BIOFORTIS is fully committed to respecting privacy and protecting personal information.

In accordance with Data Protection Legislation, the purpose of this Privacy Notice is to explain how BIOFORTIS collect, use, protect and disclose your Personal Data. This Privacy Notice also provides information about your rights and how to exercise them.

1. DEFINITIONS

Data controller: means the person or body which determines the purpose and means of the data processing.

Data Protection Legislation: refers torefers to the Directive 2002/58/EC, and the General Data Protection Regulation (EU) 2016/679 (GDPR), as well as any delegated and implementing acts adopted in accordance with the GDPR and the Member States laws specifying the rules of the GDPR applicable to the data processing.

Data processor: means the person or body which processes data on behalf of, on instructions from and under the authority of a Data controller.

Personal Data: means data that identifies an individual or relates to an identifiable individual. Some of these Personal Data may be considered as Sensitive Personal Data meaning that they may reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership and genetic data, biometric data processed for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

Site: means the websites http://recrutement.biofortis.info/, https://www.biofortis.fr/ and all of their subdomains.

DATA CONTROLLER

The Personal Data collected through this Site are processed by Biofortis, acting as the Data Controller.

Contact details for Biofortis

3 route de la Chatterie 44800 Saint Herblain France,

440 558 062 RCS Nantes

biofortis-dpo@biofortis.fr

2. CATEGORIES OF PERSONAL DATA COLLECTED

Through each connection to BIOFORTIS Site, Data controller, or third parties on its behalf, automatically collect and store information about your device and your activities. This information may include:

•       Your computer or other device’s unique ID number,
•       Your IP address,
•   Technical information about your device such as type of device, web browser or operating system,
•       Your preferences and settings such as time zone and language,
•       Statistical data about your browsing actions and patterns.

Through your participation to online surveys and polls, your request for further information on Data controller including marketing and advertising materials, your subscription to newsletters or to any application form or similar inquiries, Data controller may collect Personal Data that you agree to provide or that is needed to provide or improve its services, i.e.:

•       Your Identity information (first Name, last Name, email address, gender, postal address, phone number) used to identify you and provide the services you requested,
•       Your Location information: used to adapt information depending on where you are located,
•       Or any other information you agree to submit.

Data controller may also collect your Sensitive Personal Data to provide some specific services (primarily within the framework of clinical studies). Data controller will only process Sensitive Personal Data with your explicit consent to the processing of those Sensitive Personal Data for one or more specified purposes or if the processing is necessary for the purposes of carrying out obligations and exercising specific rights for you or the Data controller in the field of employment and social security and social protection law.

3. PURPOSES OF THE DATA COLLECTION

Data controller needs to collect and process your Personal Data in order to provide its services or because it is legally required to do so.

Data controller will use your Personal Data for the purposes for which you provided it, as indicated to you on its Site at the time you provided your Personal Data:

• Personal Data collected through online surveys and polls, further information application forms, subscription to newsletters or similar inquiries, shall only be used to meet the purpose for which such information have been submitted and collected.
•       Personal Data collected through each connection will be used to track your browsing on the Site so as to enable Data controller to make connection statistics on the most visited pages and, generally, to monitor and improve the running of the Site.

Data controller will also use your Personal Data for direct marketing purposes to provide you the best services only if you have given your consent.

4. LEGAL BASIS OF THE PROCESSING

The legal basis for the processing of your Personal Data is:

Your consent:  When you provide Data controller with your Personal Data, you consent to it using your Personal Data to carry out the purposes identified to you on its Site. With your consent, you give Data controller permission to process your Personal Data in a particular manner.

Performance of a contract: Data controller will process your Personal Data to fulfill its contractual obligations and to provide you with its services.  

Legal requirement: Data controller may process your Personal Data to comply with legal obligations.

Legitimate interests: Data controller may process your Personal Data to improve its services and to ensure you get the best experience on its website.

5. DISCLOSURE OF PERSONAL DATA

Data controller may share your Personal Data with any service providers, subcontractors and agents that it may appoint to perform functions on its behalf and in accordance with its instructions, including payment providers, IT service providers, accountants, auditors and lawyers.

Under certain circumstances, Data controller may have to disclose your Personal Data to respond to any legal requirements under applicable laws, for example, as part of anti-money laundering, processes or protect a third party’s rights, property, or safety or to enforce its Terms and Conditions.

Data controller may also share your Personal Data in connection with, or during negotiations of, any merger, sale of assets, consolidation or restructuring, financing, or acquisition of all or a portion of its business by or into another company.

6. HYPERLINKS

BIOFORTIS Sites may contain hyperlinks to other websites of interest. Once you have used these hyperlinks to leave BIOFORTIS Sites, you should note that BIOFORTIS does not have any control over that other website.

Therefore, BIOFORTIS cannot be responsible for the protection and privacy of any information that you provide whilst visiting such websites and such websites are not governed by this Privacy Notice. You should exercise caution and look at the Privacy Notice applicable to the website in question.

7. YOUR RIGHTS

Under current legislation, you have the following rights to your Personal Data:

Right of access: You can request access to your Personal Data.

Right to rectification: You can request the rectification of inaccurate or incomplete Personal Data.

Right to erasure (“Right to be forgotten”): You can request the deletion of your Personal Data if certain grounds stated in the GDPR are met. However, please note that in order to comply with certain legal obligations Data controller may decline your request or keep certain information.

Right to restrict the processing of Personal Data: You can request the restriction of how Data controller uses and processes your Personal Data.

Right to data portability: You can request a copy of your Personal Data in a commonly used format to transmit those Personal Data to another company only where the processing of your Personal Data is based on your consent or on the performance of a contract and is carried out by automated means.  

You may exercise these rights by sending your request by email to biofortis-dpo@biofortis.fr and Data controller will make its best efforts to deal with the request as soon as practicable.

Right to complain to a supervisory authority: You can make a complaint with a supervisory authority in the EU Member State that you are located in. 

For information, any subscription to a newsletter may be cancelled, at any time, by sending an e-mail to biofortis-dpo@biofortis.fr.

8. RETENTION PERIOD

Data controller will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Notice or to comply with legal obligations.

9. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION

Data controller may transfer your Personal Data to countries outside the European Economic Area (EEA) that have different levels of data protection laws. If Personal Data is transferred outside the EEA, the transfer is done through standard data protection clauses adopted by the European Commission to provide safeguards for Personal Data transferred.  Data controller uses those standard clauses when transferring Personal Data outside the EEA to secure the transfer and to comply with Data Protection Legislation.

10. DATA PROTECTION OFFICER

If you have any question, concern or complaint about Data controller Privacy Notice, please contact the Data Protection Officer at:

biofortis-dpo@biofortis.fr

11.  SECURITY

Data controller has put in place reasonable technical, organizational and structural measures to ensure an adequate level of protection of your Personal Data against unauthorized or unlawful processing and against accidental loss, destruction or damage. If your Personal Data is transferred to third parties, Data Controller will ensure that your Personal Data is processed only as instructed by it.

Where Data Controller has given, or you have chosen a password which enables you to access parts of BIOFORTIS Sites, you are responsible for keeping this password confidential.

12. PRIVACY NOTICE UPDATES

Data controller may update this Privacy Notice and any updates will be posted here. Therefore, you are advised to check back regularly to stay informed about our Privacy Notice.