Privacy Policy — Union InVivo

Table of content

GENERAL

As part of its activities,  we have made respect for the privacy of  our  customers and users of our products and services a real priority. This privacy policy aims to present the contours of  our compliance with Regulation (EU) 2016/679 on the protection of personal data(hereinafter “the  Regulation”) and Law  No. 78-17 of 6 January 1978 on data processing and freedoms as amended (hereinafter “the Data Protection Act”).

The processing of personal data that we carry out is intended to comply with European and French data protection regulations. They are part of a desire for transparency, security and control of its data for the user. 

This policy aims to detail the different categories of personal data we collect, to simply present how we use and protect it, the legal grounds on which we rely to justify this  processing, as well as the rights you have over your personal data.

Thank you for dedicating sufficient time to reading this leaflet.

Legal qualification

In general, we are committed  to ensuring that your personal data is:

  • Processed lawfully, fairly and transparently.
  • Collected for specified, explicit and legitimate purposes.
  • Adequate, relevant and limited to what is necessary in relation to the purposes for which they were collected  in application of the principle of  data digitization.
  • Accurate and kept up to date. In the event that data concerning  you is  inaccurate, you are invited  to  inform us so that corrections can be made.
  • Kept in a form allowing your identification for a period not exceeding that strictly necessary for the purposes for which your data was initially collected. 
  • Processed in such a way as to guarantee appropriate security of your personal data against their destruction, loss, alteration or unauthorized access.
     

What personal data do we collect?

As part of our activity  we may collect a certain amount of  data  concerning the interlocutors of our customers  and  suppliers as well as the users of our products and services:  surname, first name, email, login ID, telephone number, function and photograph (if applicable).

When do we collect your personal data?

The collection of your personal data may take place at different times, and in particular:

  • In the context of the management of our commercial and contractual relations; 
  • When we create access to our specific portals (Sharepoint, power BI, PolPosition);
  • When we give you access to our extranets (E. Solis).
     

  1. As part of the invivo-logistique-stockage.com website
    Your personal data may be collected at various times, in particular:

    • When you complete the contact form
    • As part of the management of our commercial and contractual relations with our customers.

  1. As part of the laboragro.com website
    Your personal data may be collected at various times, in particular:

    • When you fill in the contact form
    • As part of the management of our commercial and contractual relations with our customers.

Why do we process your personal data?

  • Animation and presentation of the multi-product and multi-service offer of the InVivo union and its subsidiaries to customers; 
  • Registration to our events
  • Distribution of documentation
  • Responding to customers’ questions and requests for information;
  • Build and manage our customer database;
  • Allow users to correct their personal data and change their preferences;
  • To send newsletters to users who have consented.

What are your rights?

As a user of our products and services, you are in control of your data and have  many rights in their management. You can ask us for the exercise of your:  

  • Right of access

You can ask us to obtain confirmation that we are processing personal data about you and ask us for a copy of it.

  • Right to rectification

You can ask us to rectify or amend personal data about you that is no longer up-to-date or inaccurate.

  • Right to erasure

You can ask us to delete your personal data if it is inaccurate, incomplete, equivocal, or outdated, in particular.

  • Right to object

You are free to withdraw your consent at any time in order to stop receiving communications from us.

  • Right to portability

You can ask us to provide you, in a structured and machine-readable format, with your personal data, or ask another controller to provide us with your data.

  • Right to define guidelines relating to the fate of your data after your death

You may set guidelines for the retention, erasure and communication of your personal data after your death during your lifetime. These guidelines may be modified or revoked at any time. If you have not communicated these instructions, please be aware that your data will be deleted within the legal deadlines. Your heirs may also exercise the rights to your data and in particular request its deletion.

If you wish to exercise any of your rights in accordance with data protection regulations, please send your request to the following address:  

UNION INVIVO
83 Avenue de la Grande armée
75016 Paris
FRANCE

You can also contact our data protection officer directly at rgpd@invivo-group.com 

If you find a non-compliance or breach of your personal data, without prejudice toany other administrative or judicial remedy, you may lodge a complaint with the supervisory authority of the Member State in which you mainly reside, your place of work or where the non-compliance, the breach of your personal data has been committed. We invite you to consult the website of the Commission Nationale de l’Informatique et des Libertés to obtain additional information on your rights to appeal and the procedure required.

Commission nationale de l’informatique et des libertés (CNIL)
3 Place de Fontenoy – TSA 80715
75334 PARIS CEDEX 07

Who may access your personal data?

1. Recipients of your data

The data we collect is communicated to our authorized personnel, to any entity that is a member of the InVivo group and to the subcontractors we use in the course of our activity. We never transfer your personal data unauthorized third parties or who do not meet the requirements laid down by the Regulations in force.

 2. Data transfers outside the European Union

Your data is processed exclusively within the European Union and in any case benefits from a very high level of protection and confidentiality.
When your data is processed by a partner located outside the European Union and the European Economic Area, and whose country of establishment is not considered to ensure an adequate level of protection within the meaning of Article 45 of the Regulation, we undertake to guarantee the protection of your personal data in accordance with the strictest rules, in particular through the signing, on a case-by-case basis, of contractual clauses based on the model of the European Commission, or any other mechanism in accordance with the Regulation.

How long is your data kept?

We undertake to comply with the provisions in force relating to the retention period of personal data. The personal information of our customers and users of our products and services is not kept for a period additional to that strictly necessary for the purposes for which it was originally collected

Security of your personal data

We implement the appropriate technical and organizational measures with regard to the technique in order to preserve the security, integrity and confidentiality of the data of our customers and the users of our products and services in order to prevent their damage, erasure or unauthorized access by third parties.

Right of modification

We reserve the right, at any time, to change this Privacy Policy. We therefore invite you to read this document on a regular basis.