Eurobio Scientific team

Privacy Policy

This Privacy Policy informs you about how Eurobio Scientific collects and processes your personal data through its website “www.eurobio-scientific.com” (hereinafter referred to as the “Site”) as the data controller within the meaning of the provisions of the General Data Protection Regulation (« GDPR ») No. 2016/679 of April 27, 2016, and the French Data Protection Act No. 78-17 of January 6, 1978 (together referred to as the “Regulations“).

Definitions from the GDPR

The following definitions are taken from the General Data Protection Regulation (GDPR) No. 2016/679 of April 27, 2016, and the French Data Protection Act No. 78-17 of January 6, 1978.

Personal Data

Personal data means any information relating to an identified or identifiable natural person. This person can be identified directly (e.g., name and surname) or indirectly (e.g., by a telephone or license plate number, an identifier such as a social security number, a postal or email address, as well as voice or image), by means of a single data point or the combination of several data points (e.g., a woman living at a specific address, born on a certain day, and a member of a particular association).

Processing

Processing of personal data refers to any operation or set of operations performed on personal data, regardless of the method used (collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, communication by transmission or dissemination, or any other form of provision, alignment).

Processing of personal data is not necessarily computerized: paper files are also covered and must be protected under the same conditions.

Processing of data must have a specific purpose or objective determined prior to the collection and use of the data.

Data Processor

The data processor is the natural or legal person (company or public body) who processes data on behalf of another organization (the “data controller”), as part of a service or performance.

File

A file is a structured set of data that constitutes a processing operation. The data in a file can be accessed based on specific criteria.

Recipient

The natural or legal person, public authority, agency, or any other entity to which personal data are disclosed, whether a third party or not, regardless of whether it is a public authority or another body, in compliance with its functions.

Data controller

The data controller is the natural or legal person, public authority, agency, or any other body that determines the purposes and means of the processing, i.e., the objective and how it is achieved. In practice, this is usually the legal person represented by its legal representative.

Who is responsible for the processing of personal data carried out through the Website?

The responsible party for the processing of personal data is Eurobio Scientific (hereinafter referred to as “Eurobio Scientific” or the “Company” or “We”), a simplified joint-stock company with its registered office at 7 avenue de Scandinavie – 91940 – Les Ulis – France, represented by Thomas Moreaux – Group CHRO.

Whenever Eurobio Scientific determines the purposes and means of processing your personal data, it will be considered the data controller and will assume all the obligations imposed by the Regulations.

A designated contact person for data protection matters can be reached at the following address: dpo@eurobio-scientific.com.

How are your personal data collected?

We collect personal data that you directly provide to us:

This includes personal data that you directly provide to us by responding to our collection forms, particularly those available online on our Website (such as name, email address, etc.). This includes contact information and any other information you wish to provide us with.

It can also include data that you spontaneously provide when contacting our teams.

Additionally, we process data that you provide to us during our interactions (such as during a phone call or a demonstration of our software).

The data collected by Eurobio Scientific may be mandatory or optional. Mandatory fields are identified with an asterisk (*) on each relevant form. When data is collected orally, we will inform you of the mandatory or optional nature of the information. Any data you spontaneously provide to us is, by definition, optional.

We automatically collect certain personal data:

When you visit the Website, data is automatically recorded through your browsing activity on our Site, including:

Indirectly through third-party cookies,
Directly through server event logs (log files) by individuals responsible for managing the Site (either within the Company or as an IT service provider).

This refers to your browsing data.

When the collection of this browsing data is mandatory, it is collected to ensure the availability of the Site, its improvement, and the maintenance of a secure environment.

When the collection is optional, your prior consent is obtained for the use of the browsing data to measure the audience of our Site and the performance of our campaigns, optimize lead management, analyze your online behavior, and/or enhance the interactivity of our Site and provide targeted advertising.

This may include:

Data relating to your connection to the Site: For example, your IP address, the website address you visit, your search engine and its settings, the date and time of the connection, how you navigate the Site, and all other usage tracking data.
Data relating to the device you use to access the Site: Depending on the equipment you use and the enabled settings, the following data may be collected: the type of device (mobile phone, tablet, PC, MAC, etc.), the operating system you use, and its settings.

For what purpose and for how long do we use your personal data?

We use your data for the following purposes outlined in the table below.

These data are collected based on the legal bases provided by the Regulations, including:

The performance of a contract to which you are a party or the implementation of pre-contractual measures concerning you,
Compliance with a legal obligation,
Your consent to the use of your data,
Our legitimate interest in using your data.

Below you will find detailed information about the processing carried out through the Site

Processing name	Purposes	Legal Basis(es)	Concerned Data	Retention Period
Website Forms	Process your request and provide you with the requested information or services.	The processing is necessary for the legitimate interest pursued by Eurobio Scientific to manage its interactions with the public (customers and prospects) and enable it to respond to inquiries receive	Identity and contact information; Professional information; Other (content of correspondence, for example).	The data is retained for 3 years from the last contact in the active database, and then archived for a period of 5 years for evidentiary purposes.
Recruitment	Study and manage job applications.	The processing is necessary for the performance of pre-contractual measures and the establishment of the contractual relationship between Eurobio Scientific and job or internship applicants	Identity and contact information; Information contained in resumes, letters and emails submitted by applicants, interview dates, salary expectations, application status, type and duration of proposed contract.	The data is retained for 2 years from the last contact.
Newsletter Management	Sending regular newsletters to subscribers.	Consent	Email address	The duration of the person’s subscription to the newsletter (unsubscription possible via the unsubscribe link included in the newsletters).

If you have submitted a spontaneous application on the Website and it has not been selected, we will contact you to inquire whether you would like us to retain your personal data for the purpose of considering you for other positions in the future or if you prefer us to delete your data. In any case, your personal data will be automatically deleted two years after your last contact with Eurobio Scientific.

Data related to identification documents for the exercise of access, rectification, deletion, restriction, erasure, and portability rights will be retained for one year from their receipt.

In the event of a judicial proceeding, your personal data will be kept by Eurobio Scientific to ensure the defense of its interests.

What are your personal data shared with?

Within Eurobio Scientific :

Your personal data, in individual or aggregated form, are processed by the employees of Eurobio Scientific.

In all cases, only the data strictly necessary for the processing purpose are transmitted to authorized personnel who require access due to their roles. All individuals with potential access to your personal data are contractually bound by confidentiality obligations.

Specifically, the following individuals have access to your personal data:

Legal representatives of Eurobio Scientific
Sales manager of Eurobio Scientific
Your customer account manager
Members of Eurobio Scientific responsible for technical operations related to the exercise of individuals’ rights.

Transfers outside of Eurobio Scientific:

Several categories of third parties listed below may have access to your personal data. Only the personal data strictly necessary for the intended processing purposes are transmitted to them.

Subcontractors, including our Service Providers (the following list is provided as an example, ensure to adapt it based on your organization’s actual practices):
- IT:
  - Responsible for the administration, hosting, and maintenance of the Site
  - MICROSOFT for the use of Office 365, including email services (https://privacy.microsoft.com/fr-fr/privacystatement),
  - CRM solution provider
  - De fourniture d’outils d’analyse et de publicité (Google Analytics)
- Marketing service providers (marketing agency and SEO management, professional contact enrichment and validation solution)

We ensure that these subcontractors contractually commit to implementing protection levels equivalent to ours for personal data and, in any case, compliant with the regulations.

Companies providing the third-party cookies for which you have given your consent (see cookie policy).
Exceptionally, competent authorities (administrative, judicial, or law enforcement) as required by legal obligations or to protect the rights, property, or safety of Eurobio Scientific.

Eurobio Scientific undertakes not to transmit your personal data to third parties unless:

You have given prior consent to share your personal data with third parties,
Sharing your personal data with the mentioned third party is necessary for the provision of requested products or services,

A competent judicial or administrative authority requires Eurobio Scientific to provide said personal data.

Transfert outside the UE

Currently, we do not transfer your data outside the European Union. However, in order to ensure the security and confidentiality of your data, we inform you that in the event your data is transferred outside the EU, we commit to imposing a confidentiality obligation on all our service providers.

Additionally, any potential transfers will be made to:

Either a country recognized by the European Commission as providing an adequate level of protection;
Or a country that does not offer adequate protection but where the transfer is permitted under applicable regulations, particularly when covered by the European Commission’s standard contractual clauses, which the CNIL (French Data Protection Authority) has previously recognized as providing a sufficient level of privacy and fundamental rights protection.

What Are Your Rights Regarding Your Personal Data?

Right of access

You have the right to obtain confirmation from Eurobio Scientific as to whether or not personal data concerning you is being processed. If the data is being processed, you have the right to access this data and the following information:

The purposes of the processing;
The categories of personal data concerned;
The recipients or categories of recipients to whom the data has been or will be disclosed;
The envisaged retention period for the data, if possible, or if not possible, the criteria used to determine that period;
The right to request from Eurobio Scientific rectification or erasure of your personal data, or restriction of the processing, or to object to the processing;
The right to lodge a complaint with the CNIL (French Data Protection Authority);
When personal data is not collected directly from you, any available information about the source;
The existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.

Finally, if personal data is transferred to a third country or an international organization, you have the right to be informed of the appropriate safeguards relating to the transfer.

Eurobio Scientific will provide you with a copy of the data undergoing processing upon request. Reasonable administrative fees may be charged for any additional copies you request.

If you request a copy of the data electronically, Eurobio Scientific will provide it in a commonly used electronic format unless you specify otherwise. The right to obtain a copy of personal data must not adversely affect the rights and freedoms of others.

Right of rectification

You have the right to request Eurobio Scientific to rectify your inaccurate data without undue delay. You also have the right to have incomplete personal data concerning you completed, including by providing a supplementary statement.

Right to erasure

Vous disposez du droit à l’effacement de vos données personnelles dans les meilleurs délais lorsque l’un des motifs suivants s’applique :

a.The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

You withdraw your consent on which the processing is based, and there is no other legal ground for the processing. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You exercise your right to object to the processing, and there are no overriding legitimate grounds for the processing.
The personal data has been unlawfully processed.
The personal data must be erased for compliance with a legal obligation.
The personal data was collected in relation to the offer of information society services referred to in Article 8(1) of the General Data Protection Regulation (GDPR).

You are informed that the right to erasure may not apply if the processing is necessary:

To comply with a legal obligation,
For the establishment, exercise, or defense of legal claims.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data when one of the following applies:

The accuracy of your personal data is contested, and the processing is being verified.
The processing is unlawful, and you oppose the erasure of your personal data and request the restriction of its use instead.
Eurobio Scientific no longer needs the personal data for the purposes of processing, but it is required by you for the establishment, exercise, or defense of legal claims.
You have objected to the processing, pending the verification of whether the legitimate grounds of Eurobio Scientific override your own.

Right to data portability

You have the right to receive the personal data you have provided to Eurobio Scientific in a structured, commonly used, and machine-readable format when the following conditions are met:

The processing is based on consent or on a contract;
The processing is carried out by automated means.

As part of exercising this right, you have the right to have your personal data transmitted directly from Eurobio Scientific to another data controller, where technically feasible.

The right to data portability must not adversely affect the rights and freedoms of others.

Right to object

Under the right to object, you have the right to object, at any time and for reasons related to your particular situation, to the processing of personal data based on the legitimate interests of Eurobio Scientific.

Eurobio Scientific will no longer process your personal data unless it demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

You have the right to object, at any time, to the processing of your personal data for direct marketing purposes. To exercise this right, you can do so free of charge by either:

Clicking on the link provided in the email sent by Eurobio Scientific,
Sending an email to Eurobio Scientific at the following email address: dpo@eurobio-scientific.com

Fate of personal data after death

In accordance with the law, you have the ability to define directives regarding the retention, erasure, and disclosure of your personal data after your death.

You can communicate your directives to us or register them with a certified digital trusted third party. You may designate a person of your choice who will be responsible for executing your directives. In the absence of such designation, it will be your heirs

Regarding consent

Several processing activities of your personal data are dependent on your consent. This is the case, for example, when you request information via the contact form on the website.

You can withdraw your consent at any time by sending an email to the following address: dpo@eurobio-scientific.com.

Such withdrawal of consent will not affect the lawfulness of any processing of personal data based on your consent before its withdrawal.

Please note that personal data for which processing is mandatory to respond to your requests or provide the requested services are marked with an asterisk on the collection form. Without this information, Eurobio Scientific may not be able to respond to your requests or provide the requested products or services.

How to Exercise Your Rights?

Methods of exercising rights

You can submit your requests to the following addresses:

Eurobio Scientific, 7 avenue de Scandinavie – 91940 – Les Ulis – France
dpo@eurobio-scientific.com

To exercise your rights regarding your personal data, please include a copy of a valid identification document (identity card or passport), unless the information provided in your request allows for certain identification.

To assist you in your process, you can use the following link to access a letter template provided by the National Commission on Informatics and Liberty (CNIL): https://www.cnil.fr/en/model/document/exercising-your-right-access.

Response time

Eurobio Scientific has a period of one (1) month to respond to your request from the date of receiving it. This period may be extended by two months due to the complexity of your request or the number of requests received. Eurobio Scientific will inform you within one month of receiving your request.

Regarding commercial offers sent electronically, you have the option to unsubscribe at any time by clicking on the hyperlink available in each email sent by Eurobio Scientific. You also have the right to lodge a complaint with the CNIL, the supervisory authority (www.cnil.fr).

Use of Your Data by Third-Party Platforms

The website may contain links to other sites. Similarly, other sites may reference or contain a link to our website. We have no control over these other domains and websites. We encourage our users to read the privacy policies of each website and application with which they may interact. We do not endorse, verify, or approve the privacy practices or content of such websites or applications. If you visit the other relevant websites or applications, you do so at your own risk and are subject to their privacy policy.

Social media plugins

Our website uses plug-ins provided by third-party companies (e.g., Facebook, Twitter, Google+).

If you interact using the plug-ins by clicking on the icons available on our pages, some of your personal data, including technical and browsing data, will be transmitted and stored on a server controlled by the third-party company operating the corresponding social network related to the clicked icon. This data will then be processed by that third-party company in accordance with its terms and your account settings within that social network. Your data may be hosted outside the European Union, including in the United States.

If you do not wish for a third-party company operating a social network to link the personal data collected through the website to your user account within that social network, you must log out of that social network before visiting the website.

In any case, the use of these plugins is managed by the third-party companies that develop social networks and is exclusively governed by the terms and conditions applicable to the social network of which you are a member. We encourage you to familiarize yourself with the terms applied by these third-party companies that develop social networks.

Google Services

This website uses several features offered by Google. As such, some of your personal data, including browsing data, may be transferred to Google, whose servers may be located outside the European Union, including in the United States. The use of your personal data by Google is subject to the terms of use established by Google. We recommend that you read them carefully in order to fully exercise your rights in this regard.

The services in question include YouTube, Google Analytics, Google Ads, and Google Maps.

Integration of YouTube videos accessible on the website requires the installation of YouTube plugins.

When you visit one of our pages equipped with a YouTube plugin, a connection is established to YouTube’s servers through which information about the pages you have visited is transmitted.

Usually, if you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile and offer you targeted advertising. You can avoid this by logging out of your YouTube account.

The use of YouTube is in the interest of presenting our online offerings in an appealing manner. We would like to draw your attention to the fact that we have chosen to opt for the “enhanced privacy mode” offered by YouTube, which according to Google “allows you to embed YouTube videos without using cookies that track viewing behavior.” This feature is intended to prevent the usual placement of additional cookies by Google, enabling it to offer you personalized advertising later on.

Google Analytics uses cookies to analyze your use of the website based on your consent.

A specific configuration has been set up to anonymize the user’s IP address. You can prevent the storage of cookies by adjusting your browser settings; however, please note that if you do this, you may not be able to use all the functions of the website.

Furthermore, by downloading and installing the Browser Plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en, you can prevent:

Google from collecting personal data generated by Google Analytics cookies related to your use of the website (including your IP address),
The processing of this data by Google.

By doing so, an opt-out cookie will be installed, preventing the collection of your data during future visits to the website.

You can find more information about the use of user data in Google Analytics in Google’s data protection privacy statement accessible at the following address: https://support.google.com/analytics/answer/6004245?hl=en.

Google Ads uses cookies to offer you personalized advertising across all the devices you use.

You can permanently opt out of this cross-device usage by disabling personalized advertising in your Google account. To do so, you need to follow the following link: https://www.google.com/settings/ads/onweb/.

For more information and Google’s data protection provisions, please visit: https://www.google.com/policies/technologies/ads/.