CATEGORIES OF PERSONAL DATA TO BE PROCESSED AND THEIR RETENTION PERIODS
ANNEX IISupplementary provisions
ANNEX II CATEGORIES OF PERSONAL DATA TO BE PROCESSED AND THEIR RETENTION PERIODS The following categories of personal data shall be processed through the EU SoHO Platform: (1) personal data identifying authorised actors and responsible persons for SoHO entities: Type of personal data Purpose of processing Retention period Name, surname, affiliation, email address and alphanumerical login code of the authorised actor To provide secure access to the restricted part of the EU SoHO Platform and to ensure traceability of all the modifications introduced in the EU SoHO Platform Up to 5 years after the authorised actor has lost the capacity as authorised actor of the EU SoHO Platform Activity log To ensure traceability of all modifications introduced in the EU SoHO Platform. Up to 5 years after the authorised actor has lost the capacity as authorised actor of the EU SoHO Platform Name, surname, and email address of the responsible person for the SoHO entity To comply with the obligations set out in Article 35(3)(b) of Regulation (EU) 2024/1938 As long as the responsible person for the SoHO entity holds the capacity as responsible person for the SoHO entity (2) personal data, including data concerning health, exchanged through the EU SoHO Platform and required for the application of Articles 73 and 74 of Regulation (EU) 2024/1938, taking account of Article 76 thereof: Type of personal data Purpose of processing Retention period Personal data identifying a SoHO donation or a SoHO donor To help to identify and evaluate risks associated with a particular donation or SoHO donor Up to 30 years after donation Personal data (identification and health data) of the participant of a clinical evaluation To monitor the clinical outcome Up to 30 years after the human application of the SoHO preparation (3) personal data identifying SoHO Coordination Board members and alternates: Type of personal data Purpose of processing Period that the information will be publicly available on the EU SoHO Platform Retention period Name, surname, name of institution of origin, and declaration of interests of the SoHO Coordination Board member and alternate To comply with the obligations set out in Article 68(3) and Article 74(3) point (g) of Regulation (EU) 2024/1938 During the period that the member or alternate participates in the SoHO Coordination Board Up to 15 years after the date on which the member or alternate no longer participates in the SoHO Coordination Board