], [nationality], [ID or passport number], operator of the Chain Reaction platform (“we”). Contact for any data matter: [privacidad@chainreactionapps.com].

What data we process and where it comes from

• Professional identification and contact: name, title, specialty, institution, city, and professional email. They come from publicly available sources; the email address is verified with a specialized provider before we write to you.
• Relationship history: whether we wrote to you, when, and how you responded (interested, not now, opt-out).
• Never do we process health data about you or your patients. If you mention a clinical case in a reply, that text is deleted from our records 90 days after processing; we only keep the classification of your response.

For what purpose and on what basis

Purpose: to build and maintain a professional network for referring patients to clinical trials and health programs of client sites. Legal basis: our legitimate interest in peer-to-peer professional communication about clinical research, balanced against your rights: we write to your professional email, about your specialty, with an immediate opt-out available in every email. Once Chilean Law 21.719 enters into force, that is the express basis; in the meantime we operate under Law 19.628 with the same safeguards.

Who it is shared with

No one, apart from the infrastructure providers we need to operate (data hosting and email delivery), bound by their own terms not to use the data for anything else. We do not sell, lease, or transfer the database to third parties. Emails may be sent under the identity of professionals at client sites who have authorized it individually and in writing.

Where it is stored

In cloud infrastructure that may be located outside Chile, with encryption in transit and at rest and restricted access. [Confirm the project region when provisioning CR-BD.]

For how long

For as long as the professional relationship is active. If you opt out, we keep your name and email for the sole purpose of never contacting you again; everything else is deleted. The free text of your replies is deleted after 90 days.

Your rights

Access, rectification, erasure, and objection. The shortest path: reply BAJA to any of our emails and we will never write to you again, no questions asked. For everything else, write to [privacidad@chainreactionapps.com]; we respond within the legal deadline. If you believe we did not respond as required, you may file a complaint with the data protection authority.

Automated decisions

We use artificial intelligence tools to draft messages and classify responses. No email is sent without prior human approval, and an opt-out request is always processed, whether a tool or a person classifies it.