This document outlines the rules relating to the treatment of the various personal data collected concerning you, carried out by C.H.A.M. when you visit the site and as part of its services. We may change this Privacy Policy at any time, particularly in order to comply with changes in applicable laws and regulations. In the event of a change, we will inform you and seek your agreement, if necessary, via our website or by e-mail, before the change(s) take effect.
About us
SASU Convention on Health Analysis and Management (C.H.A.M.)
19-21, rue Dumont d’Urville – 75116 PARIS – France
SASU (simplified joint-stock company) with a share capital of 79 600 €, registered at the RCS of PARIS under the number 518 776 521
E-mail: contact [a] canalcham.fr
Purpose of this document
The purpose of this privacy policy is to explain and identify the different personal data we collect when you visit the site and when you use our services.
Personal data collected
You may be asked to provide us with some of your personal data. Your personal data will be processed automatically. This processing is carried out with your consent and in compliance with the applicable legislation. This may include the following personal data: Form:
- Last name, first name;
- Position, company or organization;
- E-mail address;
Members area:
- User login;
- E-mail;
- Last name; first name; company or organization; position; country (with your consent)
- Photography (with your consent)
Purposes of collecting personal data
Your personal data are processed for the following purposes:
- Answering a request you made via the contact form on the C.H.A.M. website;
- Improving our services (statistical data);
- If necessary, contacting you as part of our services;
- Processing and management of your personal account on the platform reserved for members;
- Complying with all our legal
At the completion of the service, CHAM may anonymize the personal data collected for statistical purposes.
C.H.A.M. shall not process your personal data for purposes other than those set out above.
Your personal data will never be processed for purposes other than those for which we have legal obligations, legitimate interests or for which you have given your consent. In the event that our services process your personal data for purposes other than those mentioned above, this privacy policy will be updated and subject to your consent.
Legal framework
The processing of your personal data as presented above is based on pre-contractual or contractual performance and legitimate interest. When necessary, the consent of the data subjects is obtained.
Data retention period
The data retention period is determined based on legal and contractual requirements, and in the absence of such requirements, it is determined based on the following principles: The data retention period for contracts concluded with clients is five (5) years from the end of the contractual relationship, and it is ten (10) years for contracts concluded electronically with a value exceeding 120 euros.
The data retention period for commercial correspondence (purchase orders, delivery orders, invoices, etc.) is ten (10) years from the closure of the accounting period. The data retention period for data processed for marketing purposes is three (3) years from the date of data collection or the last positive action (request for documentation, clicking on a hyperlink, etc.).
Rights to personal data
You have the right to access, rectify and delete your personal data as well as the right to oppose and limit the processing carried out by C.H.A.M. In addition, you have the right to the portability of your personal data. You have the right to establish directives regarding the storage, erasure, and disclosure of your data after your death. You can exercise these rights by sending a simple request to the following address: dpo [a] canalcham.fr
In accordance with the provisions of article 13 of the General Data Protection Regulations, you have the right to lodge a complaint with the competent supervisory authority if you consider that we have infringed your rights to the following address:
CNIL – Service des plaintes
3 Place de Fontenoy – TSA 80715 – 75334
PARIS CEDEX 07
Phone number: 01 53 73 22 22
Recipients of personal data – Storage and security
The personal data collected via our services are intended for the personal use of C.H.A.M. Personal data may be processed, if necessary, by our data processors, in particular for storage and security purposes. The recipients of the data refer to individuals or entities that receive communication of personal data.
The recipients of the data can include both employees of CHAM and external organizations. We ensure that the data collected and processed in the context of our relationships with our clients and prospects are only accessible to authorized internal and external recipients, including the following:
- Personnel from the competent departments authorized to manage the relationship with our interlocutors with our clients and prospects and their hierarchical superiors.
- Personnel from support departments, such as administrative, logistics, and IT services, and their hierarchical superiors.
- Our service providers or support services (e.g., IT service providers).
- Competent authorities in cases where we are required to share certain data with legal auxiliaries, services responsible for internal control procedures, etc.
Regarding internal recipients, we determine which recipient will have access to which data based on an authorization policy, and we ensure that they are bound by a confidentiality obligation. Regarding external recipients, we inform you that personal data of our interlocutors with our clients and prospects may be communicated to certain of our service providers or any legally authorized authority (including tax and social authorities). In this case, CHAM is not responsible for the conditions under which personnel from these authorities access and process the data. All data collected is stored on servers within the European Union.
Processing of personal data
We may engage any processor of our choice in the processing of personal data of our interlocutors with our clients and prospects. According to the GDPR, a processor refers to any natural or legal person who processes personal data on behalf of the data controller. In practice, this includes the service providers with whom CHAM works and who handle CHAM’s personal data. In this case, we ensure that the processor complies with its obligations under the GDPR. We commit to signing a written contract with all our processors and impose on them the same data protection obligations that we impose on ourselves. Furthermore, we reserve the right to conduct audits on our processors to ensure their compliance with GDPR provisions.
Records of Processing Activities
As the data controller, we commit to maintaining a record of all processing activities carried out as required by law. This record is a document or application that lists all the processing activities undertaken by CHAM as the data controller. We commit to providing the CNIL with information, upon their request, to verify the compliance of the processing activities with the current regulations.
Security measures
We implement technical, physical, or logical security measures that we deem appropriate to prevent the accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of data. In any case, if there is a change in the means used to ensure the security and confidentiality of personal data, we commit to replacing them with more effective means. No changes will result in a decrease in the level of security.
Data breach
We commit to notifying the CNIL of any data breaches in accordance with the regulations on personal data. Our interlocutors with our clients and prospects will be informed of any data breach that could pose a high risk to their privacy.
Data protection officer
We have appointed a Data Protection Officer who can be contacted at the following address for any questions related to data processing: dpo [a] canalcham.fr In any case your personal data are processed in accordance with the purposes defined by C.H.A.M. The processor shall in no way process your personal data for other purposes without your express consent.
Cookies
1.1 Cookie Management
A cookie is a small text file containing various information. It is placed in the memory of your device (computer, tablet, smartphone, etc.) by the server of the website visited or by a third-party server (web analytics service, etc.). During the period of validity or registration of the cookie, it will make it possible to identify your device during your next visits.
We comply with the requirements set by the CNIL regarding data retention periods. In this regard, concerning audience measurement cookies, we do not exceed a lifespan of 13 months for the trackers. As for the information collected through these trackers, it is retained for 25 months. Technical or essential cookies are kept for the duration necessary for the provision and proper operation of the service. As for other cookies, they are retained for a period reasonably necessary for the purposes for which they are used. The validity of the consent granted will not exceed a duration of 6 months.
Third party companies may also place cookies on your computer, subject to your preferences. Regardless of the type of cookies, only the issuer of a cookie can read or modify the information it contains.
1.2 Which cookies do we use?
- Essential cookies: these are essential to the website’s operation, particularly because they allow you to access reserved areas such as your personal space or your favorites. They allow us to remember information about the forms you are likely to fill out on our website, and to adapt the presentation of our website to your device’s display preferences. Without these cookies, you would not be able to use our website under normal conditions.
- Analytical or performance cookies: these cookies allow us to recognize the usage and performance of our website and improve its In particular, they measure data related to your browsing (volume of traffic on our website, headings and contents visited, etc.).
These cookies are essential because they allow us to improve the interest and ergonomics of our services, and even to detect browsing problems.
1.3 Accepting or rejecting cookies
You can choose to accept or decline cookies on your device at any time by configuring your browser software. You can also set your browser to offer you the option to accept or decline cookies on a case- by-case basis before a cookie is stored on your device. Please note that your browser’s cookie settings may change your conditions of access to our services. If your browser is set to decline all cookies, you will no longer be able to take full advantage of all our services. In this case, C.H.A.M. cannot be held responsible in case of degraded operation of the videoconference platform resulting from the impossibility to install or consult the cookies necessary for this operation and that you would have declined or deleted.
1.4 How to manage cookies in your browser?
Configuration of cookie management depends on your browser. Below are some online help tools. For more information on cookie settings depending on your browser, please consult the following websites:
Internet Explorer
Safari
Chrome
Firefox
Opera
Please note, by disabling cookies identified as optional via your browser, you will also disable all cookies used on this website, including those recommended for its operation.
1.5 More information on cookies with the CNIL (French Data Protection Authority)
You will find more information on the use of cookies on the
CNIL website.
Contact
If you have any questions about the Privacy Policy or if you have any queries about your personal data, please contact us:
- by sending us an email at the following address: dpo [a] canalcham.fr;
- by sending us a letter to the following address: C.H.A.M., 19-21, rue Dumont d’Urville – 75116 PARIS – FRANCE.