Provacy policy and Personal data protection policy
1. Who is the data controller ?
The data controller is :
ELI – The European Lymphoma Institute
Centre Hospitalier Lyon Sud
Bâtiment 2D “CENS-ELI”
165 Chemin du Grand Revoyet
2. WHAT ARE THE PURPOSES OF THE PROCESSING?
Your personal data is processed for the following purposes:
Personalizing our services according to your profile and improving your experience;
Improving and optimising the quality of our services and our website;
3. ON WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?
Your personal data is collected and processed on the following legal bases:
On the basis of your consent;
In the context of the performance of a contract;
For the purpose of complying with our legal and regulatory obligations.
All data is collected on a mandatory basis in order to fulfil the purposes of processing. No data is collected on an optional basis.
4. WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?
The recipients of your personal data are the following persons, depending on the processing carried out
ELI The European Lymphoma Institute is the sole recipient of the data, as data controller.
The said data is transferred to a country located in the European Union, in particular bank data. The country of transfer is Lithuania, the country in which the controller’s bank is located.
These transfers are carried out in compliance with the applicable regulations or in compliance with regulations offering an adequate and equivalent level of protection.
5. HOW LONG WILL YOUR PERSONAL DATA BE KEPT?
Your personal data is only kept for the time strictly necessary to achieve the purposes for which it was collected and processed.
Your identifiers are not kept beyond 2 years following the end of the contractual relationship
Your invoicing data is kept for a period of 10 years in accordance with the relevant regulations
The customer account accessible via the customer area is not kept beyond three (3) years from the last connection;
The connection, navigation and traffic data are not kept beyond one (1) year.
However, Personal Data is kept for a longer period of time in the form of archiving when legal and regulatory obligations require it or if it is necessary in view of the applicable statute of limitations, to assert our rights, when it is not possible to provide this proof by another means.
Once your Personal Data is no longer required for the purposes or for archiving to meet our legal obligations or for the purposes of the applicable statute of limitations, we will ensure that it is completely destroyed or anonymised.
6. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?
Your rights regarding your personal data are as follows:
Right of direct access; you have the right to be informed in a concise, transparent, intelligible and easily accessible manner about how your Personal Data is processed.
Right of enquiry; you also have the right to obtain confirmation that Personal Data concerning you is being processed and, where appropriate, to access such Personal Data.
Right of rectification; you have the right to obtain the rectification of inaccurate Personal Data concerning you. You also have the right to complete incomplete Personal Data about you by providing a supplementary declaration.
Right to erasure – this right may be exercised to the extent that it does not interfere with the performance of the contract or with our legal and regulatory obligations;
Right to limit the processing of your personal data;
The right to modify and/or withdraw, at any time, consents regarding the processing of your personal data based solely on your consent;
Right to object to the processing of your personal data;
Right to portability of your personal data.
You also have the right to define general and/or specific directives concerning the fate of your personal data and the way in which you wish your rights to be exercised after your death.
In order to ensure that the information we have about you is always accurate, we recommend that you regularly update your personal data.