General personal data protection policy

Respect for privacy and the protection of personal data constitutes a factor of trust, a value to which the IHU-ICAN is particularly attached, by endeavoring to respect fundamental rights and freedoms.

This policy demonstrates the commitments implemented in the context of daily activities for the responsible use of personal data.

IHU ICAN reserves the right, at its discretion, to change, modify, add or remove any part of our Privacy Policy at any time, without notice. Any new version of the Privacy Policy will come into effect on the date of its publication.

1. Contact details of the Data Protection Officer

The “Data Protection Officer” or “Data Protection Officer” (DPO) is a specialist in the protection of personal data and the privileged interlocutor of the National Commission for Computing and Liberties (CNIL) and of all persons concerned by the collection or processing of personal data. In order to preserve the privacy and protection of everyone’s personal data, the IHU-ICAN has appointed a DPO who performs his duties completely independently within the IHU. The DPO (M.Decraene) can be reached at the following email address:

2. How do we collect your personal data?

The IHU-ICAN may collect personal data in several ways depending on the specifics of the processing;

  • Direct collection:
    • As part of clinical research at the initiative of the IHU-ICAN;
    • As part of the recruitment of new employees;
    • As part of the organization of public events (congresses, seminars, etc.)
    • In the maintenance of the contact databases of suppliers, customers, partners etc.
  • Indirectly: during a subcontracting mission in the context of clinical research

3. What information do we collect and for what purpose(s)?

The following tables summarize all the data collected and the purposes of their processing:

Strictly Necessary Cookies

These cookies are necessary for the operations specific to the services that are provided on our websites. They are used to provide the basic functionality of our websites, such as remembering information that has been entered into a form. If you prevent the installation of these cookies, you will no longer be able to use these functionalities and the website may not function effectively.

Performance cookies

These cookies are used to collect anonymous data for statistical purposes.

They allow us to measure the audience of the website and to analyze how visitors surf the website (number of visitors to the website, number of visits per page, time spent on each page, location of clicks, advertising effectiveness measures, etc.). They are also used to detect navigation problems and any other difficulties. These cookies help us to improve our website and your navigation.

List of cookies used

Recruitment of new employees

Management of the contact database of suppliers, customers, partners:

The execution of a subcontracting mission in the context of clinical research

The execution of a subcontracting mission in the context of clinical research

4. Who are the IHU ICAN's subcontractors?

The information collected may possibly be communicated to third parties linked to the IHU-ICAN by contract for the performance of subcontracted tasks necessary for the purposes of the processing. As part of the performance of their services, third parties have only limited access to the data and are required to use them in accordance with the instructions given to them by ICAN and the provisions of the applicable legislation on the protection of personal data.

5. What are your rights?

Under certain conditions (see point 5.3), you have a right of access, rectification, erasure, limitation, and the right to define directives relating to the fate of your data in the event of death, as well as a right to portability of your data.

These rights are not absolute: you can exercise them within the legal framework provided and within the limits of these rights. In some cases we will not be able to respond favorably to your request (legal obligation, respect of our commitments to you, etc.). If this is the case, we will inform you of the reason(s) for this refusal.

5.1 Contact

You can exercise your rights:

5.2 Supporting documents

Pursuant to article 14 of decree n°2007-451 of March 25, 2007 taken for the application of law n°78-17 of January 6, 1978 relating to data processing, files and freedoms, your request for The exercise of one of your rights must be accompanied by a photocopy of an identity document bearing the signature of the holder. Your request must also specify the address to which the response must be sent.

We will then have a period of one (1) month following receipt of the request to respond to you. This period may be extended by two (2) months given the complexity and number of requests.

5.3 Right of access, rectification or under special conditions of erasure

For all the processing carried out by the IHU-ICAN, you can access the personal data that we have collected directly from you in order to rectify, complete or erase any inaccurate information by contacting us directly at the email address indicated above. .

You have a right to the erasure of your personal data, when:

  • These are no longer necessary for the purposes for which they were collected or processed;


  • You have objected to this processing and there are no overriding legitimate reasons justifying this processing;


  • Personal data must be erased to comply with a legal obligation, provided for by Union or Member State law.

As a candidate or person submitting an unsolicited application, you can request the erasure of your data.

As a patient participating in a clinical study, you can withdraw your consent at any time with your doctor in charge of your follow-up.

5.4 Right to restriction of processing

For processing carried out on the legal bases of the legitimate interest of the IHU-ICAN or the public interest, you have the right to obtain the limitation of processing when one of the following conditions applies:

  • You dispute the accuracy of the personal data;


  • The processing is unlawful and you oppose the erasure of your personal data and instead request the limitation of their use;


  • You have objected to the processing and a verification must be carried out in order to know whether the legitimate reasons of the IHU-ICAN prevail over yours.


  • the IHU-ICAN no longer needs the personal data for the purposes of the processing, but they are still necessary for you to establish, exercise or defend legal claims.

5.5 Right to portability of your personal data

For processing carried out on the legal basis of consent and the performance of a contract, in accordance with Article 20 of the GDPR, when the processing is carried out using automated processes, you have the right to the portability of your personal data existing in electronic format, i.e. to receive the personal data that you have provided to the IHU-ICAN, in a structured, commonly used and machine-readable format and to transmit them to another person in charge treatment.

To exercise your right to the portability of your personal data, we invite you to contact us via one of the means made available to you in paragraph 5.1 Contact of this policy.

5.6 Right to lodge a complaint with the competent supervisory authority

If you believe, after contacting us, that your rights have not been respected, you have a right of appeal to the CNIL ( )

5.7 Guidelines for the fate of your personal data after your death

For processing carried out on the legal basis of consent, You have the right to define directives relating to the fate of your personal data after your death.

To exercise this right, we invite you to contact us at the address indicated in 5.1. With the subject “Directives relating to the fate of my personal data after my death”.

Tell us the person(s) who can act with us in the event of your death, as well as the instructions you want us to follow.
In the event that a data subject dies without having left instructions relating to the fate of his personal data after his death, the heirs of the latter may request the deletion of the data of the deceased after finalization of all the procedures. necessary, by contacting us by email at the address given above.