PRIVACY POLICY FOR PERSONAL DATA

1.  GLOSSARY

For the purposes of this privacy policy, the capitalized words hereinafter, whether in the singular or plural form, shall have the following meaning:

Data: personal data, i.e. any information relating to an identified natural person or to a natural person who may be indirectly identified by reference to an identifier such as a name, an identification number, an IP address, a photograph, a career path, etc.

Entities: Atlanpole Biotherapies and Atlanpole Entreprises.

Controller: natural or legal person who or which, alone or jointly with others, determines the purposes and means of the Processing.

Website: website or websites edited by the Syndicat Mixte Atlanpole and/or the Entities.

Processing or Processed: any operation or set of operations which is performed on Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction erasure or destruction.

2.  GENERAL

The Syndicat Mixte Atlanpole and the Entities wish to contribute to the protection of your Data by implementing a transparent privacy policy for such Data.

They agree to collect and process the personal information pursuant to Regulation (EU) no. 2016/79 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and pursuant to all relevant applicable French regulations, in particular the Act no. 78-17 of 6 January 1978 on information technology, data files and civil liberties as amended.

The purpose of this policy is to inform you of the Processing carried out by the Syndical Mixte Atlanpole and the Entities as well as on the technical and organisational measures implemented to protect your Data and rights.

This policy only applies to the Website.

3.  CONTROLLER AND CONTACT DETAILS

The Controller of your Data on the Website is the Syndicat Mixte Atlanpole and the Entities:

Ø  Atlanpole, a Syndicat Mixte under the French law having its registered office located at 95 route de Gachet BP 90702 – 44300 Nantes

Ø  Atlanpole Biotherapies, a non-profit organisation governed by the French Act of 1901 having its registered office located at Château de la Chantrerie, 95 route de Gachet BP 90702 – 44300 Nantes

Ø  Atlanpole Entreprises, a non-profit organisation governed by the French Act of 1901 having its registered office located at Château de la Chantrerie, 95 route de Gachet BP 90702 – 44300 Nantes

Data Protection Officer (DPO):

Ø  Simon BOISSERPE

Ø  Château de la Chantrerie, 95 route de Gachet 44300 Nantes

Ø  dpo@atlanpole.fr

Data Controllers:

Ø  Jean-François BALDUCCHI

Ø  Château de la Chantrerie, 95 route de Gachet 44300 Nantes

Ø  balducchi@atlanpole.fr

4.  Data that may be collected by the syndicat mixte atlanpole and the entities

The Syndicat Mixte Atlanpole and the Entities may collect Data from their customers, partners, professional contacts, job and internship applicants and website users.
Only the Data necessary for the purposes of the relevant Processing shall be Processed.
Some Data shall be transmitted to third parties or shall be subject to a special processing due to a legal or contractual obligation or made necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

Some Data are collected directly from you, others indirectly or automatically.

a) Données collectées directement auprès de vous

Le consentement au Traitement de vos Données est recueilli directement et explicitement auprès de vous. Vous pouvez à tout moment exercer vos droits tels que décrits à l’article 9 ci-après.
En utilisant le Site ou en souscrivant aux services du Syndicat Mixe Atlanpole et/ou des Entités, vous pouvez être amenés à transmettre à ces derniers certaines de vos Données telles que précisées au sein du tableau ci-dessous

Data subjects of the Processing Data that may be collected
Job or internship applicants
  • your identity: name, first name, date of birth
  • your contact details: email address, phone numbers
  • your career path: function/position, level of education, title, CV
  • your picture
Customers
  • your identity: name, first name, age
  • your contact details: email address, phone numbers, social media identifier (Twitter, Linkedin, Facebook,…)
  • function/position
  • your career path: function/position, level of education, title
  • your picture
  • invoicing data: payment instruments and history, transactional data, invoices through the Payline services. For more information, see the Payline privacy policy for data: https://www.payline.com/mentions-legales
  • commercial data (e.g.: data necessary for carrying out actions related to customer’s loyalty or prospecting, satisfaction, statistical and promotion surveys, promotional sales)
Partners
  • your identity: name, first name
  • your contact details: email address, phone numbers, social media identifier (Twitter, Linkedin, Facebook,…)
  • function/position
  • your picture
Professional contacts
  • your identity: name, first name
  • your contact details: email address, phone numbers, social media identifier (Twitter, Linkedin, Facebook,…)
  • function/position
Website users
  • your identity: name, first name
  • your contact details: email address, phone numbers, social media identifier (Twitter, Linkedin, Facebook,…)
  • function/position

 

Your Data shall be Processed when, in particular:

  • You visit the websites, notably www.atlanpole.fr, www.atlanpole.com and www.atlanpolebiotherapies.com;
  • You fill in the registrations forms to events that the Syndicat Mixte Atlanpole and the Entities organise or co-organise with partners notably;
  • You agree to receive newsletters, emailing, etc, from the Syndicat Mixte Atlanpole and the Entities;
  • You give your business cards during meetings, appointments, gatherings, fairs, or other events;
  • You subscribe to any offer from the Syndicat Mixte Atlanpole and/or the Entities; the Syndicat Mixte Atlanpole and/or the Entities implement and perform the services agreements (customers and suppliers);
  • You contact the Syndicat Mixte Atlanpole and/or the Entities by phone, email or any other mean of communication;
  • You report an issue relating to the Website or the services offered by the Syndicat Mixte Atlanpole and the Entities;
  • You exercise your rights as described in Article 9.

a)   Data collected indirectly

Some Data may be communicated to the Syndicat Mixte Atlanpole and the Entities directly by your employer or through public sources.

The Syndicat Mixte Atlanpole and the Entities agree to comply with the provisions of Article 14 of the GDPR relating to indirect collecting.

b)   Data collected automatically

The Syndicat Mixte Atlanpole and the Entities may automatically collect Data on your connection for all Website users. Notably:

  • IP address
  • Traffic data e.g. logs

1.  PURPOSES OF THE PROCESSING

The Syndicat Mixte Atlanpole and the Entities use the Data they receive pursuant to the regulations on personal data protection.

The Syndicat Mixte Atlanpole and Entities collect and use your personal data pursuant to their mission carried in the public interest in the scope of economic development through innovation.
The Syndicat Mixte Atlanpole and the Entities need to Process your Data in order to, notably:

Carry out operations relating to customer relationship management;

  • Perform the agreements and services entered into with the Syndicat Mixte Atlanpole and    the       Entities;
  • Manage suppliers and subcontractors;
  • Send monthly newsletters;
  • Send invitations to events organised by the Syndicat Mixte Atlanpole and the Entities (Breakfasts, Blue Friday, Business Meeting, What’s Up, Conventions, Contests, etc.);
  • Send services offers or call for bids, consulting offers, etc.;
  • Appear on the Syndicat Mixte Atlanpole and the Entities’ online directory;
  • Optimise your browsing on the website;
  • Respond your information requests and provide you with advices;
  • Apply to a job or an internship offer issued by the Syndicat Mixte Atlanpole and/or the         Entities;
  • Minimise an identified risk regarding the Data;
  • Prevent potential fraudulent operations;
  • Assess the activity of the Syndicat Mixte Atlanpole and the Entities.

2.  DATA RECIPIENTS

The Data collected on the Website are intended for the Syndicat Mixte Atlanpole and the Entities. They may be transmitted to subcontracting companies which they may call upon as part of the performance of the services and to the extent necessary to fulfil the tasks they have been entrusted with.

The Syndicat Mixte Atlanpole and the Entities ensure that their staff and subcontractors comply with the applicable regulations on personal data and with this privacy policy. The Syndicat Mixte Atlanpole and the Entities require that their subcontractors and staff pay close attention to Data privacy and security.

The Syndicat Mixte Atlanpole and the Entities may also transfer Data to French Ministries and public financing bodies.

Third parties may access to your Data on an exceptional basis, notably administrative and judicial authorities. Unless prohibited by law, the Syndicat Mixte Atlanpole and/or the Entities shall inform you accordingly without undue delay.

Thus, the Syndicat Mixte Atlanpole and/or the Entities shall never communicate your Data to third parties without your prior order or consent or unless they are bound by a legal or contractual obligation to do so.

3.  PERIOD FOR WHICH PERSONAL DATA shall be STORED

Considering the legal or contractual obligations towards the ministry or public financing bodies, the Syndicat Mixte Atlanpole may store the Data for a period of 15 years following the date of their collection or the termination of the agreement entered into with Syndicat Mixte Atlanpole.

However, the data collected using cookies shall be stored for a maximum period of 13 months following collection.

Also, the data relating to applicants shall be stored for a maximum period of 2 years following the last contact with the applicant.

4.  SECURITY AND STORAGE OF THE DATA

The Syndicat Mixte Atlanpole and the Entities pay close attention to the importance of your data and take all possible measures to secure their storage.

The Syndicat Mixte Atlanpole and the Entities’ priority is the security and integrity of the Data Processed on the Website. Thus, the Syndicat Mixte Atlanpole aim at always storing your Data in the safest possible way and only for the period necessary to carry out the purpose of the Processing.

Pursuant to the applicable regulations on personal data, the Syndicat Mixte Atlanpole and the Entities agree to implement the adequate organisational and technical measures in order to ensure a level of security appropriate to the risk, whether when determining the means of the Processing or in the course of Processing.

The Syndicat Mixte Atlanpole and the Entities take all necessary measures to ensure the ongoing confidentiality, integrity, availability and resilience of Processing systems and services.

In the event of a physical or technical incident relating to the Processing, the Syndicat Mixte Atlanpole and/or the Entities shall ensure to restore, to the extent possible, the availability and access to the Data without undue delay.

The Syndicat Mixte Atlanpole and/or the Entities regularly test their processes, in the event of either a technical or physical incident, to ensure and maintain an optimal level of reactivity and effectiveness.

However, considering the structure of the Internet and networks, they cannot make any commitment relating to an obligation to ensure the employees’ health and safety (obligation de sécurité de résultat). Should a security breach that may induce an increased risk for your rights and freedoms be detected, the Syndicat Mixte Atlanpole and the Entities agree to inform you accordingly without undue delay and take all measures, to the extent possible, in order to neutralise the intrusion et minimise its impacts.

Your Data are hosted on secured servers. The Syndicat Mixte Atlanpole and the Entities do not transfer any Data outside the European Union.

5.   EXERCISING YOUR RIGHTS

Pursuant to the applicable regulations on personal data protection, you can, at any moment, exercise your right to access to, rectify or erase Data relating to you, as well as your rights to restriction of and to object to the Processing of your Data and your right to data portability. You can exercise your rights by sending a message:

  • By post to the following address: Atlanpole, Château de la Chantrerie – BP 90702 44307    NANTES CEDEX 3
  • By email to: dpo@atlanpole.fr

 

In this scope, you shall join to your request all the elements necessary to your identification (name, first name, email) as well as all the information necessary to confirm your identity. In case of doubt, the Syndicat Mixte Atlanpole and the Entities may ask you to provide a copy of your identity card pursuant to the provisions of the applicable regulations on personal data. The Syndicat Mixte Atlanpole and the Entities agree to consider your request to exercise your rights without undue delay, unless the storage of some of your Data is required by law or a legitimate ground.

6.  MODIFICATION OF the privacy policy

The Syndicat Mixte Atlanpole and the Entities reserve the right to modify this privacy policy at any moment, notably to comply with applicable laws and regulations. Should the said policy be substantially modified, the Syndicat Mixte Atlanpole and the Entities shall ensure to inform you accordingly without undue delay.

7.  INFORMATION AND CONTACT DETAILS

Should you require any information, please send an email to: dpo@atlanpole.fr
More information are available in the Website’s legal statements.