Privacy policy

PRIVACY AND DATA PROTECTION IS ONE OF THE KEY VALUES OF CEGEDIM.

AS SUCH :

  • CEGEDIM TAKES THE NECESSARY MEASURES TO PROTECT THE PERSONAL DATA THAT CEGEDIM COLLECTS WITHIN THE FRAMEWORK OF ITS SERVICES.
  • YOUR DATA ARE HOSTED IN FRANCE BY A FRENCH COMPANY, CEGEDIM.CLOUD, WHICH IS CERTIFIED AS A PERENNIAL HEALTH DATA HOST, ISO 27001, ISO 20000, ISO 27017 AND ISO 27018, AND IS THEREFORE SUBJECT – TO REGULAR SECURITY AUDITS, BY APPROVED ORGANIZATIONS.
  • CEGEDIM DOESN’T TRANSFER ANY OF YOUR DATA TO COMMERCIAL OR ADVERTISING INDUSTRY.

Native compliance with the GDPR

The Site is administered in compliance with Regulation (EU) No. 2016/679 on General Data Protection Regulation (hereinafter “GDPR”), the provisions of the French Data Protection law (Loi Informatique et Liberté) of 6 January 1978 as amended, as well as the provisions of order n°2006-6 from january the 4th 2006, and n°2018-137 from february the 26th 2018 regarding health data hosting.

Secure hosting

Data hosting is provided by Cegedim.cloud, a certified host in compliance with applicable regulations, RCS 790 173 066, 137 rue d’Aguesseau 92100 Boulogne Billancourt. Hosting is provided exclusively in mainland France. Cegedim.cloud’s hosting and facilities management activities are certified ISO 27001 as well as ISO 20000, HDS, ISO 27017 and ISO 27018 and are therefore subject to regular security audits.

Would you like to know how your personal data are processed through our website?

The purpose of this Privacy Policy (the “Policy”) is to provide details on why we collect your data on our site (here in after the “Site”), how we use it and what rights you have.

This Policy is an integral part of the Terms of Use. Your use of the Site implies your acceptance of the provisions of the Terms and Conditions of Use and this Policy.

This Policy may be modified, supplemented or updated in order to comply with any legal, regulatory, jurisprudential and technical evolution. We invite you to regularly consult this Policy in order to keep you informed of the current version.

WHO IS DATA CONTROLLER?

The controller of a personal data treatment, within the meaning of GDPR, is the person, public authority, company or body that determines the purposes and means of the processing of personal data;.

CEGEDIM HEALTH DATA is data controller in the context of the navigation of the present website.

PRIVACY IS A PRIORITY FOR CEGEDIM

Whether it is the data controller or a processor, Cegedim Cloud takes the appropriate measures to ensure the protection and confidentiality of personal data in its possession or that it processes in compliance with the legal and regulatory provisions in force (French Data Protection Law (LIL) and GDPR)

 

WHICH PERSONAL DATA ARE COLLECTED?

Your data might be collected and processed by CEGEDIM HEALTH DATA :

  • Fristname
  • Lastname
  • Email

WHO ARE THE RECIPIENTS OF THE PERSONAL DATA COLLECTED?

The recipients of some of your Personal Data are :

– Affiliated companies of the Cegedim Group;

– Our certified healthcare data host: Cegedim.cloud;

– Where applicable, authorized persons at our subcontractors or partners, under conditions of strict confidentiality and exclusively in order to achieve the processing purposes set out in this Policy.

HOW LONG IS YOUR PERSONAL DATA KEPT?

When Personal Data is collected, it is kept for as long as it takes to process the requests made in the forms. After this period, we will delete or archive your Personal Data in accordance with the legal or regulatory provisions in force.

WHAT ARE YOUR RIGHTS AND REMEDIES?

In accordance with the regulations in force, you dispose of a right of access to your Personal Data, rectification, effacement as well as a right to limitation of treatment, a right to portability, a right of opposition and case a right to withdrawal of consent. You also have the right to define your directives concerning the conservation, deletion and communication of your Personal Data in the event of your death.

To exercise these rights, please contact us by e-mail at the following address : cnil.gers@gers-sas.fr or by writing to the following address: Cegedim Health Data , 137 rue d’Aguesseau, 92100 Boulogne-Billancourt, France. You must indicate the Personal Data you wish to correct, rectify or delete and identify yourself precisely with a copy of your identity card. We will do our utmost to respond satisfactorily to your requests in accordance with the relevant legislation and regulations.

In addition, you may lodge a complaint with the French data protection supervisory authority.

WHAT IS CEGEDIM HEALTH DATA’S POLICY ON COOKIES?

When you visit our Website or our Application, cookies may be deposited and stored on your terminal (computer, tablet, smartphone, etc.). The purpose of this Cookies Policy is to specify the different types of cookies and other similar technologies that may be used on our Site or Application.

WHAT IS A COOKIE?

A cookie is a small text file that a website may place on your terminal’s hard disk. It records information relating to your terminal’s browsing on the Site (such as the pages visited, the date and time of consultation, etc.) and is installed on the browser.

WHY DO WE USE COOKIES?

Cookies enable us to improve navigation on the Site, to optimize and personalize our services on the Site, and to measure audiences in order to offer you a website that corresponds to your expectations and preferences.
The cookies we use on our Site are either issued by us or by third-party companies on our behalf.
The cookies required to provide services and improve site performance do not require your prior consent. More specifically, these cookies enable us to offer users access to their account or any other reserved area via their login details, to memorize information relating, for example, to a form you have filled in or to a service, to implement security measures, to memorize your browser’s display preferences and to adapt the Site’s presentation.

In the case of cookies subject to your consent, your acceptance means that the cookies used by our site will be deposited and stored on the terminal with which you consult our site. You will therefore be able to use the Site’s services to the full.

If refusal of cookies subject to your consent does not prevent normal use of the site, certain services may not be provided.

Our Site may contain audience measurement cookies issued by third parties, enabling us to compile statistics on the number of visitors to and use of the various elements making up the Site, with a view to improving the interest and ergonomics of the Services offered.

If you do not wish to receive cookies from our website, you can set your browser to refuse cookies, block all cookies, or to alert you when you receive a cookie, asking you whether you agree to its placement, or you can inform us of your choices via the Site’s cookie management panel.

HOW LONG ARE THESE COOKIES KEPT?

Cookies are kept for maximum  thirteen  (13) months after they are first placed on the user’s terminal, following the expression of the user’s consent.

You can manage and modify the use of cookies at any time via your browser or the cookie management panel. We remind you that the deactivation of internal or third-party cookies whose purpose is strictly necessary for the provision of the service may slow down and/or disrupt access to and use of the site.

List of used cookies:

Cookie name Origin Subject
BIGipServerPOOL-WWW.SMART-RX.COM-HTTPS Cegedim This session cookie is used to improve site availability. The cookie is set by our load balancing system, in order to maintain a user session on only one of our web servers. It is deleted when you close your browser.
_pk_ref, _pk_cvar, _pk_id, _pk_ses, mtm_consent, mtm_consent_removed, matomo_ignore, matomo_sessid, matomo_sessid, _pk_hsr Matomo We use the Matomo audience measurement service to analyze the use of our site by visitors and to propose improvements.
The MATOMO solution is hosted by Cegedim.cloud in data centers located in mainland France. Cegedim.cloud is certified to host health data (HDS), ISO 27001, ISO 20 000 and have 2 certificates of compliance with good practices related to security ISO 27017 and ISO 27018.
For further information :
https://cegedim.cloud/
https://matomo.org/faq/general/faq_146/
GREUP, PREF, VISITOR_INFO1_LIVE, YSC Youtube This cookie enables Youtube to display video elements on our website.
tarteaucitron Tarteaucitron.js We use the Tarteaucitron javascript plugin. This plugin allows us to collect users’ consent and allows users to control the use of cookies on our site.