ClinSearch — Supporting your innovation

PRIVACY POLICY AND DATA PROTECTION

The purpose of this data protection policy is to present the compliance measures and the means implemented by ClinSearch to guarantee the effective respect of your rights as a data subject.

Your personal data is collected and processed by ClinSearch, located at 110 avenue Pierre Brossolette, 92240 Malakoff - France.

Pursuant to the French Data Protection Act No. 78-17 of January 6, 1978, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, users (hereinafter referred to as "You") whose personal data is collected or is the subject of collection, benefit from rights relating to the protection of their personal data.

In its capacity as data controller, ClinSearch undertakes to respect your privacy and to protect the personal data it processes:

In a lawful, fair and transparent manner with regard to the data subject;
Collected for specific, explicit and legitimate purposes;
Adequate, relevant and limited to what is necessary for the purposes for which they are processed;
Processed in such a way as to guarantee appropriate security of personal data.

1. Definitions

1.1 Personal data (personal data)

Any information relating to a natural person who can be identified, directly or indirectly.

1.2 Personal data protection regulations

Including Law° 78-17 of January 6, 1978, as amended, relating to information technology, files and freedoms, as amended, and any new laws, decrees issued for its application, as well as the General Data Protection Regulation (RGPD), the benchmark for personal data protection, which came into force on May 25, 2018.

1.3 Data controller

The natural or legal person, public authority, department or other body which, alone or jointly with others, determines the purposes and means of processing.

1.4 Processing

Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

2. Confidentiality and privacy policy

In accordance with the Personal Data Protection Regulations, the processing operations described in this Policy are supported by a specific legal basis.

This Policy informs you of the conditions under which ClinSearch processes your personal data and informs you of the rights you have with regard to your data.

2.1 Your personal data processed by ClinSearch

The data collected by ClinSearch is adequate, relevant and limited to what is necessary for the purposes for which it is processed (data minimization) and concerns the following categories of data:

Identity (e.g. surname, first name, contact details) ;
Personal life (e.g. contact details, the information you provide in your CV) ;
Professional life (e.g. professional contact details, position, company) ;
Location data (e.g. deduced from IP address).

Some of your personal data must be collected because it is essential for the purposes of processing. Failure to provide such data may limit the benefit of a service.

2.2 Purposes

We use your data :

To facilitate our exchanges with you ;
To manage your projects ;
To respond to your requests expressed via the forms or by using the means of contact available on the ClinSearch websites;
To contact you about our satisfaction surveys ;
To contact you for marketing purposes;
To improve and ensure the security of our websites;
To respond to your application for a position at ClinSearch ;
To fulfill our contractual obligations.

2.3 The legal basis

The Processing implemented by ClinSearch is, in accordance with the RGPD, founded on one of the legal bases below:

Legitimate interest in responding to your requests and ensuring smooth and efficient communication between us;
Performance of a contract ;
Legal obligations that apply to ClinSearch.

2.4 Recipients of your Personal Data

Depending on the purposes for which your personal data has been collected, it will be passed on to authorized ClinSearch personnel.

2.5 Retention period of your Personal Data

ClinSearch will keep your personal data in a secure environment for as long as is necessary to fulfill the purposes for which it was collected or for the minimum retention period required by applicable law.

When you are a ClinSearch customer, your data is kept for the duration of the contract and beyond, in accordance with specific legal provisions;
When you are a ClinSearch prospect, your data is kept for 3 years from the last contact you had with ClinSearch ;
When you apply for a position at ClinSearch, your application data is kept for 2 years from the date of your application or last contact with our teams, unless you are hired by ClinSearch.

The aforementioned retention periods may be extended in the event of, litigation, a request from an authority, in particular to provide proof of compliance with the RGPD or any other specific case authorized by law.

2.6 Your rights

A right of access: You have the right to obtain confirmation as to whether or not your personal data is being processed and, if so, to obtain access to said data as well as to a certain amount of additional information.
A right to rectification: You can ask for your personal data to be corrected or completed if it is inaccurate.
A right to deletion: For certain reasons, you may ask ClinSearch to delete your personal data.
A right to object: You may object at any time, for reasons relating to a particular situation, to the processing of your personal data based on ClinSearch's legitimate interests.
A right to portability: You can recover the data you have provided to ClinSearch, in a structured, commonly used and machine-readable format.

You can exercise these rights with ClinSearch's DPO (or data protection officer) by sending your request by post to the address: 110 avenue Pierre Brossolette, 92240 Malakoff, for the attention of the DPO or by using the following address: dataprivacy@clinsearch.net.

You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), notably on its website www.cnil.fr.

3. Safety measures

In view of technological developments, implementation costs, the nature of the data to be protected and the risks to the rights and freedoms of individuals, ClinSearch implements all appropriate technical and organizational measures to guarantee the confidentiality of the personal data collected and processed, and a level of security appropriate to the risk.

4. Subcontracting and data transfers

ClinSearch uses third-party tools and services to process your data.

Some processing operations may lead to transfers outside the European Union. Where applicable, ClinSearch ensures that such transfers are governed by legal mechanisms in accordance with the requirements of the RGPD.

Subcontractor	Functionality	Country	Legal warranties
ClinSearch Inc.	ClinSearch subsidiary	USA	Standard Contractual Clauses
Equinix	Data hosting	France	NA
Microsoft 365	Collaborative work tools (email, SharePoint, etc.)	France	NA
OVH cloud	Data hosting	France	NA
Service Provider	Software Validation	Morocco	Standard Contractual Clauses
AWS	Email Gateway	Ireland	Complies to GDPR
Brevo	Email Gateway	France	NA
Ineo Télé sécurité Services	Video protection	France	NA
DocuSign	Electronic signature	France	NA
IDnow	Identity check	France	NA
Selectour	Travel Operator	France	NA
Stormshield	Backup firewall	Ireland	Complies to GDPR

5. Changes to the privacy policy and personal data

If ClinSearch modifies this Policy, or if legal or regulatory texts require it, it will be published on our sites and will be effective as soon as it is published. Consequently, we invite you to refer to it each time you visit us, so that you are aware of the latest version, which is permanently available on our websites.

Connect with us

Privacy policy