Data: personal data, i.e. any information relating to an identified natural person or to a natural person who may be indirectly identified by reference to an identifier such as a name, an identification number, an IP address, a photograph, a career path, etc.
Entities: Atlanpole Biotherapies and Atlanpole Entreprises.
Controller: natural or legal person who or which, alone or jointly with others, determines the purposes and means of the Processing.
Website: website or websites edited by the Syndicat Mixte Atlanpole and/or the Entities.
Processing or Processed: any operation or set of operations which is performed on Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction erasure or destruction.
They agree to collect and process the personal information pursuant to Regulation (EU) no. 2016/79 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and pursuant to all relevant applicable French regulations, in particular the Act no. 78-17 of 6 January 1978 on information technology, data files and civil liberties as amended.
The purpose of this policy is to inform you of the Processing carried out by the Syndical Mixte Atlanpole and the Entities as well as on the technical and organisational measures implemented to protect your Data and rights.
This policy only applies to the Website.
3. CONTROLLER AND CONTACT DETAILS
The Controller of your Data on the Website is the Syndicat Mixte Atlanpole and the Entities:
Ø Atlanpole, a Syndicat Mixte under the French law having its registered office located at 95 route de Gachet BP 90702 – 44300 Nantes
Ø Atlanpole Biotherapies, a non-profit organisation governed by the French Act of 1901 having its registered office located at Château de la Chantrerie, 95 route de Gachet BP 90702 – 44300 Nantes
Ø Atlanpole Entreprises, a non-profit organisation governed by the French Act of 1901 having its registered office located at Château de la Chantrerie, 95 route de Gachet BP 90702 – 44300 Nantes
Data Protection Officer (DPO):
Ø Simon BOISSERPE
Ø Château de la Chantrerie, 95 route de Gachet 44300 Nantes
Ø Jean-François BALDUCCHI
Ø Château de la Chantrerie, 95 route de Gachet 44300 Nantes
4. Data that may be collected by the syndicat mixte atlanpole and the entities
The Syndicat Mixte Atlanpole and the Entities may collect Data from their customers, partners, professional contacts, job and internship applicants and website users.
Only the Data necessary for the purposes of the relevant Processing shall be Processed.
Some Data shall be transmitted to third parties or shall be subject to a special processing due to a legal or contractual obligation or made necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Some Data are collected directly from you, others indirectly or automatically.
a) Données collectées directement auprès de vous
Le consentement au Traitement de vos Données est recueilli directement et explicitement auprès de vous. Vous pouvez à tout moment exercer vos droits tels que décrits à l’article 9 ci-après.
En utilisant le Site ou en souscrivant aux services du Syndicat Mixe Atlanpole et/ou des Entités, vous pouvez être amenés à transmettre à ces derniers certaines de vos Données telles que précisées au sein du tableau ci-dessous
|Data subjects of the Processing||Data that may be collected|
|Job or internship applicants||
Your Data shall be Processed when, in particular:
- You visit the websites, notably www.atlanpole.fr, www.atlanpole.com and www.atlanpolebiotherapies.com;
- You fill in the registrations forms to events that the Syndicat Mixte Atlanpole and the Entities organise or co-organise with partners notably;
- You agree to receive newsletters, emailing, etc, from the Syndicat Mixte Atlanpole and the Entities;
- You give your business cards during meetings, appointments, gatherings, fairs, or other events;
- You subscribe to any offer from the Syndicat Mixte Atlanpole and/or the Entities; the Syndicat Mixte Atlanpole and/or the Entities implement and perform the services agreements (customers and suppliers);
- You contact the Syndicat Mixte Atlanpole and/or the Entities by phone, email or any other mean of communication;
- You report an issue relating to the Website or the services offered by the Syndicat Mixte Atlanpole and the Entities;
- You exercise your rights as described in Article 9.
a) Data collected indirectly
Some Data may be communicated to the Syndicat Mixte Atlanpole and the Entities directly by your employer or through public sources.
The Syndicat Mixte Atlanpole and the Entities agree to comply with the provisions of Article 14 of the GDPR relating to indirect collecting.
b) Data collected automatically
The Syndicat Mixte Atlanpole and the Entities may automatically collect Data on your connection for all Website users. Notably:
- IP address
- Traffic data e.g. logs
1. PURPOSES OF THE PROCESSING
The Syndicat Mixte Atlanpole and the Entities use the Data they receive pursuant to the regulations on personal data protection.
The Syndicat Mixte Atlanpole and Entities collect and use your personal data pursuant to their mission carried in the public interest in the scope of economic development through innovation.
The Syndicat Mixte Atlanpole and the Entities need to Process your Data in order to, notably:
Carry out operations relating to customer relationship management;
- Perform the agreements and services entered into with the Syndicat Mixte Atlanpole and the Entities;
- Manage suppliers and subcontractors;
- Send monthly newsletters;
- Send invitations to events organised by the Syndicat Mixte Atlanpole and the Entities (Breakfasts, Blue Friday, Business Meeting, What’s Up, Conventions, Contests, etc.);
- Send services offers or call for bids, consulting offers, etc.;
- Appear on the Syndicat Mixte Atlanpole and the Entities’ online directory;
- Optimise your browsing on the website;
- Respond your information requests and provide you with advices;
- Apply to a job or an internship offer issued by the Syndicat Mixte Atlanpole and/or the Entities;
- Minimise an identified risk regarding the Data;
- Prevent potential fraudulent operations;
- Assess the activity of the Syndicat Mixte Atlanpole and the Entities.
2. DATA RECIPIENTS
The Data collected on the Website are intended for the Syndicat Mixte Atlanpole and the Entities. They may be transmitted to subcontracting companies which they may call upon as part of the performance of the services and to the extent necessary to fulfil the tasks they have been entrusted with.
The Syndicat Mixte Atlanpole and the Entities may also transfer Data to French Ministries and public financing bodies.
Third parties may access to your Data on an exceptional basis, notably administrative and judicial authorities. Unless prohibited by law, the Syndicat Mixte Atlanpole and/or the Entities shall inform you accordingly without undue delay.
Thus, the Syndicat Mixte Atlanpole and/or the Entities shall never communicate your Data to third parties without your prior order or consent or unless they are bound by a legal or contractual obligation to do so.
3. PERIOD FOR WHICH PERSONAL DATA shall be STORED
Considering the legal or contractual obligations towards the ministry or public financing bodies, the Syndicat Mixte Atlanpole may store the Data for a period of 15 years following the date of their collection or the termination of the agreement entered into with Syndicat Mixte Atlanpole.
However, the data collected using cookies shall be stored for a maximum period of 13 months following collection.
Also, the data relating to applicants shall be stored for a maximum period of 2 years following the last contact with the applicant.
4. SECURITY AND STORAGE OF THE DATA
The Syndicat Mixte Atlanpole and the Entities pay close attention to the importance of your data and take all possible measures to secure their storage.
The Syndicat Mixte Atlanpole and the Entities’ priority is the security and integrity of the Data Processed on the Website. Thus, the Syndicat Mixte Atlanpole aim at always storing your Data in the safest possible way and only for the period necessary to carry out the purpose of the Processing.
Pursuant to the applicable regulations on personal data, the Syndicat Mixte Atlanpole and the Entities agree to implement the adequate organisational and technical measures in order to ensure a level of security appropriate to the risk, whether when determining the means of the Processing or in the course of Processing.
The Syndicat Mixte Atlanpole and the Entities take all necessary measures to ensure the ongoing confidentiality, integrity, availability and resilience of Processing systems and services.
In the event of a physical or technical incident relating to the Processing, the Syndicat Mixte Atlanpole and/or the Entities shall ensure to restore, to the extent possible, the availability and access to the Data without undue delay.
The Syndicat Mixte Atlanpole and/or the Entities regularly test their processes, in the event of either a technical or physical incident, to ensure and maintain an optimal level of reactivity and effectiveness.
However, considering the structure of the Internet and networks, they cannot make any commitment relating to an obligation to ensure the employees’ health and safety (obligation de sécurité de résultat). Should a security breach that may induce an increased risk for your rights and freedoms be detected, the Syndicat Mixte Atlanpole and the Entities agree to inform you accordingly without undue delay and take all measures, to the extent possible, in order to neutralise the intrusion et minimise its impacts.
Your data are hosted on secured servers. Syndicat Mixte Atlanpole and the Entites do not transfer data outside the European Union.
However, on an exceptional basis, Syndicat Mixte Atlanpole and the Entities may use subcontractors whose servers are located outside the European Union. In this case, Syndicat Mixte Atlanpole and the Entities ensure that these subcontractors take confidentiality and security measures to protect your rights in compliance with the provisions of the GDPR. Such is the case of the company EVENT BRITE which provides the management of the invitations to events. This company advises its clients that it may transfer data to the United-States, while warranting that the company is Privacy Shield certified.
5. EXERCISING YOUR RIGHTS
Pursuant to the applicable regulations on personal data protection, you can, at any moment, exercise your right to access to, rectify or erase Data relating to you, as well as your rights to restriction of and to object to the Processing of your Data and your right to data portability. You can exercise your rights by sending a message:
- By post to the following address: Atlanpole, Château de la Chantrerie – BP 90702 44307 NANTES CEDEX 3
- By email to: firstname.lastname@example.org
In this scope, you shall join to your request all the elements necessary to your identification (name, first name, email) as well as all the information necessary to confirm your identity. In case of doubt, the Syndicat Mixte Atlanpole and the Entities may ask you to provide a copy of your identity card pursuant to the provisions of the applicable regulations on personal data. The Syndicat Mixte Atlanpole and the Entities agree to consider your request to exercise your rights without undue delay, unless the storage of some of your Data is required by law or a legitimate ground.
7. INFORMATION AND CONTACT DETAILS
Should you require any information, please send an email to: email@example.com
More information are available in the Website’s legal statements.