ISPAD Montréal 2025 Privacy Policy & Data Protection Statement  

1. Introduction 

Tudo Bem Tudo Bom (TBTB), acting on behalf of Sanofi Global as the event organizer, and  Sentrex Health Solutions, the designated clinical and logistical partner, are committed to protecting your personal information and upholding the highest standards of privacy, security, and data protection during the ISPAD 2025 screening event held at Palais des congrès de Montréal, November 5–8, 2025. This policy explains how we, together with our partners, collect, use, disclose, share, store and securely process your personal information. Sanofi Global, as the medical sponsor of this screening initiative, does not access or process any participant-identifiable data and receives only aggregated, anonymized reports for program evaluation purposes. 

2. Purpose

Your blood sample and other personal health information is being collected for the purposes of conducting a screening initiative using the Type 1 Diabetes Early Detection Testwhich is a non-diagnostic screening test for Type I diabetes. The screening test is intended for educational purposes only, intended to assist in how your patients would experience having the test results obtained. 

3. Who Is Responsible 

TBTB USA, LLC (11921 S Dixie Highway, Miami, FL 33156, USA) serves as the event organizer and data controller for aggregated and anonymized information.   
TBTB only receives anonymized data for operational reporting and analytics. 

Privacy Officer – TBTB: Andreina Mendez:  andreina.mendez@tbtbglobal.com 

Sentrex Health (120 Valleywood Dr, Markham, ON L3R 6A7, Canada) acts as the clinical and logistical data processor, responsible for participant registration, consent collection, sample handling, and secure delivery of results to participants. 

Privacy Officer – Sentrex: privacy@sentrex.com, 120 Valleywood Drive Markham, ON L3R 6A7, Canada 

Revvity Omics, Inc., (250 Industry Drive, Suite 400, Pittsburgh, PA 15275, USA) is the testing laboratory performing analysis of the collected samples. 

Sanofi Global, the medical sponsor of the event will only receive aggregated, anonymized reports for program evaluation purposes.  

Sanofi Privacy Officer 

Website: https://www.sanofi.com/en/data-protection-contact 

4. What Personal Data We Collect 

We collect and process the following information from participants:  

– Identity: full name, date of birth, professional status and licensing  

– Contact details: email 

– Home country of practice  

– Treating physician’s name and secure contact information  

– Consent logs and e-signatures  

– Pre-screening health questionnaire (related to diabetes screening)  

– Sample information (date/time, collected by whom)  

– Test results from Revvity (linked by participant ID)  

• – Completion and retention status of consent  

5. Why We Collect and Use This Data 

We collect, use, and retain your data solely to:  

– Confirm eligibility and schedule your screening  

– Carry out blood sample collection and analysis  

– Deliver your results to you and your listed treating physician(s) 

– Provide timely clinical follow-up for urgent/critical results  

– Support quality assurance, audit, and program improvement (using only anonymized, aggregate data for analysis)  

– Comply with all applicable legal, medical, and regulatory requirements in Quebec and the country the participant resides in.  

Your personal data will never be used for any marketing or direct commercial purposes.  

6. How and With Whom We Share Your Data 

• – Clinical/Personal data is shared only with the authorized prescriber, logistical partner, and Revvity (for sample analysis), as required for event operations. Please note, Sanofi will not have access to this data, except for participants from countries with transparency laws.  

• – Results are sent securely to your designated treating physician when possible by encrypted email and to you via a password protected portal. 

• – Analytics: Only fully anonymized, aggregate, operational data is shared with Sanofi and  TBTB Global for program evaluation.  

• – Vendors and partners: All event vendors handling personal data (logistics, lab, analytics) sign contracts that specify their privacy, security, and breach notification obligations. 

Transparency Disclosure for Healthcare Professionals Participating in Screenings Provided by Sanofi 

Sanofi is committed to transparency in its interactions with healthcare professionals consistent with applicable laws in countries in which Sanofi has Affiliates. Please be advised that the in-kind value of this screening may be considered a transfer of value under applicable transparency disclosure and reporting laws and regulations. If required by the laws or regulations of your country, Sanofi will collect and report the value of this screening to the appropriate government authorities or websites for subsequent public disclosure where applicable. This may include sharing your name, relevant details, and the nature of the screening, as mandated by these laws and regulations. If applicable, a separate consent for this individual publication will be collected. The in-kind value of this screening is $150.00 USD. 

7. Cross-Border Processing and Safeguards 

Your specimen and personal information are transferred to and processed by Revvity Omics, Inc. in the United States.  

• – Sanofi has completed a privacy impact assessment and has implemented contractual and technical safeguards to protect your information, even where laws may differ.  

• – Only the minimum information needed for sample identification and testing is sent outside Quebec.  

8. Retention and Deletion 

Clinical and operational records (including consent logs) will be retained for 2 years and then irreversibly destroyed.  

• – Anonymized, aggregate data (containing no personally identifiable information) may be retained for quality analysis.  

9. Your Rights and How to Exercise Them 

You have the right to:  

• – Access and correct your stored personal information  

• – Withdraw your consent at any time up to irreversible data processing or anonymization  

• – Ask about or challenge any privacy concerns by contacting Sentrex and TBTB’s Privacy Officer (see above)  

• – Make a privacy complaint to the Québec CAI (Commission d’accès à l’information): www.cai.gouv.qc.ca/ 

10. Security Safeguards 

We use appropriate administrative, technical, and physical safeguards, such as:  

• – Data encryption (at rest and in transit)  

• – Secure access controls and strong password practices  

• – Staff training on privacy and incident response  

• – Locked and restricted physical storage for paper records or samples  

• – Secure means of result delivery (never plain email)  

• – Tamper-evident sample handling for shipping  

• – Monitored deletion of records upon expiry date  

11. Data Breaches and Incidents 

In the event of a data breach or privacy incident that creates a risk of serious harm, you will be notified promptly along with the Québec CAI, as required by law. The listed Privacy Officers will oversee investigation, reporting, and remediation measures.  

12. Changes to This Privacy Policy 

We may update this policy as laws or practices evolve. The most current version is always available at the screening event and will be provided on request.  

13. Contact

TBTB Privacy Officer  

Name: Andreina Mendez  

Email: andreina.mendez@tbtbglobal.com  

Sentrex Privacy Officer  

Email: privacy@sentrex.com 

Mailing address: 
Attn: Chief Privacy Officer 
120 Valleywood Drive 
Markham, ON L3R 6A7, Canada 

Sanofi Privacy Officer – Website: https://www.sanofi.com/en/data-protection-contact

14. Participant Responsibility for Results and Liability Limitation 

Results are shared directly with you and with copy to your treating physician (where contact information has been provided). You assume full responsibility for promptly sharing and discussing your results with your treating physician and for seeking appropriate clinical follow-up or medical advice. By providing consent and participating, you acknowledge that all events partners, authorized prescribers, and associated vendors have no responsibility or liability for ensuring your clinician reviews, interprets, or acts upon your results after these have been securely transmitted to you and/or your listed clinician, in accordance with Law 25 and applicable regulations. This limitation does not affect your rights in the event of demonstrable negligence, breach of professional obligations, or privacy/data protection violations by Sanofi, its partners, or authorized prescribers.  

Signature:  

Approved by Sentrex Privacy Officer: John Greiss  Date: 30Oct2025  

Approved by TBTB Privacy Officer: Andreina Mendez  Date: 30Oct2025 

Approved by Sanofi Privacy Officer: Sanofi Global Privacy Officer  Date: 30Oct2025