In accordance with the French Data Protection Act of 6 January 1978, as amended, and the General (EU) Data Protection Regulation of 27 April 2016, this privacy policy defines and informs you of the manner in which L’INSTITUT MUTUALISTE MONTSOURIS uses and protects the information that you transmit to us, if any, when you use this site accessible from the following URL: montsouris-institute.com (hereinafter the “Site”).
I. PERSONAL DATA
1. NATURE OF THE PERSONAL DATA COLLECTED
a.Data collected via site forms INSTITUT MUTUALISTE MONTSOURIS may collect the following personal data via forms when you use this site, your :
- name
- first name
- e-mail address
- telephone number
- Postal address
- IBAN code (for donations)
- IP address
(hereinafter your “personal data”). By providing this information, you agree that it may be processed by L’INSTITUT MUTUALISTE MONTSOURIS, for the purposes indicated in point 3 below and for the purposes indicated at the end of each form, and you have the right to access this data as indicated in point 6 below. b. Log files The site host (see Legal Notice) may automatically collect and record information in server log files. The information recorded in these files is automatically transmitted by your browser. Here are some of the data recorded:
- Browser type and version
- Operating system used
- URL from which the site is accessed
- Host name of the accessing computer
- Time of server request
This data does not directly identify any individual and is not cross-checked with other data sources. This data enables us to monitor and improve the performance of our website and is therefore used for maintenance purposes.
2. IDENTITY OF THE DATA CONTROLLER
The data controller is L’INSTITUT MUTUALISTE MONTSOURIS, whose registered office is at: MFPASS – 3, square Max Hymans 75748 Paris cedex 15 – tel: 01 56 61 60 29.
3. PURPOSES OF PROCESSING
INSTITUT MUTUALISTE MONTSOURIS may process your personal data for the following purposes:
- Donation request: in order to complete your donation to the IMM
- Ask a Question and contact us: so that we can get back to you
4. DATA PROCESSORS
Only L’INSTITUT MUTUALISTE MONTSOURIS is the recipient of your personal data. This data, whether in individual or aggregated form, is never passed on to a third party, with the exception of the sub-contractors that L’INSTITUT MUTUALISTE MONTSOURIS may call upon (you will find more information about them in point 7 below). Neither L’INSTITUT MUTUALISTE MONTSOURIS nor its subcontractors market the personal data of visitors and users of its site.
5. RETENTION PERIOD
Your personal data is kept by L’INSTITUT MUTUALISTE MONTSOURIS only for the time corresponding to the purpose of the collection as indicated in 3 above, which in any case shall not exceed :
5.1 for users
- for cookies: maximum 13 months
- for site user accounts: indefinitely until the account is deleted at the user’s request or the user’s access rights expire (membership, subscription, etc.). The data will be destroyed within 12 months of the account being deleted.
- for accounting data (invoices): 10 years
- for donations: 36 months after the last donation
- for other form data stored on the site: 24 months
5.2 for administrators
For administrators who have an account on our site, we also store the personal data indicated in their profile. All administrators can view, modify or delete their personal data at any time (with the exception of their username). Site managers can also view and modify this information.
6. RIGHTS RELATING TO PERSONAL DATA
You have the right to access and obtain a copy of the data concerning you, to object to the processing of this data, to have it rectified or deleted. You also have the right to limit the processing of your data. If you have any queries about your personal data, please contact us. Prior to exercising these rights, you will be asked to provide us with proof of your identity .
7. TRANSFER OF PERSONAL DATA
Apart from the information processed for donations and the payment of invoices, INSTITUT MUTUALISTE MONTSOURIS does not use any other external service provider. These service providers are authorised to facilitate the collection and processing of the data you have communicated to us. These service providers are located within the European Union and may have access to the data collected via the forms on the Site. INSTITUT MUTUALISTE MONTSOURIS has ensured in advance that its service providers provide adequate guarantees and comply with strict conditions regarding confidentiality, use and protection of data. On request, INSTITUT MUTUALISTE MONTSOURIS can provide the list of its service providers authorised to process personal data via the contact form at the foot of the site.
8. SECURITY OF PERSONAL DATA
INSTITUT MUTUALISTE MONTSOURIS undertakes to implement all necessary measures to guarantee the security of personal data.
9. PROCEDURES IMPLEMENTED IN THE EVENT OF A DATA BREACH
In the event of a personal data breach, INSTITUT MUTUALISTE MONTSOURIS undertakes to
- to notify the CNIL within 72 hours of becoming aware of the breach
- notify the persons concerned in the event of a high risk.
- document the incident internally by determining :
- the nature of the breach
- if possible, the categories and approximate number of persons affected by the breach
- the categories and approximate number of personal data records affected;
- describe the likely consequences of the data breach;
- describe the measures you have taken or intend to take to prevent a recurrence of the incident or to mitigate any negative consequences.
10. LINKS TO EXTERNAL SITES
This confidentiality policy applies solely to information collected on this site. This site may contain links to other external sites. However, INSTITUT MUTUALISTE MONTSOURIS cannot guarantee that these websites apply a confidentiality policy that complies with the European Data Protection Regulation. You are therefore invited to read the privacy policies of the websites you visit before sending them your personal data.
II. COOKIES POLICY
1. DEFINITION
In addition to the personal information that you send us for specific purposes, L’INSTITUT MUTUALISTE MONTSOURIS also uses cookies to ensure that its website functions properly.
WHAT IS A COOKIE?
A “cookie” is a small file containing written information that your browser stores when you visit a website. Its purpose is to collect certain information in order to analyse site activity and facilitate your browsing. For example, cookies remember your language preference so that you do not have to select it again the next time you visit.
For more information on cookies:
2. CONFIGURING YOUR COOKIE PREFERENCES
Cookies can be deactivated directly via the “Cookie configuration” tool set up on the L’INSTITUT MUTUALISTE MONTSOURIS site and accessible in the bottom banner of the site on your first visit or by clicking on the following link: [gdpr_preferences text=”Configure your cookie preferences”] a. Cookies required for operation Certain cookies do not require your prior consent if they are strictly necessary for the operation of the website. These include session identifier cookies, authentication cookies, load balancing session cookies and cookies used to personalise your interface. LOGIN & ADMINISTRATOR ACCOUNT If you have an account and log in to this site, a temporary cookie will be created to determine whether your browser accepts cookies. It does not contain any personal data and will be deleted automatically when you close your browser. When you log on, we will set a number of cookies to record your login information and screen preferences. The lifetime of a connection cookie is two days, that of a screen option cookie is one year. If you tick “Remember me”, your connection cookie will be kept for a fortnight. If you log out of your account, the login cookie will be deleted. PUBLISHING CONTENT By modifying or publishing an article, an additional cookie will be stored in your browser. This cookie does not contain any personal data. It simply indicates the identifier of the article you have just modified. It expires after one day.
b. Social network cookies – Content sharing
Articles on this site may include content integrated from other sites (e.g. videos, images, articles, etc.). Content integrated from other sites behaves in the same way as if the visitor went to that other site. These websites may collect data about you, use cookies, embed third-party tracking tools and track your interactions with this embedded content if you have a logged-in account on their website. Websites using cookies for their content integrated into this site:
- Facebook, whose cookie policy can be found by clicking on the following link: https://fr-fr.facebook.com/policies/cookies/
- Twitter, where you will find the options for controlling or restricting the use of cookies, as well as the policy on the use of cookies: https://support.twitter.com/articles/20170518#
- YouTube, where you can find help on deleting cookies from the Google Chrome browser by clicking on the following link: https://support.google.com/youtube/answer/32050?hl=fr but also the full cookies policy at the following link: https://www.google.fr/intl/fr/policies/technologies/cookies/
c) Statistics and audience measurement cookies With a view to adapting the site to the demands of its visitors, we measure the number of visits, the number of pages viewed and the activity of visitors on the site and the frequency with which they return. Google Analytics, the statistical tool used by IMM, whose confidentiality policy is available at the following link: https://www.google.com/analytics/learn/privacy.html?hl=fr generates a cookie with a unique identifier.