Privacy Policy

ARTICLE 1 : PREAMBLE

This privacy policy applies to the site : www.praxysante.fr.

The present privacy policy aims to inform the users of the site :

How their personal data is collected and processed. Personal data refers to any data that can identify a user. This includes, but is not limited to, first name and surname, age, postal address, email address, user location, and IP address ;

What are the users' rights regarding these data ;

Who is responsible for the processing of the personal data collected and processed ;

To whom these data are transmitted ;

Possibly, the site's policy regarding "cookies" files.

This privacy policy supplements the legal notices and the General Terms of Use that users can consult at the following address : www.praxysante.fr/privacy

Générales d'Utilisation que les utilisateurs peuvent consulter à l'adresse ci-après : www.praxysante.fr/privacy

ARTICLE 2 : GENERAL PRINCIPLES FOR THE COLLECTION AND PROCESSING OF DATA

In accordance with the provisions of Article 5 of the European Regulation 2016/679, the collection and processing of user data on the site respects the following principles :

Lawfulness, loyalty, and transparency : data can only be collected and processed with the user's consent. Each time personal data is collected, the user will be informed that their data is being collected, and for what reasons their data is being collected ;

Limited purposes : data collection and processing are carried out to meet one or more specific objectives determined in these general terms of use ;

Minimisation of data collection and processing : only the data necessary for the proper execution of the site's objectives are collected ;

Data conservation is limited in time : data is kept for a limited period, which is communicated to the user. When this information cannot be provided, the user is informed of the criteria used to determine the data retention period ;

Integrity and confidentiality of the collected and processed data : the data controller undertakes to guarantee the integrity and confidentiality of the collected data.

To be lawful, and in accordance with the requirements of Article 6 of the European Regulation 2016/679, the collection and processing of personal data can only occur if they meet at least one of the following conditions :

The user has given their explicit consent to the processing ;

The processing is necessary for the proper execution of a contract ; The processing is necessary to comply with a legal obligation ;

The processing is necessary to protect the vital interests of the person concerned or another natural person ;

The processing can be explained by a need related to the performance of a public interest mission or the exercise of public authority ;

The processing and collection of personal data are necessary for the legitimate and private interests pursued by the data controller or a third party.

ARTICLE 3 : PERSONAL DATA COLLECTED AND PROCESSED IN THE CONTEXT OF BROWSING THE SITE

A. DATA COLLECTED AND PROCESSED AND COLLECTION METHOD

The personal data collected on the PraxySanté la Suite IA des professionnels de Santé site are as follows :

first name, surname, company, n+finess, medical specialty, address, ERP used, service usage data

This data is collected when the user performs one of the following operations on the site :

creating an account on the site

Furthermore, when making a payment on the site, a record of the transaction, including the order form and invoice, will be kept in the site editor's computer systems.

The data controller will keep all the data collected in its computer systems on the site and under reasonable security conditions for a period of : - accounting data : 10 years

- user account administrative data : 2 years

- service usage data for the duration of the subscription + 1 month.

The collection and processing of data are for the following purposes :

Sale and execution of our services Improvement of our services

The data processing is based on the following legal grounds :

- contract execution

- user consent for data related to service usage

B. DATA TRANSMISSION TO THIRD PARTIES

The data may be transmitted to the following third party(ies) :

Google via its secure and HDS-certified hosting service, whose servers are located in France

C. DATA HOSTING

The PraxySanté la Suite IA des professionnels de Santé site is hosted by : Google Cloud, whose headquarters is located at the following address :

8 LONDON STREET 75009 PARIS 9

The host can be contacted at the following phone number : 01 42 68 53 00.

The data collected and processed by the site is exclusively hosted and processed in France.

ARTICLE 4 : DATA PROCESSING OFFICER AND DATA PROTECTION OFFICER

A. THE DATA PROCESSING OFFICER

The data processing officer for personal data is: Damien Forest, PraxySanté SAS. They can be contacted as follows:

by phone on +33 1 84 20 23 18, or by email at damien.forest@praxysante.fr

The data processing officer is responsible for determining the purposes and means of processing personal data.

B. OBLIGATIONS OF THE DATA PROCESSING OFFICER

The data processing officer undertakes to protect the collected personal data, not to transmit it to third parties without the user's knowledge, and to respect the purposes for which this data was collected.

The site has an SSL certificate to ensure that the information and data transfer on the site are secure.

An SSL certificate ("Secure Socket Layer" Certificate) is used to secure the data exchanged between the user and the site.

Furthermore, the data processing officer undertakes to notify the user in the event of rectification or deletion of data, unless this would result in disproportionate formalities, costs, and procedures for them.

In the event that the integrity, confidentiality, or security of the user's personal data is compromised, the data processing officer undertakes to inform the user by any means.

C. THE DATA PROTECTION OFFICER

Additionally, the user is informed that a Data Protection Officer has been appointed: Damien Forest.

The role of the Data Protection Officer is to ensure the proper implementation of national and supranational provisions related to the collection and processing of personal data. They can also be referred to as a DPO (Data Protection Officer).

The Data Protection Officer can be contacted as follows:

on +33 1 84 20 23 18 from Monday to Friday from 9am to 5pm, or by email at dpo@praxysante.fr

ARTICLE 5: USER RIGHTS

In accordance with the regulations on the processing of personal data, the user has the following rights.

In order for the data processing officer to process their request, the user must provide: their first and last name, as well as their email address.

The data processing officer is required to respond to the user within a maximum of 30 days.

PRESENTATION OF THE USER'S RIGHTS REGARDING DATA COLLECTION AND PROCESSING

1. Right of access, rectification, and right to erasure

The user can access, update, modify, or request the deletion of their data, following the procedure outlined below:

The user must send a form via their user account

2. Right to data portability

The user has the right to request the portability of their personal data held by the site to another site, following the procedure outlined below:

The user must send a form via their user account

3. Right to limitation and opposition of data processing

The user has the right to request the limitation or opposition of the processing of their data by the site, without the site being able to refuse, unless it can demonstrate compelling and legitimate reasons that prevail over the user's interests, rights, and freedoms.

To request the limitation of the processing of their data or to object to the processing of their data, the user must follow the procedure outlined below:

The user must send a form via their user account

4. Right not to be subject to a decision based solely on automated processing

In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based solely on automated processing if the decision has legal effects on them or affects them significantly in a similar way

5. Right to determine the fate of data after death

The user is reminded that they can organise what should happen to their collected and processed data in the event of their death, in accordance with Law No. 2016/1321 of 7 October 2016

6. Right to refer to the competent supervisory authority

In the event that the data processing officer decides not to respond to the user's request, and the user wishes to contest this decision, or if they believe that one of the rights listed above has been infringed, they have the right to refer to the CNIL or any competent court.

7. Personal data of adults

In accordance with the provisions of Article 8 of the European Regulation 2016/679 and the Data Protection Act, only minors aged 15 or over can consent to the processing of their personal data.

If the user is a minor under the age of 15, the agreement of a legal representative will be required for personal data to be collected and processed.

The site editor reserves the right to verify by any means that the user is over 15 years old or has obtained the agreement of a legal representative before browsing the site.

ARTICLE 6: CONDITIONS FOR MODIFYING THE PRIVACY POLICY

This privacy policy can be consulted at any time at the following address: https://www.praxysante.fr/privacy

PraxySanté reserves the right to modify it to ensure compliance with the applicable law.

Therefore, the user is invited to regularly consult this privacy policy to stay informed of the latest changes.

The user is informed that the last update of this privacy policy took place on 13 November 2018.

ARTICLE 7: INFORMATION SECURITY

Ensuring the security and confidentiality of your personal data is a priority for PraxySanté

We therefore implement all the technical and organisational measures necessary, given the nature, scope, and context of the personal data you provide to us and the risks associated with its processing, to preserve the security of your personal data and, in particular, to prevent any destruction, loss, alteration, disclosure, intrusion, or unauthorised access to this data, whether accidental or unlawful.

PraxySanté grants access to its information system to only those persons who need it to perform their function and raises awareness among its employees about the protection of personal data made available to them in the course of their duties and ensures that they comply with the applicable rules and the company's code of conduct.

Finally, we have put in place a breach management procedure to effectively address any potential personal data breaches, notify the relevant authority of these breaches without delay, and alert you when such a breach is likely to affect your personal data.

The PraxySante.fr website has an SSL certificate that activates the "https" protocol to ensure a secure connection between your browser and our web server. The data sent is encrypted.

ARTICLE 8: REGARDING COOKIES

The cookie settings on this site are set to "accept cookies" to offer you the best possible browsing experience. If you continue to use this site without changing your cookie settings or if you click "Accept" below, you consent to this.

See https://praxysante.fr/cookie-policy

Cookies:
This paragraph provides information about the cookies present on the services accessible ("Services") to any internet user via a connection terminal (computer, tablet, smartphone, etc.), from www.praxysante.fr

When visiting the Site, cookies may be automatically installed on the internet user's terminal (computer, phone, tablet...). The cookie is used to record information related to the navigation of internet users in order to offer them personalised navigation (e.g. identification of the internet user allowing them to access their account, management of the order basket, memorisation of consultations and personalisation of the offers proposed).

The internet user is informed of the recording of cookies on their terminal by a banner as soon as they arrive on the Site's homepage. By continuing to navigate on the Site without setting up the collection of their identifiers, the internet user accepts the collection of this information and the creation of the identifier.

This page allows the internet user to obtain the necessary information to disable these cookies at any time and free of charge. However, it is recalled that disabling cookies may reduce or prevent access to all or part of the services offered by the Site.

What is a "cookie"?
A cookie is a text file in alphanumeric format deposited on the internet user's hard drive by the server of the visited site or by a third-party server (advertising agency, web analytics service, etc.). A cookie allows an internet user to be recognised when they return to a website. However, from a technical point of view, the cookie allows a machine to be recognised and not really an internet user. A cookie can only be used by a server of the domain that placed it.

The different types of cookies
Different types of cookies are used on the Site, they have different purposes

Essential, performance and functional cookies:

The "essential" cookies are essential for the proper functioning of the Site. They allow the internet user to access the website and its services and cannot be disabled/deleted. The "Performance and Functional" cookies are used to offer the internet user a better service. They improve the functioning of the website in relation to the internet user's needs, in relation to their past behaviour, their recorded settings. They prevent the internet user from having to provide information already given (visited pages; language settings, country; identifier; etc.) during a previous visit to the Site. These cookies do not collect personal information and do not allow the internet user to be identified or personal data to be collected.

The internet user can disable/delete these cookies on their terminal. However, they will no longer be able to benefit from a number of features that are nonetheless necessary to navigate in certain areas of the Site.

Analytical cookies:
The website uses the Google Analytics software to analyse certain information from visitors, such as traffic, browser usage, number of new visitors, marketing activity and pages viewed. This information helps us to make improvements to the website both qualitatively and quantitatively. The data stored by these cookies can be seen by the website's relevant teams, but no confidential information is recorded.

Our analytics cookies are collected anonymously: https://support.google.com/analytics/answer/2763052?hl=fr

Embedded content from other sites:

The articles on this site may include embedded content (e.g. videos, images, articles...). The embedded content from other sites behaves in the same way as if the visitor were to visit that other site.

These websites may collect data about you, use cookies, embed third-party tracking tools, track your interactions with this embedded content if you have a connected account on their website.
We offer a system on our site that allows you to authorise or prohibit these services individually.

Browser settings:
Most browsers automatically accept cookies by default. However, the internet user can configure their browser to prevent the recording of cookies on their computer or associated device. Some browsers offer a mode where cookies are always deleted after a visit. The internet user can also set up their browsing software to notify them of the cookies that are deposited on their terminal and choose to accept or reject them on a case-by-case basis.

It is recalled that disabling cookies may reduce or prevent access to all or part of the services offered by the Site. If the browser is configured to refuse all cookies, the user will not be able to benefit from the essential functions of the Site. In order to manage cookies in line with the internet user's expectations, we invite them to configure their browser according to the purpose of the cookies as mentioned above.

The following links describe step by step how to adjust your cookies according to the browsers:

You use Google Chrome, go here: https://support.google.com/chrome/answer/95647?hl=fr
then locate the files that contain the name "PraxySanté", select them and delete them.

You use Firefox, go here: https://support.mozilla.org/fr/kb/effacer-les-cookies-pour-supprimer-les-information?redirectlocale=fr&redirectslug=effacer-cookies-supprimer-infos-sites-enregistrees
then locate the files that contain the name "PraxySanté", select them and delete them.

You use Internet Explorer, click here: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies#ie=ie-11
select the cookies that contain the name " PraxySanté" and delete them.

You use Safari, go here: https://support.apple.com/kb/PH17191?locale=fr_FR&viewlocale=fr_FR
select the cookies that contain the name "PraxySanté" and click on "Delete" or "Delete all".