Respect for privacy and the protection of personal data is a factor of trust, a value that is particularly important to the IHU-ICAN, which is committed to respecting fundamental rights and freedoms.
This policy reflects the commitments made in our day-to-day activities to use personal data responsibly.
ICAN-IHU reserves the right, at its discretion, to change, modify, add or remove any part of our Privacy Policy at any time, without notice. Any new version of the Privacy Policy will come into effect on the date of its publication.
1. Contact details for the Data Protection Officer
The Data Protection Officer (DPO) is a specialist in the protection of personal data and is the main contact for the Commission Nationale de l’Informatique et des Libertés (CNIL) and all persons concerned by the collection or processing of personal data. In order to protect everyone’s privacy and personal data, the IHU-ICAN has appointed a DPO who carries out his duties independently within the IHU. The DPO (Mr Decraene) can be contacted at the following e-mail address: mesdonnees@ihuican.org
2. How do we collect your personal data?
The IHU-ICAN may collect personal data in several ways, depending on the specific nature of the processing;
- Direct collection:
- As part of clinical research initiated by the IHU-ICAN;
- As part of the recruitment of new employees;
- As part of the organisation of public events (congresses, seminars, etc.)
- Maintaining contact databases for suppliers, customers, partners, etc.
- Indirectly: during a sub-contracting mission as part of clinical research
3. What information do we collect and for what purpose(s)?
The following tables summarise all the data collected and the purposes for which it is processed:
3.1 Strictly necessary cookies
These cookies are necessary for operations specific to the services provided on our websites. They are used to provide basic functionality on our websites, such as remembering information that has been entered into a form. If you prevent the installation of these cookies, you will no longer be able to use these functions and the website may not function effectively.
3.2 Performance cookies
These cookies are used to collect anonymous data for statistical purposes.
They enable us to measure the website audience and analyse how visitors surf the website (number of visitors to the website, number of visits per page, time spent on each page, location of clicks, measures of advertising effectiveness, etc.). They are also used to detect navigation problems and any other difficulties. These cookies help us to improve our website and your browsing experience.
3.3 List of cookies used
3.4 Recruitment of new employees
3.5 Management of the contact database of suppliers, customers and partners:
3.6 Performance of a subcontracting assignment in the context of clinical research
3.7 Performance of a subcontracting assignment in the context of clinical research
4. Who are the IHU ICAN’s subcontractors?
The information collected may be communicated to third parties bound to the IHU-ICAN by contract for the performance of sub-contracted tasks necessary for the purposes of processing. As part of the performance of their services, third parties have only limited access to the data and are obliged to use it in accordance with the instructions given to them by ICAN and the provisions of the applicable legislation on the protection of personal data.
5. What are your rights?
Under certain conditions (see point 5.3), you have a right of access, rectification, deletion, limitation, and the right to define directives concerning the fate of your data in the event of your death, as well as a right to the portability of your data.
These rights are not absolute: you may exercise them within the legal framework provided and within the limits of these rights. In some cases we will not be able to respond favourably to your request (legal obligation, compliance with our commitments to you, etc.). If this is the case, we will inform you of the reason(s) for this refusal.
5.1 Contact us
You may exercise your rights:
- By writing to the following email address: mesdonnees@ihuican.org
5.2 Supporting documents
Pursuant to article 14 of decree no. 2007-451 of 25 March 2007 implementing law no. 78-17 of 6 January 1978 on data processing, data files and individual liberties, your request to exercise one of your rights must be accompanied by a photocopy of an identity document bearing the holder’s signature. Your request must also specify the address to which the reply should be sent.
We will then have one (1) month following receipt of the request to reply. This period may be extended by two (2) months depending on the complexity and number of requests.
5.3 Right of access, rectification or, under specific conditions, deletion
For all processing carried out by the IHU-ICAN, you may access the personal data that we have collected directly from you in order to rectify, complete or delete any inaccurate information by contacting us directly at the email address indicated above.
You have the right to have your personal data deleted if :
- It is no longer necessary for the purposes for which it was collected or processed;
or
- You have objected to the data being processed and there are no compelling legitimate grounds for doing so;
or
- The personal data must be deleted in order to comply with a legal obligation provided for by the legislation of the European Union or the Member States.
As a candidate or a person submitting an unsolicited application, you may request that your data be deleted.
As a patient taking part in a clinical study, you may withdraw your consent at any time from the doctor in charge of your follow-up.
5.4 Right to limit processing
For processing carried out on the legal grounds of the IHU-ICAN’s legitimate interest or the public interest, you have the right to obtain the restriction of processing when one of the following conditions applies:
- You dispute the accuracy of the personal data ;
or
- The processing is unlawful and you object to the erasure of your personal data and instead request the restriction of its use;
or
- You have objected to the processing and a check must be made to determine whether IHU-ICAN’s legitimate reasons outweigh yours.
or
- iHU-ICAN no longer needs the personal data for the purposes of processing, but it is still necessary for you to establish, exercise or defend legal claims.
5.5 Right to portability of your personal data
For processing carried out on the legal bases of consent and performance of a contract, in accordance with Article 20 of the GDPR, where the processing is carried out using automated processes, you have the right to the portability of your personal data existing in electronic format, i.e. to receive the personal data you have provided to IHU-ICAN, in a structured, commonly used and machine-readable format and to transmit it to another data controller.
To exercise your right to the portability of your personal data, please contact us using one of the means made available to you in paragraph 5.1 Contact of this policy.
5.6 Right to lodge a complaint with the competent supervisory authority
If, after contacting us, you feel that your rights have not been respected, you may lodge a complaint with the CNIL(https://www.cnil.fr/fr/plaintes)
5.7 Directives concerning the fate of your personal data after your death
For processing carried out on the legal basis of consent, You have the right to define directives relating to the fate of your personal data after your death.
To exercise this right, please contact us at the address given in 5.1. With the subject “Directives concerning the fate of my personal data after my death”.
Indicate the person(s) who may act on our behalf in the event of your death, as well as the instructions you would like us to follow.
In the event that a data subject dies without having left instructions concerning the fate of his or her personal data after his or her death, the beneficiaries of the deceased may request the deletion of the deceased’s data once all the necessary steps have been completed, by contacting us by email at the address given above.
