GDPR & Data Sovereignty

Scope

This GDPR Privacy Notice describes how After Trials processes personal data in connection with its website, platform, services, communications, and related activities where the General Data Protection Regulation (EU) 2016/679 ("GDPR") or another applicable data protection law applies.

This notice should be read together with the After Trials Privacy Policy, Cookie Policy, Terms of Service, Community Guidelines, and any other privacy notices or disclosures presented to you when you use a particular service.

Data Controller

The entity responsible for determining how and why your personal data is processed will depend on the After Trials service you use and your relationship with After Trials.

Where After Trials acts as a data controller, it determines the purposes and means of processing your personal data. Where After Trials processes personal data on behalf of another organization, After Trials may instead act as a processor or service provider.

If you need to identify the specific After Trials entity responsible for your data or the applicable controller for a particular service, please contact us using the details in theContact Us section.

Personal Data We Process

Depending on how you interact with After Trials, we may process categories of personal data such as:

• Identity and profile information, such as your name, username, profile information, and professional information you choose to provide.
• Contact information, such as your email address, telephone number, and other contact details.
• Account information, including login credentials, account settings, preferences, and account status.
• Content and communications, including information you submit, publish, upload, send, or otherwise provide through the services.
• Usage and technical information, including device information, browser information, IP address, approximate location derived from technical information, logs, and interactions with the services.
• Transaction and subscription information where applicable.
• Marketing and communications preferences.
• Information you provide when contacting support, reporting content, submitting requests, or otherwise communicating with us.

How We Collect Personal Data

We may obtain personal data:

• Directly from you when you create or use an account;
• When you create, upload, publish, submit, or interact with content;
• When you communicate with After Trials, including with customer or technical support;
• Automatically from your device or browser when you use our website or services;
• Through cookies and similar technologies, subject to your applicable choices and permissions;
• From service providers and other third parties where they are permitted to provide the information to us; and
• From publicly available sources where permitted by applicable law.

How We Use Personal Data

We may use personal data for purposes including:

• Providing, operating, maintaining, and improving After Trials and its services;
• Creating and administering accounts and profiles;
• Enabling users to communicate, publish content, and participate in the community;
• Personalizing the experience and remembering preferences;
• Responding to questions, requests, complaints, and support inquiries;
• Sending service-related communications;
• Sending marketing communications where permitted and in accordance with your preferences;
• Detecting, investigating, preventing, and addressing fraud, abuse, security incidents, and violations of our terms or guidelines;
• Protecting the rights, safety, security, and property of After Trials, our users, and others;
• Complying with legal and regulatory obligations;
• Establishing, exercising, or defending legal claims; and
• Performing analytics, measuring service performance, and developing new features and services.

Legal Bases for Processing

Where the GDPR applies, we process personal data only where we have an appropriate legal basis. Depending on the circumstances, this may include:

• Performance of a contract: where processing is necessary to provide a service or perform our agreement with you.
• Legal obligation: where processing is necessary for us to comply with a legal or regulatory obligation.
• Legitimate interests: where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests.
• Consent: where we rely on your consent, such as for certain optional cookies or marketing activities. You may withdraw consent at any time where applicable.
• Vital interests: in limited circumstances where processing is necessary to protect someone's vital interests.

Where we rely on legitimate interests, those interests may include operating and improving our services, maintaining security, preventing abuse, communicating with users, and protecting our legal rights.

Sharing Personal Data

We may disclose personal data where reasonably necessary for the purposes described in this notice. Recipients may include:

• Service providers that host, maintain, secure, analyze, support, or otherwise help operate our services;
• Professional advisers, including lawyers, accountants, auditors, insurers, and consultants;
• Authorities, regulators, courts, or other parties where disclosure is required or permitted by law;
• Other users or members of the After Trials community where you choose to make information public or share it through a feature of the service; and
• Organizations involved in a merger, acquisition, financing, restructuring, sale, or other business transaction, subject to applicable legal requirements.

We do not authorize third parties to use personal data for purposes inconsistent with the services they provide to us or the purposes disclosed in applicable notices.

International Data Transfers

Your personal data may be processed in countries outside the European Economic Area ("EEA"), including countries whose data protection laws may differ from those in your country.

Where required by applicable law, we use appropriate safeguards for international transfers. Depending on the circumstances, these safeguards may include an adequacy decision, Standard Contractual Clauses approved or recognized under applicable law, or another lawful transfer mechanism.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide services, comply with legal obligations, resolve disputes, enforce agreements, and protect our legitimate interests.

Retention periods vary depending on the type of information, the purpose of processing, legal requirements, and whether the information is necessary to maintain an account or respond to a dispute or security matter.

Data Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

No method of transmission, storage, or electronic security is completely secure. Accordingly, we cannot guarantee absolute security of personal data.

Your GDPR Rights

Where the GDPR applies, you may have the following rights, subject to applicable conditions and limitations:

• Right of access: to request confirmation of whether we process your personal data and, where applicable, obtain a copy.
• Right to rectification: to request correction of inaccurate or incomplete personal data.
• Right to erasure: to request deletion of personal data in circumstances provided by law.
• Right to restriction: to request restriction of processing in circumstances provided by law.
• Right to data portability: to receive certain personal data in a structured, commonly used, machine-readable format and, where technically feasible and legally applicable, request its transmission to another controller.
• Right to object: to object to processing based on legitimate interests or, in certain circumstances, to direct marketing.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Rights relating to automated decision-making: where applicable, to obtain information and request human intervention or otherwise contest certain solely automated decisions producing legal or similarly significant effects.

To exercise your rights, please contact us using the details in theContact Us section. We may need to verify your identity before completing a request.

Cookies and Similar Technologies

After Trials may use cookies, pixels, local storage, and similar technologies to operate the website, remember preferences, understand usage, maintain security, and, where permitted, support analytics or other optional functions.

Where required, we will request consent before placing or using non-essential cookies. You can learn more about these technologies and available choices in our Cookie Policy.

Automated Decision-Making

We do not intend to make decisions based solely on automated processing that produce legal effects or similarly significant effects on you unless permitted by applicable law and subject to any safeguards required by that law.

Some features may use automated systems for purposes such as security, fraud detection, content moderation, recommendations, or service personalization. These functions are not necessarily decisions subject to Article 22 of the GDPR.

Children's Data

Our services are not intended for individuals who are not legally permitted to use them under applicable law. We do not knowingly collect personal data from children in violation of applicable legal requirements.

If you believe that a child has provided personal data to us in circumstances where it should not have been collected, please contact us so that we can review the matter and take appropriate action.

Third-Party Services and Links

Our services may contain links to third-party websites, applications, integrations, or services. Those third parties may collect and process personal data under their own privacy policies and terms.

This notice does not govern third-party services that we do not control. We encourage you to review the privacy information provided by those services before submitting personal data to them.

Changes to This Notice

We may update this GDPR Privacy Notice from time to time to reflect changes in our services, processing practices, legal requirements, or other relevant circumstances.

When we make material changes, we may provide additional notice where required by applicable law. The "Last Updated" date at the top of this page indicates when this notice was most recently revised.

Contact Us

If you have questions about this GDPR Privacy Notice, want to exercise an applicable data protection right, or have a privacy concern, please contact After Trials at:

If you are submitting a data protection request, please clearly describe the request and provide enough information for us to identify the relevant account or information. We may request additional information where reasonably necessary to verify your identity and protect personal data from unauthorized disclosure.