_ _ _ _ _
Under Article 6 of Law No. 2004-575 of June 21, 2004 for confidence in the digital economy, it is specified to users of the CRISALIS website the identity of the stakeholders in the context of its implementation and monitoring:
- Editor :
CRISALIS
Purpan University Hospital
Pavillon Leriche
Place du Dr Joseph Baylac
31059 TOULOUSE CEDEX 9
- Person in charge of publication (natural or legal person): Gilles Devouassoux, Laurent Guilleminault
- Design and production :
Plume
75 rue de la Fontaine au Roi
75011 Paris
- Host: O2Switch
- Data protection representative: contact@crisalis-network.org
Management of personal data
The Customer is informed of the regulations concerning marketing communication, the law of June 21, 2014 for confidence in the Digital Economy, the Data Protection Act of August 06, 2004 as well as the General Data Protection Regulation (RGPD: n° 2016-679).
Persons responsible for the collection of personal data
CRISALIS is represented by CHU de Toulouse, its legal representative.
As the person responsible for processing the data it collects, CRISALIS undertakes to comply with the legal provisions in force. In particular, it is its responsibility to establish the purposes of its data processing, to provide its prospects and customers, from the time their consent is collected, with complete information on the processing of their personal data and to maintain a register of processing in accordance with the reality. Whenever CRISALIS processes Personal Data, CRISALIS takes all reasonable steps to ensure that the Personal Data is accurate and relevant to the purposes for which CRISALIS processes it.
Purpose of the data collected
CRISALIS is likely to process all or part of the data:
- to enable navigation on the Site
- to prevent and fight against computer fraud (spamming, hacking...): computer equipment used for navigation, IP address, password (hashed)
- to improve the user experience: connection and usage data, location
- to provide access to a secure extranet
- to carry out communication campaigns (mail) via a newsletter
CRISALIS does not sell your personal data which are only used by necessity or for statistical and analysis purposes.
Right of access, rectification and opposition
According to the European regulation in force, Crisalis users have the following rights:
- right of access (article 15 RGPD) and rectification (article 16 RGPD), update, completeness of Users' data right of blocking or deletion of Users' personal data (article 17 RGPD), when they are inaccurate, incomplete, equivocal, outdated, or whose collection, use, communication or storage is prohibited
- the right to withdraw consent at any time (Article 13-2c GDPR)
- the right to limit the processing of Users' data (article 18 RGPD)
- right to object to the processing of Users' data (Article 21 GDPR)
- the right to portability of the data provided by the Users, when such data are subject to automated processing based on their consent or on a contract (Article 20 GDPR)
- the right to define the fate of the Users' data after their death and to choose to whom Crisalis will communicate (or not) their data to a third party that they will have previously designated
As soon as CRISALIS becomes aware of the death of a User and in the absence of instructions from the User, CRISALIS undertakes to destroy the User's data, unless it is necessary to keep it for evidentiary purposes or to meet a legal obligation.
If the User wishes to know how CRISALIS uses his/her Personal Data, asks to rectify them or objects to their processing, the User may contact CRISALIS in writing via the contact form.
In this case, the User must indicate the Personal Data that he/she would like CRISALIS to correct, update or delete, identifying him/herself precisely with a copy of an identity document (identity card or passport).
Requests for the deletion of Personal Data will be subject to the obligations imposed on CRISALIS by law, in particular as regards the retention or archiving of documents. Finally, CRISALIS Users may file a complaint with the supervisory authorities, and in particular with the CNIL (https://www.cnil.fr/fr/plaintes).
Non-communication of personal data
CRISALIS will not process, host or transfer the Information collected on its Clients to a country located outside the European Union or recognized as "non-adequate" by the European Commission without informing the client in advance. For all that, CRISALIS remains free to choose its technical and commercial subcontractors provided that they present sufficient guarantees with regard to the requirements of the General Data Protection Regulation (RGPD: n° 2016-679).
However, if an incident affecting the integrity or confidentiality of the Client's Information is brought to the attention of CRISALIS, the latter shall inform the Client as soon as possible and inform him of the corrective measures taken. Furthermore, CRISALIS does not collect any "sensitive data".
No personal information of the User of the site CRISALIS is published without the knowledge of the User, exchanged, transferred, yielded or sold on an unspecified support to thirds.
