Data Protection Policy

ADREP is committed to ensuring the protection, confidentiality, and security of the personal data of its users, clients, prospects, suppliers, and candidates, and to respecting their privacy in the course of its activities.

Objectives of the Personal Data Protection Policy

The objectives of this personal data protection policy are to:

• Define how your data is processed when you use the ADREP website: https://www.calym.org/fr
• Explain the measures implemented to comply with the applicable regulations on the protection of personal data (General Data Protection Regulation (GDPR) and the amended Data Protection Act of January 6, 1978);
• Inform you of the rights you have regarding your personal data and how to exercise them.

Data Controller

The data controller is ADREP – Association for the Development of Partnered Research on Lymphoid Pathologies, with its registered office at:
13, rue Turbigo – 75 002 Paris – France.
The data controller is the legal entity that determines why and how personal data is processed.
You can contact its Data Protection Officer (DPO) for any questions regarding data protection or to exercise your rights, by email: dpo@calym.org or by postal mail addressed to the Data Protection Officer at the above address.

Methods of Collecting Your Personal Data

Purpose	Methods	Legal Basis	Data Collected
General information request from you	Direct collection via an online form	ADREP’s legitimate interest	Name; First name; Email.
Cookie management	Stored on the computer	ADREP’s legitimate interest Consent of the data subject	IP address
Complaints and requests for rights	Direct collection during your complaint or request	Legal obligation	Name; First name; Email address; Identity document (if necessary for exercising your right).
Access to the Website and service operation	Direct and automatic collection when using our services	ADREP’s legitimate interest	Technical identifiers; Technical characteristics relating to the device used and the operating system; IP address; National geolocation data derived from the IP address.

Recipients of Collected Data

ADREP employees are recipients of your data in order to respond to your request (HR department and any competent department) or the data controller’s subcontractors when necessary to respond to your request.

Transfer of Data to Countries outside the European Union

No transfer of personal data to a country outside the European Union or an international organization is made.

Retention Period of Collected Data

Processing	Retention Period
For any general information request	1 year from the response
For any newsletter subscription request	Until you oppose it via the unsubscribe link in each email
For cookie management	1 year from your consent
For the exercise of a right	3 years from the response, except for your identity document which is deleted after verifying your identity if necessary.

Your Rights

In accordance with the legal and regulatory provisions in force, you have the following systematic rights regarding your personal data:

• Right of access and rectification: you have the right to request access to your personal data held by ADREP and request rectification or updating if they are no longer accurate.

In accordance with the applicable regulations, you have the following rights which may be subject to exceptions and which will be analyzed on a case-by-case basis by the Data Protection Officer whose contact details are provided above.

• Right to erasure: you have the right to obtain from ADREP the erasure, without undue delay, of your data when they are no longer necessary for the purposes for which they were collected, unless they are necessary for exercising a right in court, to comply with a legal obligation, for scientific research purposes.
• Right to restriction of processing: you have the right to request ADREP to restrict the processing of your data while correcting inaccurate data or when you have objected to the processing, pending verification by the data controller.
• Right to data portability: you have the right to receive the data you have provided in the context of processing based solely on your consent.
• Right to object to processing: you have the right to object, for reasons relating to your particular situation, to the processing of data when the processing is based on legitimate interest unless they are necessary for exercising a right in court, to comply with a legal obligation, for scientific research purposes.
• Right to determine the fate of personal data after death: you can choose to whom ADREP should or should not disclose the personal data concerning you to a designated third party. As soon as ADREP becomes aware of the death and in the absence of instructions from you, the company ADREP undertakes to destroy the personal data concerning you, unless their retention is necessary for evidentiary purposes or to comply with a legal obligation or if they are necessary for scientific research or exercising a right.

To exercise your rights, you can contact the Data Protection Officer whose contact details are provided above. As part of your request, you can consult the CNIL website, which provides you with standard letters to help you formulate your request to us: https://www.cnil.fr/fr/modeles/courrier.

ADREP then has one month to respond to you from the receipt of your request and an additional two months to process it if it proves to be complex. In some cases, you may be asked to justify your identity by providing a copy of a valid identity document.

If there is no response within one month, or after ADREP’s response to your request to exercise a right, you can then submit a complaint directly to the National Commission for Information Technology and Civil Liberties (CNIL) either through the following address: https://www.cnil.fr/fr/adresser-une-plainte or by postal mail to CNIL – Complaints Department – 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07.

Information on Cookie Management

For details on how cookies are managed on our site, please refer to our cookie management policy. [Insert hyperlink to the cookie management page]

A cookie is a small file stored on your computer that allows you to navigate from one web page to another while retaining your browsing settings.

When browsing the website https://www.calym.org/fr, you can choose to allow or refuse the deposit of statistical or advertising cookies on your computer via a banner that appears during your first connection. If cookies do not allow you to be identified, no action on your part will be necessary. If you choose not to accept cookies, this will have no consequences on visiting our site.

Links to Third-Party Sites

The website https://www.calym.org/en may contain links to social media platforms operated by individuals or organizations over which the company has no control. Therefore, ADREP cannot be held responsible for how your data will be stored or used on these third-party servers.

We advise you to familiarize yourself with the applicable privacy policy of each third-party website you access through our website to understand how your personal data will be used.

Possible Modification of the Personal Data Protection Policy

This Personal Data Protection Policy may evolve at any time, especially to comply with current legislation or for new data processing carried out by ADREP. Any modification or update will be displayed on this page to keep users informed. We recommend that you regularly review the current version available.

---

Last updated on 04/19/2024