| Dokumendiregister | Terviseamet |
| Viit | 5-5/26/1906-1 |
| Registreeritud | 05.03.2026 |
| Sünkroonitud | 06.03.2026 |
| Liik | Sissetulev dokument |
| Funktsioon | 5 Teabe- ja arhiivihaldus |
| Sari | 5-5 Terviseameti kirjavahetus |
| Toimik | 5-5-8/2026 |
| Juurdepääsupiirang | Avalik |
| Juurdepääsupiirang | |
| Adressaat | Tervise Arengu Instituut |
| Saabumis/saatmisviis | Tervise Arengu Instituut |
| Vastutaja | Helina Randma (TA, Peadirektori asetäitja (3) vastutusvaldkond, Tervishoiuteenuste osakond, Kvaliteedikeskus) |
| Originaal | Ava uues aknas |
Commission européenne, 2920 Luxembourg, LUXEMBOURG – Tel. +352 43011
Office: DRB- A3/054A – Tel. direct line +352 4301-37542
EUROPEAN COMMISSION DIRECTORATE-GENERAL FOR HEALTH AND FOOD SAFETY
Public Health, Cancer and Health security
Cancer, Health in all Policies
Luxembourg SANTE.B.1/PR/sg
Subject: HaDEA/2024/OP/0027 - Exploratory study on the provision of care for
Adolescent and Young Adult (AYA) cancer patients in the Union
Dear Sir/Madam,
With this letter, I would like to inform you that the European Health and Digital Executive
Agency (HaDEA), acting under the powers delegated by the European Commission, has
initiated an "Exploratory study on the provision of care for Adolescent and
Young Adult (AYA) cancer patients in the Union", under service contract
No. HaDEA/2024/OP/0027.
This topic supports a major goal of both the Europe’s Beating Cancer Plan1 and the
Horizon Europe Cancer Mission2, namely, to improve the quality of life of cancer patients
and survivors.
Despite its relatively low incidence among adolescents and young adults, cancer remains
a significant contributor to mortality in individuals aged 15-39 (AYA age range). Unique
biological characteristics of tumours in AYAs often result in poorer treatment outcomes
compared to younger or older patients with similar types of cancer. AYAs, being in a
distinct age group between childhood and adulthood, require specialised care issues such
as fertility concerns, psychological well-being, education and career development, body
image, sexuality and relationships, and alcohol/substance abuse. Moreover, AYAs
demonstrate different health-seeking behaviours compared to adults, making it even more
challenging to provide them with appropriate preventive measures and care services.
Despite the necessity for dedicated AYA services, their availability varies significantly
across EU Member States, Iceland and Norway, contributing to inequalities in cancer care
provision, leading to inadequate support and care for AYAs facing cancer.
The study will be conducted across all 27 EU Member States, Iceland and Norway, and
aims to map the provision of healthcare to Adolescent and Young Adults (AYA) cancer
patients and survivors. The analysis will produce a clear picture of the approaches available
at national (or, where relevant, regional/local) level, including identification of barriers for
the integration of dedicated AYA care and services in healthcare systems.
1 A cancer plan for Europe - European Commission
2 EU Mission: Cancer - European Commission
2
Based on the evidence collected, the study will document and analyse the major barriers
and enabling factors, detected in each of the 27 EU Member States, Iceland and Norway,
for the design and provision of quality care before, during and after cancer treatment, but
also highlight best practices and innovative approaches into this provision.
Recommendations for future actions directed at EU Member States, Iceland and Norway
will be developed, together with relevant strategies to improve the provision of targeted
healthcare to AYA cancer patient and survivors.
ICF, together with Spark Legal and Policy Consulting (‘Spark’), Fundació de recerca Sant
Joan de Déu (‘SJD’) and Timelex, were awarded an 18-month contract to provide the
contracting authority with an external and independent study, which is expected to be
completed by the end of 2026.
During the study, the project team will undertake consultations, which include interviews
and focus groups with key stakeholders, across the EU 27 Member States, Iceland, and
Norway, to validate a model of provision of quality healthcare and services for AYA
cancer patients and survivors, as well as to collect their views and opinions on gaps,
suggested refinements and insights based on their expertise and/or experience. Surveys and
interviews will also be conducted with stakeholders to assess the current state of AYA
cancer care provision across the EU 27 Member States, Iceland, and Norway, to gather
views on insights, experiences and data on existing practices, challenges, enabling factors,
best practices, and areas for improvement.
We would kindly ask you to support the consultation process when you are contacted
by ICF, Spark Legal and Policy Consulting (‘Spark’), Timelex and Fundació de
recerca Sant Joan de Déu (‘SJD’) research team for the necessary arrangements.
Your input is invaluable for gathering a robust evidence base for the study.
Please be assured that all data provided to ICF, Spark Legal and Policy Consulting
(‘Spark’), Timelex and Fundació de recerca Sant Joan de Déu (‘SJD’) will be used for the
purpose of this study only. All personal data will remain confidential and will be deleted
as per the applicable data protection notice.
If you have any further questions regarding the organisation of the study, please do not
hesitate to contact the study team ([email protected]).
Should you need any further information related to the objectives and overall design of the
study, you may contact the project advisor at HaDEA, Soushma Sougoumarin
Looking forward to your response and thanking you in advance for your support.
Yours sincerely,
Philippe ROUX
Head of Unit
Electronically signed on 10/07/2025 12:10 (UTC+02) in accordance with Article 11 of Commission Decision (EU) 2021/2121
EUROPEAN HEALTH AND DIGITAL EXECUTIVE
AGENCY (HADEA)
Unit A2: EU4Health/SMP Food
Data Protection Notice for the Stakeholder Consultation Activities – Exploratory
study on the provision of care for Adolescent and Young Adult (AYA) cancer patients
in the Union (HADEA/2024/OP/0027)
This Data Protection Notice describes the measures taken to protect your personal data
with regard to the action involving the present data processing operation and what rights
you have as a data subject.
The European Health and Digital Executive Agency (HaDEA or Agency) protects the
fundamental rights and freedoms of natural persons and in particular your right to privacy
and the protection of your personal data.
Your personal data1 are processed in accordance with Regulation (EU) 2018/1725 of the
European Parliament and of the Council of 23 October 20182 on the protection of
individuals with regard to the processing of personal data by the Union institutions, bodies,
offices and agencies and on the free movement of such data.
1. What are the purposes of this processing activity?
The purpose of this DPN is to inform participants of interviews and/or survey as part of
the targeted consultation activities (Task 3 interviews and one online survey) for the
“Exploratory study on the provision of care for Adolescent and Young Adult (AYA) cancer
patients in the Union” about the processing activities related to their personal data.
This includes identifying and contacting relevant stakeholders; collecting their feedback
on the state of play of AYA cancer care in the 29 countries in scope; and analysing
stakeholder perspectives to inform policy recommendations on AYA cancer care
provisions.
This processing activity covers:
▪ Identifying stakeholders relevant for the consultation activities.
▪ Carrying out the consultation activities, which will consist in:
− Sending invitations to take the Survey (Task 3), follow up emails and
collection of feedback,
− Sending invitations and registration of participants to interviews (Task 3) and
inclusion in participants’ list,
− Conducting the interviews and survey,
− Storing data in our secured servers and conducting the analysis of the data,
aggregate data and prepare reports.
You have been identified as a stakeholder to be contacted since it has been concluded that
your views are relevant (your contact details were publicly available in your organisation’s
website as person of contact and/or shared with your approval by peers and/or you have
given your consent to be recontacted for this study from previous tasks (Task 2) and
1 Personal data shall mean any information relating to an identified or identifiable natural person (‘data subject’). An
identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier
such as a name, an identification number, location data, an online identifier or to one or more factors specific to the
physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2 Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of
natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and
on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ
L295/39 of 21.11.2018).
2
necessary for the targeted consultation activities (Task 3 survey and interviews), and
because you are part of one of the following stakeholder groups:
• Organisation representing AYA patients and survivors,
• Organisation representing AYA cancer patients’ carers and families,
• Relevant national authorities and public health authorities,
• Relevant health and care professionals,
• Clinical trial coordinators and pharma representatives,
• Academia and research institutes.
Your participation in the consultation activities mentioned above is entirely voluntary, so
you can refuse to take part if not interested, at any time. You will find further information
regarding the consultation process in the endorsement letter.
2. Who is the data controller?
The data controller of the processing operation is the Head of Unit A2 – EU4Health/SMP
Food of the Agency (HaDEA).
3. Who is the data processor?
The following entities process your personal data on HaDEA’s behalf:
• ICF S.A., Avenue Marnix 17, 1000 Brussels, Belgium (hereinafter referred to as
“Data Processor”) as the lead contractor for conducting the stakeholder
consultations, data collection, analysis, and reporting activities.
• Spark Legal and Policy Consulting (hereafter ‘Spark’) is a company registered
and incorporated under the laws of Belgium with its registered office located at
Rue Des Comédiens 22, 1000 Brussels, Belgium. Spark will be involved in the
following consultation activities, within Task 3: interviews. For the purpose of
carrying out these activities, Spark:
▪ Conduct the interviews,
▪ Record the interviews for accuracy and note taking purposes and only
with participants’ consent,
▪ Store responses,
▪ Conduct the analysis of the data,
▪ Conduct the clustering and anonymisation of the data before the final
reports are submitted,
▪ Delete the notes, recordings and any personal data associated with the
consultation activities after the final reports are shared with HaDEA.
Please read below section for how long we are keeping your data.
• ICF is supported by Fundacio Privada Recerca I Docencia Sant Joan Deu
(hereafter ‘SJD’), is a private research foundation located at Santa Rosa 39-57
4Planta (Edificio PCCB) 08006 Barcelona, Spain. SJD will be involved in the
following consultation activities, within Task 3: interviews. For the purpose of
carrying out the interviews, SJD will:
• Conduct the interviews,
• Record the interview for accuracy and note taking purposes and only
with participants’ consent,
• Store interviews’ responses,
• Conduct the analysis of the data,
• Conduct the clustering and anonymisation of the data before the final
reports are submitted,
• Delete the notes, recordings and any personal data associated with the
3
consultation activities after the final reports are shared with HaDEA.
Please read below section for how long we are keeping your data.
4. Which personal data is collected?
The following of your personal data are collected for the purpose outlined above:
• Full name (first and last names),
• Role or function within your organisation,
• Name of your organisation,
• Professional contact information (email address and phone number, if needed for
organisation of the interview),
• Country or region of work,
• Responses and insights shared during consultation activities (Task 3 survey and
interviews) related to AYA cancer care provision, through (closed and open
questions regarding your knowledge on the matter and professional experience.
Personal data indicated above are mandatory for the purpose(s) outlined above.
In addition, the following non-mandatory personal data may be collected: audio and/or
video recordings of interviews. These will only be processed based on your explicit prior
consent.3
Before beginning the interview, you will be informed that the data collected through the
consultation are treated according to the study’s data privacy notice (which is this DPN),
attached to the email you received inviting you to take part to the specific consultation.
At the beginning of the interviews, you will be asked if you consent to the recording. The
recording will not be publicly available; it will be used only for note taking purposes, and
it will be deleted after, accordingly to the maximum period of retention (cf. retention
paragraph below).
Furthermore, you may spontaneously provide other, non-requested personal data in the
context of your reply to the targeted consultation regarding quality of life of cancer patients
and survivors (e.g. personal health related data). If so, we will either disregard or
anonymise the received data through a central contact point.
Your personal data will not be disclosed when reporting the consultation results. Thus, the
replies to the interviews will be presented anonymously. During the interview, you will be
asked to accept this privacy policy to continue with the consultation, and there will be a
track in the notes from the interviews of the express or denied consent.
Information will be anonymised before providing the feedback to the contracting authority,
and thus stakeholders cannot be identified from their inputs. For the publishable study
report, the information will also be anonymised.
5. Who has access to the personal data of data subjects and to whom can they be
disclosed?
The recipients of your personal data will be as follows:
• Authorised staff of HaDEA’s A2 and the European Commission’s (DG SANTE
B1 & DG RTD D1) units involved in this study,
• Authorised and need-to know staff of HaDEA contractors responsible for the
consultation activities,
3 Processing of non-compulsory personal data can only be based on consent and individual tick boxes have
to be provided when data is collected to document the consent.
4
• Bodies charged with monitoring or inspection tasks in application of EU law
(e.g. EC internal audit, Court of Auditors, European Anti-fraud Office (OLAF),
the European Ombudsman, the European Data Protection Supervisor, the
European Public Prosecutor), in compliance with the relevant legislation.
Third party tools used for the organisation of the consultation activities:
• Microsoft Teams: for the purpose of hosting the interviews, is a third-party
tool under Microsoft O365 which collects email, title, first name, last name,
country, company and job, phone number, IP address, and browser-generated
information (including device information, operating system, device type,
cookies or other technologies used to analyse users’ activity). It hosts the
collected personal data within the European Union. Nevertheless, data subjects
shall be informed that Microsoft is a US-based company but data will be stored
only in EU/EEA servers. Data will be securely deleted after the end of retention
period (see #8). Microsoft privacy statement can be found at Microsoft Privacy
Statement – Microsoft privacy.
• Forsta: for the purpose of hosting the survey, is a third-party tool that collects
survey responses, including the country and stakeholder group. Forsta does not
collect any information other than the responses to the survey questions. It
stores data on servers in Germany and has backups within the European Union.
Data will be securely deleted after the end of retention period (see #8). Forsta’s
privacy statement can be found at Forsta Privacy Notice.
Your personal data will not be transferred to third countries or international
organisations.
The processing of your data will not include automated decision-making (such as
profiling).
6. Which is the legal basis for processing your personal data?
The legal basis for the processing activities are:
• Article 5(1)(a) of Regulation (EU) 2018/1725: processing is necessary for the
performance of a task carried out in the public interest or in the exercise of
official authority vested in the Union institution or body4, laid down in Union
law5 for your mandatory personal data indicated above.
• For non-mandatory personal data indicated above, i.e., interview recordings),
Article 5(1)(d): processing is based on your informed prior consent.
• The subject matter of the consultation activity will not require you to provide
special categories of personal data, and in particular data about your health.
However, in case you would voluntarily provide special categories of data, their
processing will be based on your explicit consent, in line with Article 10 (2)(a) of
Regulation (EU) 2018/1725.
7. How to withdraw your consent and the consequences of doing this
If you provide consent (e.g. for your interview to be recorded, to take part in the interview),
you may withdraw it at any time by contacting the study team.
4 Act of Establishment: Commission Implementing Decision (EU) 2021/173 of 12 February 2021
establishing the European Health and Digital Executive Agency
5 Regulation (EU) 2021/522 establishing a programme for the EU’s action in the field of health (EU4health
programme) for the period 2021–2027
5
If you want us to delete the related personal data (e.g. recordings) please contact us at the
contact details below and clearly indicate your deletion request, and we will confirm
deletion without undue delay and within a month of the receipt of our request.
If you want us to delete your survey responses, please contact us at the contact details
below before the survey closes. As the survey platform does not collect any personal
information and responses are anonymised in analysis, it will not be possible for the study
team to identify your response after the survey has been closed.
Please note that withdrawing your consent does not affect the lawfulness of any
processing based on your consent before this consent is withdrawn. Attention is drawn to
the consequences of a deletion request, which means that all your contact details will be
lost.
8. How long do we keep your personal data?
Your personal data will be kept for a maximum period of 6 months after the end of the
project. Data will be securely deleted at the end of this period, on the 31 March 2027.
9. What are your rights regarding your personal data?
You have the right to access your personal data and to request your personal data to be
rectified, if the data is inaccurate or incomplete; where applicable, you have the right to
request restriction or to object to processing, to request a copy or erasure of your personal
data held by the data controller. If processing is based on your consent, you have the right
to withdraw your consent at any time, without affecting the lawfulness of the processing
based on your consent before its withdrawal.
Your request to exercise one of the above rights will be dealt with without undue delay and
within one month of its receipt.
If you have any queries concerning the processing of your personal data or wish to exercise
any of the rights described above, you contact the data controller via: HADEA-A2-DATA-
[email protected] and HaDEA DPO [email protected], with the
contractor’s contact point at: [email protected]
You shall have right to recourse at any time to the European Data Protection Supervisor
Version: December2025
6
Consent Form
I confirm that I have read and understood the Data Protection Notice related to my
participation in the stakeholder consultation for the “Exploratory Study on the Provision
of Care for Adolescent and Young Adult (AYA) Cancer Patients in the Union.
☐ I consent to participating in this interview / survey.
☐ I consent to the audio recording of this interview for the purposes of analysis and
reporting under the conditions described.
☐ I consent to the video recording of this interview for the purposes of analysis and
reporting under the conditions described.
☐ I provide my explicit consent with processing of health-related personal data that
I provide on a voluntary basis. Please note that the subject matter of this consultation
activity will not require you to provide special categories of personal data (e.g., data
about your health etc.). However, in case you would voluntarily provide special
categories of data, their processing will be based on your explicit consent.
My participation is voluntary, and I may withdraw my consent at any time without penalty.
For any questions or to exercise my data protection rights, I may contact the data controller
(HaDEA) or its Data Protection Officer using the contact details provided in the DPN.
Electronically signed on 11/12/2025 17:01 (UTC+01) in accordance with Article 11 of Commission Decision (EU) 2021/2121
|
Tähelepanu! Tegemist on väljastpoolt asutust saabunud kirjaga. Tundmatu saatja korral palume linke ja faile mitte avada. |
|
Keiu Paapsi
teadur tel 53870727 Jälgi meid ka Facebookis |
Commission européenne, 2920 Luxembourg, LUXEMBOURG – Tel. +352 43011
Office: DRB- A3/054A – Tel. direct line +352 4301-37542
EUROPEAN COMMISSION DIRECTORATE-GENERAL FOR HEALTH AND FOOD SAFETY
Public Health, Cancer and Health security
Cancer, Health in all Policies
Luxembourg SANTE.B.1/PR/sg
Subject: HaDEA/2024/OP/0027 - Exploratory study on the provision of care for
Adolescent and Young Adult (AYA) cancer patients in the Union
Dear Sir/Madam,
With this letter, I would like to inform you that the European Health and Digital Executive
Agency (HaDEA), acting under the powers delegated by the European Commission, has
initiated an "Exploratory study on the provision of care for Adolescent and
Young Adult (AYA) cancer patients in the Union", under service contract
No. HaDEA/2024/OP/0027.
This topic supports a major goal of both the Europe’s Beating Cancer Plan1 and the
Horizon Europe Cancer Mission2, namely, to improve the quality of life of cancer patients
and survivors.
Despite its relatively low incidence among adolescents and young adults, cancer remains
a significant contributor to mortality in individuals aged 15-39 (AYA age range). Unique
biological characteristics of tumours in AYAs often result in poorer treatment outcomes
compared to younger or older patients with similar types of cancer. AYAs, being in a
distinct age group between childhood and adulthood, require specialised care issues such
as fertility concerns, psychological well-being, education and career development, body
image, sexuality and relationships, and alcohol/substance abuse. Moreover, AYAs
demonstrate different health-seeking behaviours compared to adults, making it even more
challenging to provide them with appropriate preventive measures and care services.
Despite the necessity for dedicated AYA services, their availability varies significantly
across EU Member States, Iceland and Norway, contributing to inequalities in cancer care
provision, leading to inadequate support and care for AYAs facing cancer.
The study will be conducted across all 27 EU Member States, Iceland and Norway, and
aims to map the provision of healthcare to Adolescent and Young Adults (AYA) cancer
patients and survivors. The analysis will produce a clear picture of the approaches available
at national (or, where relevant, regional/local) level, including identification of barriers for
the integration of dedicated AYA care and services in healthcare systems.
1 A cancer plan for Europe - European Commission
2 EU Mission: Cancer - European Commission
2
Based on the evidence collected, the study will document and analyse the major barriers
and enabling factors, detected in each of the 27 EU Member States, Iceland and Norway,
for the design and provision of quality care before, during and after cancer treatment, but
also highlight best practices and innovative approaches into this provision.
Recommendations for future actions directed at EU Member States, Iceland and Norway
will be developed, together with relevant strategies to improve the provision of targeted
healthcare to AYA cancer patient and survivors.
ICF, together with Spark Legal and Policy Consulting (‘Spark’), Fundació de recerca Sant
Joan de Déu (‘SJD’) and Timelex, were awarded an 18-month contract to provide the
contracting authority with an external and independent study, which is expected to be
completed by the end of 2026.
During the study, the project team will undertake consultations, which include interviews
and focus groups with key stakeholders, across the EU 27 Member States, Iceland, and
Norway, to validate a model of provision of quality healthcare and services for AYA
cancer patients and survivors, as well as to collect their views and opinions on gaps,
suggested refinements and insights based on their expertise and/or experience. Surveys and
interviews will also be conducted with stakeholders to assess the current state of AYA
cancer care provision across the EU 27 Member States, Iceland, and Norway, to gather
views on insights, experiences and data on existing practices, challenges, enabling factors,
best practices, and areas for improvement.
We would kindly ask you to support the consultation process when you are contacted
by ICF, Spark Legal and Policy Consulting (‘Spark’), Timelex and Fundació de
recerca Sant Joan de Déu (‘SJD’) research team for the necessary arrangements.
Your input is invaluable for gathering a robust evidence base for the study.
Please be assured that all data provided to ICF, Spark Legal and Policy Consulting
(‘Spark’), Timelex and Fundació de recerca Sant Joan de Déu (‘SJD’) will be used for the
purpose of this study only. All personal data will remain confidential and will be deleted
as per the applicable data protection notice.
If you have any further questions regarding the organisation of the study, please do not
hesitate to contact the study team ([email protected]).
Should you need any further information related to the objectives and overall design of the
study, you may contact the project advisor at HaDEA, Soushma Sougoumarin
Looking forward to your response and thanking you in advance for your support.
Yours sincerely,
Philippe ROUX
Head of Unit
Electronically signed on 10/07/2025 12:10 (UTC+02) in accordance with Article 11 of Commission Decision (EU) 2021/2121
EUROPEAN HEALTH AND DIGITAL EXECUTIVE
AGENCY (HADEA)
Unit A2: EU4Health/SMP Food
Data Protection Notice for the Stakeholder Consultation Activities – Exploratory
study on the provision of care for Adolescent and Young Adult (AYA) cancer patients
in the Union (HADEA/2024/OP/0027)
This Data Protection Notice describes the measures taken to protect your personal data
with regard to the action involving the present data processing operation and what rights
you have as a data subject.
The European Health and Digital Executive Agency (HaDEA or Agency) protects the
fundamental rights and freedoms of natural persons and in particular your right to privacy
and the protection of your personal data.
Your personal data1 are processed in accordance with Regulation (EU) 2018/1725 of the
European Parliament and of the Council of 23 October 20182 on the protection of
individuals with regard to the processing of personal data by the Union institutions, bodies,
offices and agencies and on the free movement of such data.
1. What are the purposes of this processing activity?
The purpose of this DPN is to inform participants of interviews and/or survey as part of
the targeted consultation activities (Task 3 interviews and one online survey) for the
“Exploratory study on the provision of care for Adolescent and Young Adult (AYA) cancer
patients in the Union” about the processing activities related to their personal data.
This includes identifying and contacting relevant stakeholders; collecting their feedback
on the state of play of AYA cancer care in the 29 countries in scope; and analysing
stakeholder perspectives to inform policy recommendations on AYA cancer care
provisions.
This processing activity covers:
▪ Identifying stakeholders relevant for the consultation activities.
▪ Carrying out the consultation activities, which will consist in:
− Sending invitations to take the Survey (Task 3), follow up emails and
collection of feedback,
− Sending invitations and registration of participants to interviews (Task 3) and
inclusion in participants’ list,
− Conducting the interviews and survey,
− Storing data in our secured servers and conducting the analysis of the data,
aggregate data and prepare reports.
You have been identified as a stakeholder to be contacted since it has been concluded that
your views are relevant (your contact details were publicly available in your organisation’s
website as person of contact and/or shared with your approval by peers and/or you have
given your consent to be recontacted for this study from previous tasks (Task 2) and
1 Personal data shall mean any information relating to an identified or identifiable natural person (‘data subject’). An
identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier
such as a name, an identification number, location data, an online identifier or to one or more factors specific to the
physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2 Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of
natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and
on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ
L295/39 of 21.11.2018).
2
necessary for the targeted consultation activities (Task 3 survey and interviews), and
because you are part of one of the following stakeholder groups:
• Organisation representing AYA patients and survivors,
• Organisation representing AYA cancer patients’ carers and families,
• Relevant national authorities and public health authorities,
• Relevant health and care professionals,
• Clinical trial coordinators and pharma representatives,
• Academia and research institutes.
Your participation in the consultation activities mentioned above is entirely voluntary, so
you can refuse to take part if not interested, at any time. You will find further information
regarding the consultation process in the endorsement letter.
2. Who is the data controller?
The data controller of the processing operation is the Head of Unit A2 – EU4Health/SMP
Food of the Agency (HaDEA).
3. Who is the data processor?
The following entities process your personal data on HaDEA’s behalf:
• ICF S.A., Avenue Marnix 17, 1000 Brussels, Belgium (hereinafter referred to as
“Data Processor”) as the lead contractor for conducting the stakeholder
consultations, data collection, analysis, and reporting activities.
• Spark Legal and Policy Consulting (hereafter ‘Spark’) is a company registered
and incorporated under the laws of Belgium with its registered office located at
Rue Des Comédiens 22, 1000 Brussels, Belgium. Spark will be involved in the
following consultation activities, within Task 3: interviews. For the purpose of
carrying out these activities, Spark:
▪ Conduct the interviews,
▪ Record the interviews for accuracy and note taking purposes and only
with participants’ consent,
▪ Store responses,
▪ Conduct the analysis of the data,
▪ Conduct the clustering and anonymisation of the data before the final
reports are submitted,
▪ Delete the notes, recordings and any personal data associated with the
consultation activities after the final reports are shared with HaDEA.
Please read below section for how long we are keeping your data.
• ICF is supported by Fundacio Privada Recerca I Docencia Sant Joan Deu
(hereafter ‘SJD’), is a private research foundation located at Santa Rosa 39-57
4Planta (Edificio PCCB) 08006 Barcelona, Spain. SJD will be involved in the
following consultation activities, within Task 3: interviews. For the purpose of
carrying out the interviews, SJD will:
• Conduct the interviews,
• Record the interview for accuracy and note taking purposes and only
with participants’ consent,
• Store interviews’ responses,
• Conduct the analysis of the data,
• Conduct the clustering and anonymisation of the data before the final
reports are submitted,
• Delete the notes, recordings and any personal data associated with the
3
consultation activities after the final reports are shared with HaDEA.
Please read below section for how long we are keeping your data.
4. Which personal data is collected?
The following of your personal data are collected for the purpose outlined above:
• Full name (first and last names),
• Role or function within your organisation,
• Name of your organisation,
• Professional contact information (email address and phone number, if needed for
organisation of the interview),
• Country or region of work,
• Responses and insights shared during consultation activities (Task 3 survey and
interviews) related to AYA cancer care provision, through (closed and open
questions regarding your knowledge on the matter and professional experience.
Personal data indicated above are mandatory for the purpose(s) outlined above.
In addition, the following non-mandatory personal data may be collected: audio and/or
video recordings of interviews. These will only be processed based on your explicit prior
consent.3
Before beginning the interview, you will be informed that the data collected through the
consultation are treated according to the study’s data privacy notice (which is this DPN),
attached to the email you received inviting you to take part to the specific consultation.
At the beginning of the interviews, you will be asked if you consent to the recording. The
recording will not be publicly available; it will be used only for note taking purposes, and
it will be deleted after, accordingly to the maximum period of retention (cf. retention
paragraph below).
Furthermore, you may spontaneously provide other, non-requested personal data in the
context of your reply to the targeted consultation regarding quality of life of cancer patients
and survivors (e.g. personal health related data). If so, we will either disregard or
anonymise the received data through a central contact point.
Your personal data will not be disclosed when reporting the consultation results. Thus, the
replies to the interviews will be presented anonymously. During the interview, you will be
asked to accept this privacy policy to continue with the consultation, and there will be a
track in the notes from the interviews of the express or denied consent.
Information will be anonymised before providing the feedback to the contracting authority,
and thus stakeholders cannot be identified from their inputs. For the publishable study
report, the information will also be anonymised.
5. Who has access to the personal data of data subjects and to whom can they be
disclosed?
The recipients of your personal data will be as follows:
• Authorised staff of HaDEA’s A2 and the European Commission’s (DG SANTE
B1 & DG RTD D1) units involved in this study,
• Authorised and need-to know staff of HaDEA contractors responsible for the
consultation activities,
3 Processing of non-compulsory personal data can only be based on consent and individual tick boxes have
to be provided when data is collected to document the consent.
4
• Bodies charged with monitoring or inspection tasks in application of EU law
(e.g. EC internal audit, Court of Auditors, European Anti-fraud Office (OLAF),
the European Ombudsman, the European Data Protection Supervisor, the
European Public Prosecutor), in compliance with the relevant legislation.
Third party tools used for the organisation of the consultation activities:
• Microsoft Teams: for the purpose of hosting the interviews, is a third-party
tool under Microsoft O365 which collects email, title, first name, last name,
country, company and job, phone number, IP address, and browser-generated
information (including device information, operating system, device type,
cookies or other technologies used to analyse users’ activity). It hosts the
collected personal data within the European Union. Nevertheless, data subjects
shall be informed that Microsoft is a US-based company but data will be stored
only in EU/EEA servers. Data will be securely deleted after the end of retention
period (see #8). Microsoft privacy statement can be found at Microsoft Privacy
Statement – Microsoft privacy.
• Forsta: for the purpose of hosting the survey, is a third-party tool that collects
survey responses, including the country and stakeholder group. Forsta does not
collect any information other than the responses to the survey questions. It
stores data on servers in Germany and has backups within the European Union.
Data will be securely deleted after the end of retention period (see #8). Forsta’s
privacy statement can be found at Forsta Privacy Notice.
Your personal data will not be transferred to third countries or international
organisations.
The processing of your data will not include automated decision-making (such as
profiling).
6. Which is the legal basis for processing your personal data?
The legal basis for the processing activities are:
• Article 5(1)(a) of Regulation (EU) 2018/1725: processing is necessary for the
performance of a task carried out in the public interest or in the exercise of
official authority vested in the Union institution or body4, laid down in Union
law5 for your mandatory personal data indicated above.
• For non-mandatory personal data indicated above, i.e., interview recordings),
Article 5(1)(d): processing is based on your informed prior consent.
• The subject matter of the consultation activity will not require you to provide
special categories of personal data, and in particular data about your health.
However, in case you would voluntarily provide special categories of data, their
processing will be based on your explicit consent, in line with Article 10 (2)(a) of
Regulation (EU) 2018/1725.
7. How to withdraw your consent and the consequences of doing this
If you provide consent (e.g. for your interview to be recorded, to take part in the interview),
you may withdraw it at any time by contacting the study team.
4 Act of Establishment: Commission Implementing Decision (EU) 2021/173 of 12 February 2021
establishing the European Health and Digital Executive Agency
5 Regulation (EU) 2021/522 establishing a programme for the EU’s action in the field of health (EU4health
programme) for the period 2021–2027
5
If you want us to delete the related personal data (e.g. recordings) please contact us at the
contact details below and clearly indicate your deletion request, and we will confirm
deletion without undue delay and within a month of the receipt of our request.
If you want us to delete your survey responses, please contact us at the contact details
below before the survey closes. As the survey platform does not collect any personal
information and responses are anonymised in analysis, it will not be possible for the study
team to identify your response after the survey has been closed.
Please note that withdrawing your consent does not affect the lawfulness of any
processing based on your consent before this consent is withdrawn. Attention is drawn to
the consequences of a deletion request, which means that all your contact details will be
lost.
8. How long do we keep your personal data?
Your personal data will be kept for a maximum period of 6 months after the end of the
project. Data will be securely deleted at the end of this period, on the 31 March 2027.
9. What are your rights regarding your personal data?
You have the right to access your personal data and to request your personal data to be
rectified, if the data is inaccurate or incomplete; where applicable, you have the right to
request restriction or to object to processing, to request a copy or erasure of your personal
data held by the data controller. If processing is based on your consent, you have the right
to withdraw your consent at any time, without affecting the lawfulness of the processing
based on your consent before its withdrawal.
Your request to exercise one of the above rights will be dealt with without undue delay and
within one month of its receipt.
If you have any queries concerning the processing of your personal data or wish to exercise
any of the rights described above, you contact the data controller via: HADEA-A2-DATA-
[email protected] and HaDEA DPO [email protected], with the
contractor’s contact point at: [email protected]
You shall have right to recourse at any time to the European Data Protection Supervisor
Version: December2025
6
Consent Form
I confirm that I have read and understood the Data Protection Notice related to my
participation in the stakeholder consultation for the “Exploratory Study on the Provision
of Care for Adolescent and Young Adult (AYA) Cancer Patients in the Union.
☐ I consent to participating in this interview / survey.
☐ I consent to the audio recording of this interview for the purposes of analysis and
reporting under the conditions described.
☐ I consent to the video recording of this interview for the purposes of analysis and
reporting under the conditions described.
☐ I provide my explicit consent with processing of health-related personal data that
I provide on a voluntary basis. Please note that the subject matter of this consultation
activity will not require you to provide special categories of personal data (e.g., data
about your health etc.). However, in case you would voluntarily provide special
categories of data, their processing will be based on your explicit consent.
My participation is voluntary, and I may withdraw my consent at any time without penalty.
For any questions or to exercise my data protection rights, I may contact the data controller
(HaDEA) or its Data Protection Officer using the contact details provided in the DPN.
Electronically signed on 11/12/2025 17:01 (UTC+01) in accordance with Article 11 of Commission Decision (EU) 2021/2121