Privacy policy

The purpose of this confidentiality policy is to inform you, as a user of the website http://mri-compatibility.eu (hereinafter the "Website") published by the French Society of Cardiology, of the characteristics of the processing of your personal data as well as your rights in this regard.

The French Society of Cardiology processes data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and the free movement of these data, and repealing Directive 95/46 / CE (hereinafter the "RGPD") and Law n ° 78-17 of January 6, 1978 relating to data processing, files and freedoms (hereinafter the "Data Protection Act").

DATA CONTROLLER

The person in charge of processing personal data, detailed in this confidentiality policy, is the French Society of Cardiology (hereinafter the "SFC"), a recognized association of public utility governed by the law of July 1, 1901, located 5 rue des Colonnes du Trône, 75012 Paris, France chaired by Professor Ariel Cohen.

CATEGORIES OF DATA PROCESSED

The SFC is required to process the personal data of users of the Site. The categories of data processed depend on the purpose of the processing.

Purposes	Data Processed
User account management	This is the data required to create a user account on the Website and to manage access. These data include : surname and first name, e-mail address, type of structure of the main activity, country of activity, profession.
Manufacturer access management	This is the data of the natural person representing the manufacturer and responsible for providing and maintaining accurate up-to-date data on the manufacturer. These data are necessary for the creation of manufacturer access to the Website and for access management. These data include : professionnal e-amil address.
Statistical analysis of the use of the Website	Connection data, browsing history (on the Website only). To learn more about our use of the cookies, please consult our legal notice available on our Website. If the user has a user account, the personnal data of the user account can be combined with the data referred to below.
Ergonomics and quality analysis for improvement of the Website	Connection data.

PURPOSE OF PROCESSING AND LEGAL BASIS

Each data processing meets a specific objective (the purpose of the processing) and is based on a specific legal basis.

The table below indicates for each processing its purpose and legal basis.

Purposes	Legal basis for processing
User account management	The legal basis for processing is the consent of the users.
Manufacturer access management	The legal basis for processing is the consent of the representatives of the manufacturers.
Statistical analysis of the use of the Website	The legal basis for processing is the legitimate interest of the SFC to analyze the use (frequency of connections, pages viewed, etc.) of the Website and to analyze its results.
Ergonomics and quality analysis for improvement of the Website	The legal basis for processing is the legitimate interest of the SFC in analyzing connection data to improve the ergonomics and quality of the Website.

RECIPIENTS OF PERSONAL DATA

INTERNAL RECIPIENTS

The personal data processed in accordance with this Privacy Policy is intended for the following SFC services:

• The Rhythmology Group in charge of the analysis of connection data;
• The Marketing Department, in particular to improve the Site, carry out technical and statistical analyzes of the use of the Site;
• The Data Protection Officer to respond to requests for the exercise of the rights of the persons concerned by the processing;
• General Management, in particular to organize the defense of the SFC in the context of a dispute or in the context of an audit or a procedure initiated by a supervisory authority.

SFC SUBCONTRACTORS

To provide the Site, the SFC uses subcontractors for the following operations:

• Maintenance and development of the Website;
• Data hosting;

These processors will process user data in accordance with the instructions of the SFC.

DATA SECURITY AND CONFIDENTIALITY

As data controller, the SFC undertakes to take all necessary measures to preserve the security and confidentiality of data and in particular to prevent unauthorized third parties from accessing it, whether they are altered, disclosed or destroyed.

The SFC has therefore adopted measures to secure its internal computer network, its servers and the Website.

Data backup systems are planned to ensure business continuity in the event of an incident.

Physical access to the SFC premises is limited to personnel and persons authorized by the SFC.

SFC staff are subject to strict confidentiality obligations and each employee can only access data if their duties so require.

The SFC regularly conducts internal audits to verify the effectiveness of the technical measures adopted.

Finally, the SFC selects subcontractors capable of complying with the same requirements in terms of security and confidentiality that it imposes on itself.

DATA RETENTION PERIOD

The retention period of user data depends on the purpose for which it was collected.

Purposes	Data retention period
User account management	The data necessary for the management of the user account are kept until the account is deleted.
Manufacturer access management	The data necessary for the management of the manufacturer's access are kept until the change of the manufacturer's representative or until the manufacturer's access is removed
Statistical analysis of the use of the Website	The data are kept for the duration of the statistical analysis and are then kept for three years following the completion of the study.
Ergonomics and quality analysis for improvement of the Website	The data is processed occasionally during the performance of a quality action or investigation.

RIGHTS OF USERS

In accordance with the regulations on the protection of personal data in force, users of the Website have, at any time, the right to access, modify, rectify or delete personal data concerning them. They can also oppose the processing of personal data concerning them or request that the processing be limited. In addition, they have the right to request to receive their personal data in a structured and standardized format. They can decide to organize the fate of this data after their death by designating a person to carry out their instructions.

Users of the Website who have opened a user account are informed that the exercise of their right of opposition may result in the inaccessibility of their user account or its deletion, their personal data being essential for the management of their user account by the SFC.

Individuals who have opened manufacturer access on behalf of their company are informed that the exercise of their right of opposition may result in the inaccessibility of the site or the removal of access in the event that no representative is appointed as a replacement for the support of manufacturer access.

The user is informed that he can exercise the rights listed above with the data protection officer of the SFC:

• By post to the following address: Société Française de Cardiologie - Data Protection Officer - 5 rue des Colonnes du Trône, 75012, Paris, France
• Or by e-mail to the following address: This email address is being protected from spambots. You need JavaScript enabled to view it.

Site users are also informed of their right to lodge a complaint with a supervisory authority, and in particular in France, with the CNIL.

MODIFICATION OF THE PRIVACY POLICY

SFC may make changes to this Privacy Policy. It is therefore recommended that users consult it regularly.