Personal data policy

Updated on 01/10/2021

Preamble

The General Data Protection Regulation (GDPR) came into force on May 25, 2018 and completes the legislation on personal data protection. For your information, a personal data corresponds to any information relating to a natural person identified or who can be identified, directly or indirectly, by reference to an identification number or to one or more elements that are specific to him (name, first name, address, email, telephone...).

The processing of personal data refers to any operation on this type of data (collection, storage, transmission, deletion, etc.), whether on paper or by computer. The data controller is the person who determines the purposes of each processing and the means to achieve these purposes.

The company reserves the right to modify this Privacy Policy at any time. Any changes will take effect immediately.

Therefore, we invite you to regularly consult our Policy in order to be kept informed of the latest applicable online version.

Purpose of the data processing

The purpose of the data processing is to manage clinical trial images.

In general, Pixlib does not process any of your data for purposes incompatible with those for which they were collected, unless you have given your prior consent.

Data processed

The data collected can be classified in the following categories:

Identity
Contact information (firstname, lastname, birthdate, e-mail address, city, phone number)

The recipients of the data are:

Pixilib
Service sending email: SendGrid
Duration of storage: The data is kept for the time necessary to achieve the purposes and does not exceed the maximum duration of 5 years.

Pixilib does not transmit any data outside the European Union. Nevertheless, Pixilib uses the service company Sendgrid to manage the sending of its emails. Sendgrid will have access to the data that you will transmit in the contact form of Pixilib.

This data will then be stored in data centers outside the European Union.

For this purpose, Sendgrid ensures specific and adequate security measures such as:
- Data encryption
- Encryption of data transmissions
- Destruction of documents containing identifying data on users
- Various physical security measures in their data centers

Cookies

Pixlib only stores Cookies / Tracers relating to the personalization of the interface which are exempt from consent by the CNIL.
If necessary, the user can deactivate these Cookies / Trackers through the parameters of his browser.

Legal basis

The company Pixilib collects your personal data for the purposes described in the point "Purpose of processing" of this Policy.

In all cases, the company Pixlib collects your data, only when their collection and processing are based on a legal basis. Subject to having obtained your prior consent, the company Pixilib may process your data to send you commercial offers on its products and services.

Security

The company Pixilib implements all technical, physical and organizational measures to ensure the security and confidentiality of your data during the collection, processing and transfer of your data.

The infrastructure of the company Pixilib is protected against malicious software; the security of your terminal is your responsibility.

In the event that we are likely to call upon service providers to process part of your data, we undertake to verify that they present sufficient guarantees to ensure the protection of personal data entrusted to them and to have them sign confidentiality clauses in accordance with Article 28 of the RGPD. In the event of a personal data breach, i.e. a security incident, whether malicious or not and whether intentional or unintentional, that results in the compromise of the integrity, confidentiality or availability of your personal data, we undertake to comply with the following obligations:

The data breach does not create a risk: Internal documentation, in the "breach log".
The data breach creates a risk: Internal documentation, in the "breach register", notification to the CNIL, within a maximum of 72 hours.
The data breach creates a high risk: Internal documentation, in the "breach register", notification to the CNIL, within a maximum of 72 hours and we inform you as soon as possible.

The "register of violations" contains the following elements:

The nature of the violation ;
The categories and the approximate number of persons concerned;
The categories and approximate number of files involved;
The likely consequences of the breach;
The measures taken to remedy the breach and, where appropriate, to limit the negative consequences of the breach;

Otherwise, the justification for not notifying the CNIL or informing the persons concerned.

However, and in accordance with the regulations in force, we are not obliged to inform you of a breach in the following cases

Your personal data is protected by measures that make it incomprehensible to anyone who is not authorized to access it;
Measures have been taken so that the risk is no longer likely to occur; or
This communication requires disproportionate efforts on our part, especially since we have no means of contacting you to inform you about it.

Responsibility

In order to meet our responsibilities, our company :

Adopts internal procedures in order to ensure compliance with the regulation (IT charter, personal data protection charter) ;
Keeps a documentary trace of any processing carried out under its responsibility or that of the subcontractor (keeping of the processing register, confidentiality agreements of employees and service providers, company security policy, procedures for managing requests for access, rectification, opposition...);
Carries out impact analyses (PIA) for processing operations presenting particular risks with regard to rights and freedoms.

Your rights regarding your data

You can access and obtain a copy of the data concerning you, oppose the processing of this data, have it rectified or deleted. You also have the right to limit the processing of your data.

The data protection correspondent is your contact for any request to exercise your rights.

Any request must specify, in the subject line, the reason for the request (exercise of the right of access, opposition, etc.). The request must also be accompanied by a copy of both sides of a valid identity card bearing the signature of the applicant and specify the address to which the response should be sent.

The company Pixilib will send you its answer within a maximum of one (1) month, from the date of receipt of your request. This period may however be extended by two (2) months due to the complexity and number of requests.

Contact the Data Protection Officer electronically: p.leguellec@yeched-mat.com

Contact the data protection correspondent by post:

Pierre Le Guellec

Yec'hed Mat Conseil

256 rue de Bègles

33800 Bordeaux

Cookie Policy

1. Introduction

Our website, https://www.gaelo.fr (hereafter referred to as "the website") uses cookies and other related technologies (collectively referred to as "cookies" for simplicity). Cookies are also placed by third parties that we have engaged. In the document below, we inform you about the use of cookies on our website.

2. What are cookies?

A cookie is a small, simple file sent together with the pages of this website and stored by your browser on the hard drive of your computer or another device. The information stored in cookies can be sent back to our servers or the servers of the relevant third parties during a subsequent visit.

3. What are scripts?

A script is a piece of code used to make our website work properly and interactively. This code is executed on our server or on your device.

4. What is an invisible tag?

An invisible tag (or web beacon) is a small, invisible piece of text or image on a website that is used to track website traffic. To do this, various data about you are stored using web beacons.

5. Types of existing cookies

Category 1 – Strictly necessary cookies These cookies are essential to allow you to browse our websites and use their features. Without these cookies, services such as shopping carts and electronic billing cannot be provided.
Category 2 – Tracking cookies These cookies collect information about how you use our websites, such as the pages you visit most often. This data can be used to optimize our websites and make them easier to navigate. These cookies also allow our subcontractors to know if you have accessed one of our websites from their site and if your visit has led to the use or purchase of a product or service from us, including references to the product or service purchased.
Category 3 – Functionality cookies These cookies allow our websites to remember the choices you made during your visit. For example, we can store your geographic location in a cookie to ensure that we present our website in the language of your country. We can also remember preferences such as font size and style and other configurable elements. These cookies can also be used to keep track of products or videos that you have viewed, to avoid repetition.

6. Cookies placed on our website

Strictly necessary cookies: None
Tracking cookies: None
Functionality cookies: 2 cookies related to interface customization

7. Consent

The website only stores cookies that are exempt from consent by the CNIL. If necessary, the User can disable these cookies through the settings in their web browser.

8. Enabling/Disabling and Deleting Cookies

You can use your web browser to automatically or manually delete cookies. You can also specify that certain cookies cannot be saved. Another option is to modify your web browser settings so that you receive a message every time a cookie is placed.

9. Contact Information

For questions and/or comments about our cookie policy and this statement, you can contact us using the following contact details:
Pixilib
Address: 2 rue Leonce Castelbou 31000 Toulouse France
Phone:
Email: contact@pixilib.fr
Website: https://www.gaelo.fr/