use of the patient’s data were approved by the regional eth