Last modification: October 2024
We, i.e. the company [company name], [company form] whose registered office is located at [address of registered office] are required to collect and process your data as part of your participation in the study [name of project] (the "Project").
Protecting and respecting your privacy is very important to us, and in particular we are committed to complying with the applicable provisions on the protection of privacy and your personal data. The purpose of this privacy policy is to inform you about how we use your personal data and how you can maintain control over it.
If you have any questions about our privacy policy, you can contact us by e-mail at : [email address of the Customer to be used as a contact point for questions relating to personal data to be completed] or by letter to the above address.
We act as the controller of your personal data collected and processed in connection with the Project.
As part of the Project, we use your personal data for [to be completed/modified]:
We only collect data that is adequate, relevant and limited to what is necessary for the purposes for which it is processed.
These purposes are specific and legitimate and, under no circumstances, will your data be further processed in a way that is incompatible with these purposes, except with your prior consent.
We process your personal data on the basis, as the case may be, of your consent, the performance of pre-contractual or contractual measures or in compliance with legal obligations:
When, as part of the Project, we are required to question you on subjects requiring the communication of special categories of personal data (revealing your racial or ethnic origin, your political opinions, your religious or philosophical beliefs or your trade union membership, data concerning your health or data concerning your sex life or sexual orientation) and such processing is based on consent, you will always have the choice of replying or refusing to reply. If you reply, you will be deemed to have given your express consent to the processing of such data.
We may be required to process your personal data in order to comply with legal obligations, in particular as part of the management of your rights to your personal data.
In certain cases, we process your personal data in our own interests, provided that we do not infringe your interests or your fundamental rights and freedoms.
We collect your personal data directly from you, your terminal or the messaging service used when you interact with us, in any medium (physical meeting, video-conference or telephone).
We only process personal data that is strictly necessary for the purposes described above, including the following categories of data:
Your personal data is stored with care and is only made accessible to the following people under strict conditions:
These transfers of personal data outside the European Economic Area are carried out in compliance with the applicable regulations:
You can contact us for further information on transfer procedures.
Your personal data is kept only as long as is necessary for the purposes for which it was collected. The retention periods applied to data are proportionate to the purposes for which they were collected.
Your personal data is stored for the following periods:
You may exercise your rights by writing to us at the following e-mail address: [customer e-mail address to be completed] and providing proof of your identity by any means. If we have reasonable doubts about your identity, we may ask you for a copy of an identity document.
You have the right to know whether we hold personal data about you and, if so, to request access to it.
You have the right to rectify or request rectification of any personal data concerning you that is inaccurate or incomplete.
You have the right to have your personal data deleted. This right can only be exercised in certain cases, when one of the reasons provided for by the applicable regulations applies. For example, personal data that is no longer necessary for the purposes for which it was collected or that has been processed unlawfully.
If you exercise this right and if one of the grounds applies to your request, we will erase your personal data as soon as possible.
Deletion is definitive, except in cases where processing of your personal data is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
You have the right to obtain a restriction on the processing of your personal data. This right may be exercised on the grounds provided for by the applicable regulations, in particular when you dispute the accuracy of your personal data.
This right does not give rise to their erasure and we are obliged to inform you before the corresponding processing restriction is lifted.
Where we process your personal data on the basis of our legitimate interests, you may object to the processing of your data at any time.
This right to object is not absolute and we may, for legal or legitimate reasons, refuse your request.
You may request to receive your personal data in a commonly used and machine-readable structured format for portability purposes.
The right to portability of processed personal data is not a general and absolute right. This right only applies when the processing is based on your consent or on a contract and is carried out by automated means.
You may withdraw your consent at any time where processing is based on your consent. We will then cease to process your personal data for the future, without calling into question any previous processing of your personal data for which you have given your consent.
You can tell us what to do with your personal data after your death and how it will be used.
If, despite all the care we take to protect your personal data, you feel that your rights have not been respected, you may lodge a complaint with the competent personal data protection authority in your country of residence.