Privacy policy

Introduction

Cerba Laboratory, headquartered in the Industrial Zone of Bethunes, Rue de l'Equerre, 95310 Saint-Ouen L'Aumône, processes your personal data as part of website management, in compliance with current legislation.

This policy provides you with information on how Cerba Laboratory processes your personal data.

This policy, accessible on our website, is regularly updated to reflect legislative and regulatory changes, as well as any changes in the processing carried out by Cerba Laboratory.

This policy was last updated on May 23, 2022.

What are our commitments?

We are committed to complying with applicable regulations for all personal data processing we undertake. Thus, we commit to respecting the following principles:

• We process your personal data lawfully, fairly, and transparently.

• We collect your personal data for specific, explicit, and legitimate purposes and do not process them in a way incompatible with these purposes.

• We ensure that personal data are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

• We make our best efforts to ensure that personal data are accurate and, if necessary, updated. We take all reasonable measures to ensure that inaccurate personal data, considering the purposes for which they are processed, are deleted or rectified without delay.

• We retain your personal data in a form that permits your identification only for the duration necessary in relation to the purposes of processing.

• We guarantee an appropriate level of security for the personal data We process.

These commitments are manifested as follows:

• We respect your privacy.

• We ensure that the protection and security of your personal data are central to our concerns.

• We do not use your personal data for purposes that have not been brought to your attention.

• We do not believe that your personal data should be stored indefinitely.

• We do not sell your personal data to third parties.

• We work with trusted partners who provide sufficient guarantees regarding the implementation of technical and organizational measures so that our processing meets the requirements of current regulations.

• We respect your rights as a data subject, and as a patient, and make our best efforts to respond to your requests as soon as they are justified.

How do we collect your personal data?

We collect your data directly from you via our website.
 

What personal data do we process and for how long?

We remind you that personal data is information relating to an identified or identifiable natural person (the "data subject"), such as your name, address, or health data.

We undertake to process only personal data that is strictly necessary for the purposes for which it is collected and to retain it only for a duration necessary in relation to those purposes.

The categories of personal data we process are as follows:

Who can access your personal data?

Your data will only be disclosed, if necessary, to the following recipients:

• Authorized personnel of Cerba Laboratory;

• Subcontractors, trusted service providers, responsible in particular for information technology.

We make our best efforts to ensure that the number of these individuals remains as limited as possible.

We only provide our trusted service providers with the information they strictly need to provide the service, and they cannot in any way use your personal data for other purposes.

We always make our best efforts to ensure that all our trusted service providers with whom we work maintain the security of your data.

We also ensure that when our relationship with a trusted service provider comes to an end, the provider promptly deletes your personal data.

We select our trusted service providers with great care, ensuring that they provide sufficient guarantees, particularly in terms of expertise, reliability, and resources, to implement technical and organizational measures that meet the requirements of applicable legislation, particularly in terms of security. In this regard, we ensure that our trusted service providers only process personal data on our documented instructions. We also ensure that their staff are committed to confidentiality or are subject to an appropriate legal obligation of confidentiality.

What are your rights as a data subject?

You have the right to access, rectify, erase, and port your data, as well as the right to limit the processing of this data.

You can exercise your rights:

• by email at the following address: rpd.cerba@lab-cerba.com

• by postal mail, to the "Personal Data Referee" of Cerba Laboratory at the following address: Cerba SELAFA - Personal Data Representative, Industrial Zone of Bethunes, Rue de l'Equerre, 95310 Saint-Ouen L'Aumône.

If, after contacting us, you feel that your rights are not being respected, or that this policy does not comply with data protection rules, you can lodge a complaint with the CNIL.