Privacy policy

General Data Protection Regulation (GDPR)

The CNRS, in its capacity as data controller, informs you that your data is subject to processing. When certain information is mandatory in order to access specific features of the site, this mandatory nature is indicated at the time of data collection. If you refuse to provide mandatory information, you may not have access to certain services.

Personal data may be collected by the Institute of Human Genetics (IGH) UMR9002 CNRS University of Montpellier – 141, rue de la Cardonille – 34396 Montpellier Cedex 5 and the CNRS Communications Department, 3 rue Michel-Ange, 75016 PARIS, as well as by the Data Protection Officer (DPO), 17, rue Notre Dame des Pauvres, 54 519 Vandoeuvre Lès Nancy Cedex.

Personal data:
• Surname
• First name
• Email address
• Affiliated organisation
• Position (director, journalist, communications officer, etc.)

May be collected by:
• The unit’s management
• The web communications committee
• DPD

In the context of:
• newsletter subscriptions
• participation in events

Recipients of the data
This data is accessible by:
• The unit management
• The web communications committee

Data retention period
Data is retained for the following periods:
• At the end of an event, the list of data required for registration is deleted.
• After three years of inactivity, personal data is deleted in accordance with the right to be forgotten.
• A maximum of five years for authenticated contributors who are no longer part of the staff.

Transfer of data outside the European Union
No data is transferred outside the European Union.

Individual rights

In accordance with applicable legal and regulatory provisions, in particular Law No. 78-17 of 6 January, as amended, relating to data processing, files and freedoms, and European Regulation No. 2016/679/EU of 27 April 2016 (applicable since 25 May 2018), you have the following rights:

Authenticated contributor:
• Update or delete your data by contacting the recipients of the data;

User:
• Exercise your right of access to find out what personal data is held about you;
• Request that your data be updated if it is inaccurate;
• Request the portability or deletion of your data;
• Request the deletion of your account;
• Request the restriction of the processing of your data;
• Object, on legitimate grounds, to the processing of your data;
• Withdraw your consent to the processing of your data.

To exercise these rights, please contact the management: dirction@igh.cnrs.fr
You can also contact the Data Protection Officer at the following address:
DPD
17 rue Notre Dame des Pauvres
54519 Vandoeuvre lès Nancy Cedex
Contact the DPD

Right to lodge a complaint
If, after contacting us, you feel that your data protection rights have not been respected, you can lodge a complaint online with the CNIL or by post.