Privacy Notice – INNOTHERA Group

The purpose of this Privacy Notice is to inform you about the collection, use and processing of your personal data.

We may update this Privacy Notice by posting an amended version on our website, including to adapt it to legislative and regulatory developments or changes. If we do so, we will notify you of such changes by changing the effective date at the top of this Privacy Notice.

1. About us
In this Privacy Notice, INNOTHERA refers to Innothera and its affiliates

INNOTHERA, as data controller, determines the purposes and means of the processing carried out.

We have appointed a Data Protection Officer. You can contact him at the e-mail address dpo@innothera.com

2. The type of personal data we collect
When you browse our websites, you may provide us with personal data about yourself, including:

Identifying data such as: name, postal address, e-mail address, telephone number, etc.;
Login data regarding the use of our websites if you open or transfer our communications, including data collected using cookies and other tracking technologies. Additional information on this subject is available here in our cookie notice.
Within the framework of vigilance (side effects of the products), you can communicate personal data to us such as date of birth, gender, medical history, etc.

3. How we use your personal data
INNOTHERA may collect your personal data for the following reasons:

To communicate with you, for example when you send us a message via the contact form on our websites or to send you newsletter-type communications related to our products and services or to invite you to professional events and webinars;
To give you access to our online services and in particular the management of your accounts;
To improve our products and services and our communications with you;
To identify and authenticate yourself, for example in case of exercising the right of access to your personal data we will ask for a copy of your national identity card or passport;
To perform statistical analysis;
To comply with our legal and regulatory obligations;
To safeguard our legitimate interests or the legitimate interests of third parties, provided that your interests do not exceed ours (an analysis is carried out for each individual case);
To respond to requests from administrative and judicial authorities;
To carry out research: the INNOTHERA Group develops and markets health products that aim to improve the treatment of everyday pathologies all over the world. To this end, Laboratoires INNOTHERA (RCS Créteil 388 422 594) and Laboratoire Innotech International (RCS Créteil 317 552 743), entities within the INNOTHERA Group, conduct research on health data to improve knowledge in their fields of activity and improve access to health products. In line with their legitimate interest to conduct scientific research in the field of health, Laboratoires INNOTHERA and Laboratoire Innotech International conduct studies on the National Health Data System (Articles 6(1)(f) and 9(2)(j) of Regulation (EU) No 2016/674). These data are processed in a confidential manner by authorized consultancy firms strictly within the context of carrying out these missions. No personal data is transferred to Laboratoires INNOTHERA or Laboratoire Innotech International, which only receive aggregated, anonymous statistics. You have several rights (access, rectification, opposition, limitation, deletion and portability) over the data concerning you within the National Health Data System, which you can exercise directly with the head of your health insurance fund by contacting the Data Protection Officer. If, despite the measures put in place to respect your rights and protect your data, you remain dissatisfied, you can lodge a complaint with the supervisory authority: the Commission Nationale de l'Informatique et des Libertés (cnil.fr).
4. Lawful bases we rely on for processing your personal data
We process your personal data only if we are permitted to do so by the data protection regulations.

Depending on the processing carried out, INNOTHERA will process your personal data according to one of the following legal bases:

The performance of a contract concluded with you: we need to collect your personal data for drafting the contract and for its execution;
Our legitimate business interests to send you communications with content that is relevant to you and enhance your experience using our products and services;
Your consent: depending on the processing carried out, your consent may be required. You may withdraw your consent at any time and in the future according to the withdrawal terms set out in section 8 "Your data protection rights" below;
Our legal obligations: for example, in the context of vigilance, we process the personal data that you communicate to us.
5. How long we keep your personal data
We keep your personal data only for as long as it is necessary for the purposes for which we process them.

6. How we share your personal data
We may share your personal data with:

INNOTHERA Group companies for the purposes described in this Privacy Notice;
Our service providers, for example to provide hosting for our websites;
Partners we collaborate with for the development and promotion of our products or services;
Administrative and judicial authorities.
INNOTHERA may transfer your personal data to countries outside the European Economic Area. In this case, we implement appropriate measures and use, for example, the Standard Contractual Clauses of the European Commission to ensure that the recipient of the data guarantees a sufficient level of data protection.

7. How we protect your personal data
The security measures taken by INNOTHERA aim to protect and maintain the security, integrity and availability of your personal data.

Although there is no data transfer or storage system that guarantees absolute security, INNOTHERA and its service providers and partners work to maintain the physical and electronic protection of your personal data.

We apply, inter alia, the following security measures:

Our computer infrastructures have firewalls to prevent unauthorized access;
Access to your personal data is strictly restricted on a "need-to-know" basis and for the reasons stated in section 3 "How we use your personal data" above;
We constantly monitor access to computer systems to detect and prevent misuse of data.
8. Your data protection rights
Where the applicable regulations on data protection allows it, you may exercise the following rights:

Request access to your personal data: this includes the categories of data processed, the reasons (purposes) for which we process your data, the origin of the data when we have not collected it from you and the recipients to whom we share your data;
Obtain the rectification of your personal data in the event that they are inaccurate, incomplete or require an update;
Obtain the deletion of your personal data provided that the law authorizes us to do so;
Withdraw your consent at any time when we have collected and processed your personal data on the basis of your consent (withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal);
You may object at any time to the processing of your personal data where such data is collected and processed on the basis of the legitimate interests we are pursuing;
Request a limitation of the processing to temporarily freeze the use of some of your data;
Give instructions on the fate of your personal data after your death.
You can exercise your rights by contacting our data protection officer at dpo@innothera.com

If you consider, after contacting us, that we have not properly responded to your request, you may submit a complaint to the competent personal data protection authority.