Privacy Notice
Last updated: June 2026
1. Data Controller
The controller responsible for processing personal data through this application is:
COSIMO Project
Email: [email protected]
2. Overview
We are committed to collecting and processing the minimum amount of information necessary to operate this application.
You may use parts of this application without providing identifying information. Personal data is only processed when you voluntarily provide it through the application and, where required, provide your consent.
3. Information We Process
We do not collect personal data merely by your visit to this website.
Information is processed only when:
- You voluntarily submit information through the application; and
- You provide any required consent for that processing.
For questionnaire participants, the information collected typically consists of questionnaire responses, test results, and related research data. Direct identifiers such as names, postal addresses, or similar identifying information are generally not collected from participants through the platform.
Researchers, clinicians, and other authorized users may maintain account information necessary to administer projects and access data for which they have been granted permission.
4. Anonymous and Pseudonymous Participation
Where the application allows anonymous participation, submissions may be stored without information that directly identifies you.
To support questionnaire functionality, the application may assign a random identifier after consent has been provided. This identifier is used solely to manage questionnaire progress and is not intended to identify individuals.
We do not link this identifier to names, email addresses, or other directly identifying information unless such information is separately and voluntarily provided through the application.
Where participants are recruited directly by external researchers or clinicians, those researchers or clinicians may maintain separate consent records or pseudonyms outside the platform. Such separate processing is governed by the consent and information provided by the recruiting researcher, clinician, or project.
5. Legal Basis for Processing
Where personal data is processed, the legal basis is generally:
- Consent under Article 6(1)(a) GDPR.
You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
6. Access to and Sharing of Information
Information may be accessed by authorized researchers, clinicians, or project administrators for the purposes of conducting research, clinical evaluation, quality assurance, or related activities consistent with the purpose for which the data was collected.
Researchers may export data from projects for analysis where permitted by the applicable project permissions and participant consent.
Where researchers recruit participants independently, they may obtain additional consent outside this platform and may maintain participant identifiers or pseudonyms separately from the data stored within the platform.
We may also share anonymized or aggregated datasets in connection with scientific publication, replication, validation, or other open science activities. Such datasets are prepared to reduce the likelihood of identifying individual participants and may include measures such as aggregation, removal of timestamps, compression or reduction of data detail, and removal of other potentially identifying information.
We do not sell personal data to third parties.
7. Research and Open Science
The purpose of this platform is to support research and evaluation activities.
Results generated through the platform may contribute to scientific publications, presentations, validation studies, replication work, or public datasets.
Where data is shared publicly, reasonable steps are taken to reduce the risk of identifying individual participants, including removal of direct identifiers, removal of timestamps, aggregation, and reduction or compression of information where appropriate.
No method of anonymization can guarantee that re-identification is impossible in all circumstances. However, we seek to minimize this risk through appropriate technical and organizational measures.
8. International Transfers
We do not transfer personal data to third countries or international organisations except where necessary to provide the service, support authorized research activities, or comply with applicable obligations, and only in accordance with applicable data protection laws.
9. Retention
Information is retained only for as long as necessary for the purposes for which it was collected, until consent is withdrawn where applicable, or as otherwise required by law.
Aggregated or anonymized research outputs may be retained for scientific, validation, reproducibility, or open science purposes where they no longer identify individual participants.
10. Your Rights
Where applicable under data protection law, you may have the right to:
- Access your personal data.
- Correct inaccurate personal data.
- Request deletion of your personal data.
- Restrict processing.
- Object to processing.
- Receive a copy of personal data you have provided.
- Withdraw consent at any time.
To exercise these rights, please contact:
11. Identifying Your Data
Because this application may be used anonymously, we may only be able to identify and locate submitted information if you can provide the unique URL, submission identifier, pseudonym, or other reference associated with the submission.
If sufficient information is not available to identify the relevant record, we may be unable to locate, modify, or delete the requested data because we cannot determine which record relates to you.
12. Automated Decision-Making
This application does not engage in automated decision-making or profiling within the meaning of Article 22 GDPR.
13. Complaints
If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with your local data protection supervisory authority.
14. Changes to This Notice
We may update this Privacy Notice from time to time. Any changes will be published on this page.