Privacy policy

Data collected via the contact form

All personal data collected is treated with respect for professional secrecy.

Roche Claire only collects the personal data of people who wish to fill in the online contact form. The data concerned is the surname, first name and e-mail address of the person filling in the form, as well as the content of the message specifying the contact request. Unless otherwise required by law, the data collected is kept for a maximum of three years from the date of the last contact.

Use of your personal data

Your personal data is processed for specific and legitimate purposes, in compliance with current regulations.

The collection of your personal data is limited to that which is relevant and strictly necessary for the purposes for which it is to be used.

Your personal data will not be reused for purposes other than those for which it was originally collected.

In accordance with Article 6 of the RGPD, processing of personal data is done for other purposes, subject to prior assurance of the lawfulness and relevance of such processing.

Measures to protect your personal data

To protect your personal data, appropriate organizational and technical measures are put in place, in compliance with applicable regulations.

These measures guarantee the security and integrity of your data. They prevent your data from being distorted, damaged or communicated to unauthorized third parties.

In addition, all employees of the local authority and all those involved in the processing of personal data comply with all the rules governing the protection of personal data and undertake to guarantee its confidentiality.

What are your rights?

In accordance with the applicable regulations, you have several rights, in particular:

  • the right of access to your data: you can obtain information about the data held about you and how it is used;the right of rectification: you may ask to correct or amend any information concerning you that is inaccurate or incomplete;
  • the right to erasure: you may request the definitive deletion of your data, in particular when it is no longer required for the purposes for which it was collected;
  • the right to portability of your data: you can ask for the data you have supplied to be transferred to another organization;
  • the right to object: you can request that your personal data not be used for certain processing operations, in particular when they are processed for communication purposes;
  • the right to restrict processing: you can ask to restrict the use of your data to a specific processing operation;
  • the right to withdraw consent: you may withdraw your consent at any time for any processing operations for which we have collected it;
  • the right to lodge a complaint with the CNIL: if you consider that the processing of your data constitutes a breach of the General Data Protection Regulation, you may lodge a complaint with the CNIL.

How to exercise your rights

You can exercise these rights by sending your request to the Data Protection Officer :

 

In order to facilitate the processing of your request, you should enclose a copy of an identity document bearing your signature, as well as all essential, complete and precise information relating to your request. You will receive a reply as soon as possible, and in any case within one month of receipt of your request. This deadline may be extended by two months depending on the complexity and number of requests. You will be informed of any such extension and the reasons for it within one month of receipt of the request. To find out more about your rights, visit the CNIL website.

A few definitions

Personal data: refers to any information that directly or indirectly identifies a natural person. Examples include name, telephone number, postal address, e-mail address, etc.
Processing of personal data: refers to any operation or set of operations, whether or not performed using automated processes, and applied to personal data or sets of data. Example of processing: data collection, recording, storage, etc.
Data controller: refers to any natural or legal person who, alone or jointly with others, determines the purposes and means of processing.
Processor: refers to any natural or legal person who processes personal data solely on the documented instructions of the controller and on the latter’s behalf. It is a natural or legal person distinct from the controller, subject to an obligation of security and confidentiality of personal data in order to ensure its protection and processing.
Recipient: refers to any natural or legal person, or department, who receives communication of personal data.