Personal data policy
Version of 3 October 2026. This installation is in the Russian Federation and follows Federal Law No. 152-FZ “On Personal Data”.
1. Operator
Personal data operator: the YouEDC portal administration. Contact for personal data questions: contact@youedc.com.
2. What data is processed
- Portal users: name, work e-mail, organisation and position (optional), interface language, password hash, consent date, IP address and activity log.
- Study participants: this version collects no patient data. When data capture arrives, only pseudonymised data defined by the study protocol will be entered, with no names, addresses or phone numbers.
- Files in the data profiler are read in memory and not stored.
3. Purposes
Giving access to the portal and its functions, access control, service e-mails (sign-up, invitations, password reset), the activity log (audit trail) and protecting the portal from abuse.
4. Legal basis
The user's consent given at sign-up, and the performance of the user agreement.
5. Where and how data is kept
Data is stored and processed on a server in the Russian Federation. No cross-border transfer takes place. Mail goes through a Russian hosting provider. The portal uses no third-party analytics, external scripts or cloud AI services. Connections use HTTPS, passwords are stored only as hashes, and audit records are never changed or deleted.
6. Retention
Account data is kept while the account is active and deleted or anonymised within 30 days after the account is closed at the user's request. Audit records are kept as long as needed to prove the integrity of study data. Backups are kept for 14 days.
7. Your rights
You can ask what data is processed, have it corrected, blocked or deleted, and withdraw consent by writing to contact@youedc.com. We answer within 10 working days. Withdrawing consent closes the account; audit records are kept in anonymised form unless the law requires otherwise.
8. Changes
A new version is published on this page with its date.