1. data controller
The CHU de Bordeaux is designated as the processor of personal data, in accordance with Article 4.7 of the General Data Protection Regulation (GDPR), in its capacity as coordinating institution of the REFeR-RYTHMO project, winner of the France 2030 Call for Projects "Clinical investigation networks, medical devices and in vitro diagnostic medical devices".
As data controller, CHU de Bordeaux determines the purposes and means of data processing necessary for the network's operation, particularly in the context of the collection, management and secure sharing of information relating to industrial projects and expert centers.
As such, it also ensures the implementation of obligations in terms of security, confidentiality, traceability and respect for the rights of the people concerned. In particular, he is the driving force behind the creation of the network's website and supervises the collaborative spaces for secure document sharing.
2. Personal data management
This privacy policy informs you about how the REFeR-RYTHMO network processes your personal data via the website and contact by the project manager.
The following data may be collected via the completion of the contact form / Time Tonic form:
- Last name, first name, position, structure to which you belong,
- Professional contact details (email, telephone),
- Information submitted as part of the submission of a project / Information submitted as part of the skills mapping of network members
No sensitive data (eg. No sensitive data (e.g. patient health data) is collected directly via this site or as part of this policy.
3. Purposes and legal basis of the processing of Personal Data
The processing of your personal data is subject to compliance with the RGPD and the French Data Protection Act no. 78-17 of January 6, 1978.
The data collected will be used exclusively for the following purposes:
- The network's analysis of the feasibility and needs of industrial projects,
- Putting you in touch with potentially involved investigating centers,
- Coordinating activities within the REFeR-RYTHMO... network.
As a public authority, CHU de Bordeaux relies on the performance of a mission of public interest to justify the lawfulness of this processing, in accordance with Article 6.1 of the RGPD regarding legal basis. These processing operations are based on a specific purpose of the REFeR-RYTHMO network, consisting in processing applications for submitted projects and organizing collaboration with partner clinical centers.
The network ensures that it only collects and processes data that is strictly necessary for the above purposes. CHU de Bordeaux and members of the REFeR-RYTHMO network also undertake to respect the confidentiality of data and messages transmitted to it.
4. Recipients of personal data
Your personal information is only processed by authorized REFeR-RYTHMO network personnel and is under no circumstances passed on to third parties for commercial purposes.
The recipients of the data are:[KC1]
- members of the scientific council (hospital centers, CIC-IT, IHU),
- people in charge of coordinating the network (members of the steering committee)
These entities are located in France or within the European Union.
Data is hosted by service providers selected for their compliance with the RGPD [Timetonic/Resana], acting as processors within the meaning of Article 28 of the RGPD.
Data may also be transmitted to the competent authorities upon request, as part of a legal or regulatory procedure.
5. Retention period of personal data
Personal data is kept for as long as is necessary to achieve the aforementioned purposes, and for a maximum of 2 years from the last contact unless you object or request prior deletion.
Data relating to an ongoing collaboration or project may be kept for longer for archiving, scientific or contractual follow-up purposes, in accordance with legal or regulatory obligations.
6. Security of Personal Data
REFeR-RYTHMO implements appropriate technical and organizational measures to ensure the security, integrity, confidentiality and availability of personal data, in order to prevent their loss, unauthorized disclosure, alteration or destruction.
7. Your rights
Personal rights
In accordance with the RGPD and the French Data Protection Act (Loi Informatique et Libertés), you have rights with regard to the personal data you communicate to us via our website:
- the right of access enables you to find out whether data concerning you is being processed and to obtain communication of it;
- the right of rectification enables you to correct inaccurate data concerning you or to complete data concerning you;
- the right to erasure of your data;
- the right to data portability, in order to retrieve data concerning you;
- the right to processing limitation, in order to freeze the use of data concerning you in certain cases.
- the right to object for reasons relating to your particular situation / to withdraw your consent to the processing of your personal data at any time.
Internal rights of recourse
These rights can be exercised at any time and without justification.
For any questions relating to my personal data and the exercise of my rights, I can contact the operational team via the contact form on the website.
If I am not satisfied with the explanations provided, I can also lodge a complaint with the CNIL (www.cnil.fr)