PRIVACY POLICY
DATA CONTROLLER AND DATA PROTECTION OFFICER The Institute of Image-Guided Surgery (IHU) is committed to protecting the personal data of patients, users, collaborators, employees, and any person accessing its website.
This policy aims to inform you about:
- The objectives pursued by the data processing (purposes);
- The types of personal data we collect about you;
- How your personal data is processed;
- The conditions and methods of using your personal data and your rights in this regard, in compliance with European and French legislation.
All operations on your personal data are carried out in compliance with current regulations, including Regulation No. 2016/679, known as the General Data Protection Regulation (“GDPR”), Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, and any national legislation applicable to data protection.
If you do not agree with the terms of this policy, you are free not to provide personal data. However, you are advised that the communication of certain data conditions access to services, and the absence of this communication may degrade certain functionalities and services.
1. DEFINITIONS
Personal Data: Any information relating to an identified or identifiable natural person.
Personal Data Processing: Any operation or set of operations performed on personal data, whether or not by automated means (collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission or dissemination, or any other form of making available, alignment).
Data Controller: The legal or natural person who determines the purposes and means of processing, i.e., the objective and the way to achieve it. In practice and in general, this is the private or public organization, embodied by its legal representative.
Data Processor: A natural or legal person or any other body that processes personal data on behalf of the data controller.
2. DATA CONTROLLER AND DATA PROTECTION OFFICER
Data processing manager and registered office:
Strasbourg University Hospital Institute
1 place de l’Hôpital
67091 Strasbourg Cedex
Tél : +33 (0)3 90 41 36 00 / Fax : +33 (0)3 90 41 37 01
webmaster@ihu-strasbourg.eu
Scientific Cooperation Foundation – SIRET : 538405 952 000 10 – NAF : 7211Z
Legal representative and director of publication: Christian Debry, General Director of the Strasbourg University Hospital Institute
Data Protection Officer:
ACTECIL Company
204 avenue de Colmar
67100 Strasbourg, France
Tél : +33 (0)9 722 722 93
dpo@ihu-strasbourg.eu
3. PERSONAL DATA COLLECTED
When using the www.ihu-strasbourg.eu website, the following information may be collected: the URL of the links through which the user accessed the website, the user’s internet service provider, and the Internet Protocol (IP) address of the user.
Outside of our website, your personal data is collected when contacting our services to process your request.
The data collected includes:
- Identification and contact information: name, first name, postal address, phone number, email address.
- Professional life-related data in the case of recruitment: CV; application file, education, training, professional situation, name of the employer, previous positions held, professional project, contact information, identification data (name, first name, etc.).
4. PROCESSING PURPOSES
When using the www.ihu-strasbourg.eu website, the following information may be collected: the URL of the links through which the user accessed the website, the user’s internet service provider, and the Internet Protocol (IP) address of the user.
5. LEGAL BASIS OF PROCESSING
In the context of using the www.ihu-strasbourg.eu website, the following information may be collected: the URL of the links through which the user accessed the website, the user’s internet service provider, and the Internet Protocol (IP) address of the user.
6. DATA RETENTION PERIODS
IHU retains your personal data in a secure environment for the duration necessary to fulfill the purposes for which they were collected or for the maximum retention period as provided by applicable laws in France.
The duration varies depending on requests, processes, and inquiries and is subject to legal requirements.
7. DATA RECIPIENTS
The personal data collected is intended for the internal services of IHU authorized to access it.
In cases where IHU entrusts data processing activities to subcontractors, only subcontractors providing sufficient guarantees regarding the implementation of appropriate technical and organizational measures are used. This ensures that the processing meets the reliability and security requirements required by applicable regulations and guarantees the protection of individuals’ rights.
In accordance with current regulations, your personal data may be transmitted to authorized third parties (public bodies, judicial authorities, legal professionals, and ministerial officers, regional health agency) through legislative or regulatory provisions, within the framework of a specific mission, or the exercise of a right to communication.
No personal information of the user of the website is published without their knowledge, exchanged, transferred, assigned, or sold on any medium to third parties. The only hypothesis under which the information might be transmitted to the eventual acquirer is if IHU Strasbourg and its rights are acquired. In such a case, the acquirer would also be bound by the same obligation to preserve and modify the data concerning the user of the www.ihu-strasbourg.eu website.
8. SECURITY MEASURES
Considering the evolution of technologies, implementation costs, the nature of the data to be protected, and the risks to the rights and freedoms of individuals, IHU implements all appropriate technical and organizational measures to ensure the confidentiality of the collected and processed personal data and a level of security adapted to the risk.
9. TRANSFER OUTSIDE THE EU
The personal data collected on the website is exclusively reserved for IHU. No transfer is made outside the European Union.
10. EXERCISE OF RIGHTS
In accordance with the “Informatique et Libertés” Law of January 6, 1978, as amended, and Regulation (EU) 2016/679 on the protection of personal data, you have the following rights regarding your data: the right of access, right to rectification, right to erasure (right to be forgotten), right to object, right to restriction of processing, right to data portability. You can also define directives regarding the storage, erasure, and communication of your personal data after your death.
To exercise your GDPR rights, you can contact us by email at dpo@ihu-strasbourg.eu or by mail at the following address: DPO – Institut Hospitalo Universitaire de Strasbourg, 1 Place de l’Hôpital – 67091 Strasbourg, Cedex. Please specify the purpose of your request and the right(s) you wish to invoke. In case of reasonable doubt about your identity, proof may be requested.
If you believe, after contacting us, that your rights to your personal data are not respected, you can file a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés).
11. COOKIES
When you visit the website www.ihu-strasbourg.eu, cookies are placed on your computer. IHU only uses cookies necessary for the proper functioning of this site.
A cookie is a small text file deposited on the hard drive of your computer or in the memory of your browser when you visit a website. It records certain information about your navigation or online behavior (such as a session identifier, language choice, or date).
Cookies referred to as “necessary” for the proper functioning of the site help facilitate your navigation on the site by simplifying essential functions (such as navigation between pages). The proper functioning of the site depends in part on these cookies.
The IHU website also uses functionality cookies, also exempt from consent. This includes:
- Trackers retaining the choice expressed by users on the deposit of trackers.
- Trackers intended for authentication with a service, including those aimed at ensuring the security of the authentication mechanism, for example, by limiting attempts at robotic or unexpected access.
- User interface customization trackers (for example, for the choice of language or the presentation of a service).
The use of these cookies does not require your prior consent when you connect to the site.
12. AMENDMENT OF THIS POLICY
In the event of a modification to this Policy by IHU or if required by law, it will be published on our site and will be effective upon publication. Therefore, we invite you to refer to it during each visit to become acquainted with the latest version, which is always available on our site.
