Privacy notice

INSTITUT DE RECHERCHES INTERNATIONALES SERVIER (“SERVIER” or “We”), a company registered under the laws of France under number 085 480796 RCS Nanterre, having its registered offices at 50, rue Carnot – 92284 Suresnes – France, proposes this website in order to provides Users with information relating to the health domain and the services it proposes.Using the Site, the User (hereinafter referred to as “User”) acknowledges that he has read these TCU, declares that he accepts them without reservation and commits to respecting them. Their content may change, so we invite the User to consult them on a regular basis.

We respect and value the privacy of everyone who use the website, (referred as “Our Site”) and will only collect and process personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law. This Privacy notice applies only to your use of Our Site.

1. What Data Do We Collect?

We may collect some or all of the following personal data from users of Site:

• Audience statistics of the Site: Number of users and sessions
• Session duration
• Operating systems
• Device models
• Geography
• IP address

If you creates an account from the data request portal (https://clinicaltrials.servier.com/data-request-portal/login/), the following personal data are collected:

• Identity
• Job title
• Email address
• User login
• Password
• Registration date
• Last login date

If you submit a “data request” https://clinicaltrials.servier.com/data-request-portal/request/), the following personal data are collected:

• Identity
• Title
• Institution
• Curriculum vitae (file)
• Contact details (postal address, phone number, email address)
• Research funding sources
• Potential conflicts of interest
• files with various contents uploaded with discretion by the user (no more than 3 files)

Mandatory nature of data collection and consequences for failure to provide data: the data collected (in particular cookies) during browsing for the measurement of the Site audience and the use of online services are optional.

Please note that We do not provide services directly to children or proactively collect their personal information.

Pursuant to the General Data Protection Regulation (“GDPR”), “Personal Data” means any information that can identify a natural person directly or indirectly.

2. How Do We Use Your Personal Data?

Under the GDPR, We must always have a lawful basis for using Personal Data. This may be because the data is necessary for because it is in our legitimate business interests to use it, or because you have given your express consent.

Your Personal Data may be used for the following purposes:

• Used to make anonymous statistics about visits of Our Site.
• Used to manage the accounts created from the data request portal.
• Used to evaluate the submitted “Data Request” in order to refuse or to accept the request.

We do not further process the data in a way that is incompatible with the purposes described above.

3. What Are Your Rights?

You may have the right to request access to and receive information about your Personal Data; update, rectify or erase your Personal Data; restrict or to object (on legitimate grounds) to the processing of your Personal Data by sending an email at the Data Protection Officer (“DPO”) of SERVIER at the following address: protectiondesdonnees@servier.com.

If you have any cause for complaint about our use of your Personal Data, you have the right to lodge a complaint with the competent data protection authority in your country.

4. How Long Will You Keep My Personal Data?

We will not keep your Personal Data enabling your identification for any longer than is necessary considering the reason(s) for which it was first collected. Personal data collected for audience measurement purposes are kept for 6 months. Personal data related to your account will be kept for 12 months after its last connection to the data request portal.

In case of submission of a “data request”:

• if your “Data request” is refused by Servier, your personal data will be kept for 12 months after the decision.
• if your “Data request” is accepted (or partially accepted) by Servier, your personal data will be kept for 12 months after the termination of the Data Sharing Agreement then archived for 5 years and deleted.
• If you have signed a Data Sharing Agreement with SERVIER and you request access to your Personal Data (update, rectification, deletion), they will be kept for 12 months after the end of the Data Sharing Agreement.

5. How Do We Secure Your Personal Data?

We have put in place appropriate and commercially reasonable technical and organizational security measures to keep your Personal Data that We collect and hold confidential and to protect it against unauthorized or unlawful disclosure or access, accidental loss, destruction, alteration or damage taking into consideration the state of art of technology and the cost of implementation.

6. Do You Share My Personal Data?

We will not share your Personal Data with any third parties for the purposes of direct marketing.

We use data processors who are third parties who provide elements of services for us (hosting, maintenance, statistics…). We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your data with any organization apart from us.

In some circumstances we are legally obliged to share information, for example under a court order.

7. Law and Jurisdiction

This Policy is governed by French law. The Paris Courts in France have exclusive jurisdiction to settle any dispute which may arise out of or in connection with this Policy.