In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, also known as the General Data Protection Regulation (GDPR), the publisher takes technical and organisational measures to protect the personal data of eHealth University website users.

These data may be collected through various media, tools and services made available to users, in particular:

• The registration form for eHealth University events;
• The subscription form for the eHealth University newsletter;
• Cookies.

1.  CATEGORIES OF PERSONAL DATA COLLECTED

The publisher, Castres-Mazamet Technopole, reserves the right to collect information on users of the site, and in particular the following personal data:

• For legal entities: the name of the organisation or company in question, its legal form;
  • For individuals: title, first and last names, position or department, food preferences (in the case of on-site catering), choice of payment method;
  • Data common to both: address, telephone number, email address, number of places reserved when registering for an event, follow-up of user requests.

2.  DATA CONTROLLER AND PURPOSES OF THE PROCESSING

Personal data are collected via various services or media by the website publisher acting as the data controller, except where it is expressly stated on the collection medium that the data controller is a third party. In this case, in accordance with the existing provisions, the controller shall specify the characteristics of the processing operation carried out under its sole responsibility.

Data are collected for distinct purposes in connection with use of the eHealth University website. These include managing visits to eHealth University events, dealing with any requests, fulfilling contractual obligations, complying with legal obligations, managing the exercise of user rights, and measuring the site’s audience in order to assess its performance.

On the legal basis of consent, some personal data are collected in order to promote eHealth University events and inform recipients of any news in the field of eHealth. These data are collected via a newsletter subscription form on the website. These data are limited to the person’s first and last name, or the name of the organisation or company in question, as well as the email address. An ‘unsubscribe’ link is also provided with each communication sent in this context.

The cookies on the website have no other purpose than to personalise and optimise each user’s browsing experience, and measure the website’s audience. They do not in any way identify users as individuals, but they do identify the devices used by them.

3.  CHARACTERISTICS ON DATA COLLECTION AND USE

Users are not obliged to answer all the questions they are asked when registering.

However, as some of the information is mandatory, if the user fails to reply, a window will open inviting them to respond in order to proceed to the next step.

Failure to provide the required data will mean that the publisher is unable to process the user’s request and allow them to use the tool or service in question.

4.  DATA RETENTION PERIOD

The user’s personal data are kept only for as long as necessary to achieve the purpose for which they were collected and, at the most, for the periods mentioned in this privacy policy:

• For the invoicing data of users registered as visitors to an eHealth University event: 10 years;
• For newsletter subscriptions: until the user has unsubscribed.

5.  HOW USERS CAN EXERCISE THEIR RIGHTS

Users have the following rights to their personal data when they are collected and processed in connection with the use of this website and its services:

• The right to access, rectify and delete data (for example, in the event of inaccurate, incomplete, ambiguous or outdated data);
  • The right to object to the processing of their data (except where there is a legal obligation to retain the data, e.g. for invoicing purposes);
  • The right to limit the processing of their data under the conditions provided for by the regulations;
  • The right to portability of their data;
  • The right to withdraw consent at any time;
  • The right to lodge a complaint with the supervisory authority.

To exercise their rights or obtain any information relating to their personal data, users may contact the publisher’s data protection officer:

• By email at the following address dpo@legidata.fr
  • By telephone on the following number: +33 (0)6 65 760 680
  • By post at the following address: Légidata, Hôtel d’Entreprises l’Arobase, 2 rue Georges Charpak 81290 Labruguière, France

In the event of any difficulty, unsatisfactory reply or lack of reply, they also have the right to refer the matter to the French Data Protection Authority (CNIL) at the following address: Commission Nationale de l’Informatique et des Libertés, 3 Place de Fontenoy, TSA 80715, 75334 Paris cedex 07, France.

6.  DATA RECIPIENTS

The user’s personal data may be sent to:

• The website publisher, Castres-Mazamet Technopole, located at Le Causse Espaces d’entreprises, Espace Ressources – 81100 Castres, France. Tel: +33 (0)5 63 73 59 70, Email: technopole@castres-mazamet.com;
  • The publisher’s subcontractors for the sole purpose of subcontracting.

7.  USE OF DATA IN CONNECTION WITH THE NEWSLETTER

If a user subscribes to the newsletter, they will receive communication emails from the publisher informing them of eHealth University events and, more generally, of news in the field of eHealth.

Communication about events organised by the publisher for which there is an entry fee, may be regarded as marketing. It is therefore agreed that it is only authorised with the user’s prior consent, granted at the time of subscription to the newsletter and which may be revoked at any time, in accordance with the applicable legislation.

In this respect, withdrawing consent by means of the ‘unsubscribe’ link provided in each email or formalised with the publisher’s data protection officer, will result in the immediate cessation of communications to the user.

By ticking the box relating to the conditions for subscribing to the newsletter, the user acknowledges having been informed of the privacy policy set up by the publisher, which can be viewed at any time on the eHealth Universitywebsite.

8.  USER UNDERTAKING

The website user undertakes not to violate the privacy or personal data protection of any third party and, therefore not to provide the publisher with data on third parties without their consent.