EN 
FR 
ES PRIVACY POLICY
ARTICLE 1: PREAMBLE
This confidentiality policy applies to the DOSCCAR website, owned by the Centre Hospitalier
Universitaire de Martinique (CHUM) (hereinafter referred to as "the site").
The purpose of this privacy policy is to explain to users of the site:
- How their personal data is collected and processed.
Personal data is any data that may identify a user.
identify a user.
- What rights users have concerning this data;
- Who is responsible for processing the personal data collected and processed;
- To whom this data is transmitted;
This privacy policy complements the Legal Notice and General Terms of Use
Terms and Conditions of Use that users can consult on the site.
ARTICLE 2: GENERAL PRINCIPLES GOVERNING THE COLLECTION AND PROCESSING OF DATA
In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing
processing of site users' data complies with the following principles:
- Lawfulness, fairness and transparency: data may only be collected and processed with the
consent of the user who owns the data. Whenever personal data is
collected, the user will be informed that his or her data is being collected, and for
collected, and for what purposes their data is collected;
- Limited purposes: data collection and processing are carried out to meet one or more of the purposes
specified in this Privacy Policy;
- Minimization of data collection and processing: only data that is necessary for the proper
purposes of the site are collected;
- Reduced data retention: data is retained for a limited period, of which the user is informed. of which the user is informed. When this information cannot be provided,
the user is informed of the criteria used to determine the retention period;
- Integrity and confidentiality of the data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.
In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the personal data may only be collected and processed if they comply with at least one of the following conditions at least one of the following conditions:
- The user has expressly consented to the processing;
- Processing is necessary for the proper performance of a contract;
- Processing is required by law;
- processing is necessary in order to safeguard the vital interests of the data subject or of another natural person;
- Processing may be necessary for the performance of a task carried out in the public interest or in the exercise of official authority;
- The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the data controller or by a third party.
ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED
PROCESSED WHEN BROWSING THE WEBSITE
A. DATA COLLECTED AND PROCESSED AND METHOD OF COLLECTION
The personal data collected on the site is as follows:
Identification data :
- Last name, first name
- e-mail address
- Type of professional profile
- Country of origin
- Photograph
Navigation data :
- Cookies
- Trackers
This data is collected when the user carries out one of the following operations on the site:
- Account creation
- Website browsing
- Customer relations
- Exercising rights
Data is collected and processed for the following purposes:
- Customer service
- To identify the services and sections visited by the user
- To comply with data protection obligations
B. TRANSMISSION OF DATA TO THIRD PARTIES
Personal data collected by the website is not passed on to any third party, and is processed solely by the website publisher.
The personal data collected by the website are not transmitted to any third party, except those necessary for the hosting of the website, and are only processed by the website publisher.necessary for the hosting of the site and are only processed by the site editor.
C. DATA HOSTING
The CHUM website is hosted by : OVH cloud, whose head office is located at the following address: 2 rue Kellermann - 59100 Roubaix - France
The data collected and processed by the site are hosted and processed in the European Union, more specifically in France.
D. DATA RETENTION PERIOD
CHUM keeps all data collected in the website's computer systems under reasonable security conditions for a limited period of time, depending on the purpose of the data and current legislation. At the end of these periods, personal data is permanently deleted.
For the processing operations listed below, data is kept for the following periods:
- Data relating to connection data is kept for 6 months, and for 1 year in the case of IP address registration;
- User consent for the use of cookies is kept for 24 hours to 1 year.
ARTICLE 4: DATA CONTROLLER
A. DATA CONTROLLER
The data controller is the Centre Hospitalier Universitaire de Martinique.
The data controller is responsible for determining the purposes and means of processing personal data.
In order to respond to any request relating to the protection of your personal data, CHUM's Data Protection Officer (DPO) can be contacted by e-mail at the following address:
B. OBLIGATIONS OF THE DATA CONTROLLER
The data controller undertakes to protect the personal data collected, not to pass it on to third parties without the user's knowledge, and to respect the purposes for which the data was collected.
To ensure that information and data transfer via the website is secure, CHUM guarantees its users that the website is password-protected (Bcrypt).
The application's programming interface uses HTTPS. Most of the HTTP headers that are sources of malicious use are filtered.
In addition, the data controller undertakes to notify the user of any rectification or deletion of data, unless this would entail disproportionate formalities, costs or steps.
In the event that the integrity, confidentiality or security of the user's personal data is compromised, the data controller undertakes to inform the user by any means necessary.
ARTICLE 5: USER RIGHTS
In accordance with regulations concerning the processing of personal data, the user has the rights listed below, subject to the conditions of applicable law.
In order for the data controller to comply with the user's request, the user is required to provide the following information: first and last names and e-mail address.
The data controller is obliged to reply to the user within a maximum of 30 (thirty) days.
A. PRESENTATION OF THE USER'S RIGHTS WITH REGARD TO THE COLLECTION AND
DATA PROCESSING
a. Right of access, rectification and deletion
The user may access, update, modify or request the deletion of data concerning him/her, by following the procedure set out below:
The user must fill in the online form, or send an email to:
A reply will be sent within a maximum of one month of CHUM's receipt of the user's request.
If he/she has one, the user has the right to request the deletion of his/her personal space by following the following procedure: the user must send an email to the DPO at the following address:
The deletion request will be processed within a maximum of 15 working days.
The deletion request will be processed within a maximum of 15 working days.
b. Right to data portability (subject to the conditions of applicable law)
Users have the right to request the portability of their personal data held by CHUM to another website or mobile application, by complying with the following procedure: the user sends
a data portability request to the DPO, by sending an email to:
c. Right to limit and object to - or withdraw consent from - data processing
The user has the right to request the limitation of, or to object to, the processing of his or her data, without CHUM being able to refuse, unless it can demonstrate the existence of legitimate and compelling reasons, which may override the interests and rights and freedoms of the user.
In order to request the limitation of the processing of his/her data or to formulate an objection - or withdrawal of consent - to the processing of his/her data, the user must follow the following procedure:
The user sends a request to limit the processing of his/her data to the DPO by sending an email to the following address:
c. Right to limit and object - or withdraw consent - to data processing
The user has the right to request the limitation of, or to object to, the processing of his or her data, without CHUM being able to refuse, unless it can demonstrate the existence of legitimate and compelling reasons, which may override the interests and rights and freedoms of the user.
In order to request the limitation of the processing of his/her data or to formulate an objection - or withdrawal of consent - to the processing of his/her data, the user must follow the following procedure:
The user sends a request to limit the processing of his/her data to the DPO by sending an email to the following address:
d. Right not to be subject to a decision based exclusively on an automated process
In accordance with the provisions of Regulation 2016/679, the user has the right not to be the subject of a decision based exclusively on an automated process if the decision produces legal effects concerning him or her, or significantly affects him or her in a similar way.
e. Right to determine the fate of data after death
Users are reminded that they can organize what should become of their collected and processed data if they die, in accordance with law no. 2016-1321 of October 7, 2016.
f. Right to refer the matter to the competent supervisory authority
In the event that the DPO decides not to respond to the user's request, or the user wishes to contest a decision, or, if he/she believes that one of the rights listed above has been infringed, he/she is entitled to refer the matter to the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr) or any competent judge.
ARTICLE 6: CONDITIONS FOR MODIFYING THE PRIVACY POLICY
This privacy policy may be consulted at any time on the CHUM website.
The website publisher reserves the right to modify it in order to ensure its compliance with current law.
to ensure compliance with current legislation.
Users are therefore invited to consult this privacy policy regularly to keep abreast of the latest changes.
However, in the event of substantial modification of this policy, the user will be informed by e-mail sent to the address indicated by the user.
The user is hereby informed that this privacy policy was last updated on November 01, 2023.
ARTICLE 7: ACCEPTANCE BY THE USER OF THE
CONFIDENTIALITY POLICY
By browsing the website, the user certifies that he/she has read and understood the present privacy policy and accepts its conditions, particularly with regard to the collection and processing of his/her personal data.
