RGPD

Privacy notice for customers of Care Insight

Introduction

As customers and users of the Care Insight platforms (including, but not limited to, Health & Tech Intelligence), this privacy notice applies to you. These platforms provide you with access to our database and other services and products.

We are committed to informing you about how we process your personal data, giving you control over its use, and protecting it. Here you will find information about the type of data we hold about you, how and why we collect it, how we use it, and how we protect it. This privacy notice also tells you your rights, how you can exercise them, and how the law protects you.

About Care Insight

Since 2014, Care Insight, specializing in the transformation of health through innovation and digital health, supports health stakeholders, the medical-social sector, providers, funders, and industries, in anticipation of their strategy for change and the deployment of their innovations, whether organizational or technological.

Care Insight is responsible for the processing of data and your personal data.

If you have any questions about data protection and these privacy notices, please send an email to: [email protected]

The data we collect about you

We collect the information necessary to carry out our business, but also to provide you with special services requested by you and to keep you informed. We may also use the information you provide for marketing purposes to communicate with you about our products and services. We may also share your information with third parties in order to add additional data about your business and your role within it.

We may collect, use, store and transfer different types of personal data about you that we have aggregated as follows:

Identity data: first name, last name, username, function/title, gender, language of contact.
Contact data: billing address, e-mail address and telephone numbers.
Financial data: account details (we use this data only for payment processing purposes).
Transaction data: details of payments to and from your account and other details about the products and services you have purchased from us.
Technical data: IP address, connection data, traffic data, browser type and version, time zone settings and location, browser plug-in types and versions, operating system and platform, and other information about how you accessed our website.
Profile data: username and password, purchases or orders made (subscriptions, your interests, preferences, customer feedback and questionnaire responses).
Usage data: information about how you use our websites, products and services.
Marketing and communication data: your marketing and communication preferences.

We do not hold any information about your origins, religious or philosophical beliefs, sexual orientation, political opinions, union affiliations, or health.

Third-party data you provide to us

In connection with the use of our services, you may also provide us with personal information about third parties, including information about KOLs that we do not hold in our database.

How do we collect your personal data?

We generally collect personal information about you, your employees, and your representatives when you decide to interact with us or subscribe to one of our products or services (Care Insight, Health & Tech Intelligence,...) or when you express an interest in them. We also look at how you use our website so that we can provide you with the best possible experience.

The data collection methodology includes:

Direct interactions: you may provide us with personal information by filling out forms or contacting us by mail, phone, email, in person at events, as part of our contractual agreement with you, by entering this data on one of our customer platforms, etc. This includes personal data that you provide when:

You order or express interest in our products or services,
You subscribe to our services or publications,
You are participating in a webinar, event or survey,
You subscribe to our newsletter.

Technology or automated interactions: When you interact with our website, we may automatically collect technical data about your equipment, browsing actions, and patterns. We collect this personal data using cookies, server logs, and other similar technologies. We may also receive technical data about you if you visit other sites using our cookies.
Electronic surveys, telephone conversations or video calls of product demonstrations that we may monitor, record, and store for purposes of quality control, staff training or product development, to the extent that it is in our legitimate interest.
Third parties or publicly available sources: we may receive personal data about you from third parties and public sources, including social media platforms, our own prospect/customer databases, or online search references.

Why do we use your personal data:

To verify your identity and rights to our products and services when you contact us or access our services
To protect you from fraud
To carry out our obligations to you under our contract
To provide you with services and manage your subscriptions
To send you statements and invoices and collect payments from you
To provide you with commercial quotes
For statistical analysis
To operate and improve our services and website
To inform you of any changes to our website or services that may affect you
To provide you with technical support
To get your opinion or feedback on our services
To ensure transparent access to all applications you have subscribed to
To enforce our legal rights or comply with legal requirements
To improve the experience and communications on websites and products, taking into account subscriptions to your products and/or data collected

We use your personal data only when permitted by law, namely:

When we need to perform the contract that we are about to enter into or conclude with you.
Where we are required to comply with a legal or regulatory obligation.
When it is in our legitimate and commercial interests to operate customer platforms, and thus provide you with access to our media database. We make every effort to consider any potential negative impact on you and your rights before processing your personal data.

Tracking

Care Insight emails may contain a small invisible image of 1 pixel, which can be used to inform the sender (our customer) about opening the email. If the recipient of the email has images enabled on their device, when opening the email, a message (an automatic request) is sent to the Care Insight server, requesting the image. This request is recorded by Care Insight and indicates to us or our client that the email has been opened. A similar process can be used for links or attachments in the email, with a request sent to Care Insight for content that is accessible via links or attachments, indicating to Care Insight that the link or attachment has been accessed.

We may share your personal data with one or more of the following:

We may share your personal data with one or more of the following :

Suppliers we engage to provide services on our behalf, such as marketing companies. These companies are based in Europe and North America.

But also professional advisors, including lawyers, accountants, and insurers if necessary, to enable them to provide us with their services.

Finally, regulators and other authorities require reporting of activities in certain circumstances.

We may also share your personal data with third parties to whom we may choose to sell, transfer, or merge parts of our business or assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change occurs in our company, the new owners may use your personal data in the same way as in this privacy statement.

We require all third parties to respect the security of your personal data and to process it following the law. We do not allow our third-party service providers to use your personal data for their purposes. We only allow them to process your personal data for specific purposes and by contractual obligations, which ensure adequate protection of your data.

How do we protect your personal data?

We are committed to protecting your personal data. We put in place safeguards, including appropriate technologies, policies, and contractual arrangements, so that the data we have about you is protected from unauthorized access and misuse. Finally, we will not keep your personal data longer than necessary.

How long will we use your personal data?

As long as you remain a customer, we keep your data to continue providing services to you, and we will delete your personal information upon the expiration or termination of your contract with us, following the period provided for in the contract between us. Otherwise, if you no longer wish to use the services of Care Insight, we will retain your personal data for 24 months before deleting it.

Your Rights

In certain circumstances, you have rights under data protection laws relating to your personal data, including the right of access, the right to rectification, the right to erase, the right to restrict processing, the right to data portability, and the right to object.

If you wish to exercise your rights, please contact: [email protected]

Under the EU data protection laws, you have many rights regarding your personal data. These rights are not absolute - in some cases, they will not apply to you, or the particular use we make of your data. There are exceptions, for example, if we need to process the data to comply with our legal obligations, but if this is the case, we will let you know.

Your rights include:

Access to your personal information

To request any change or correction to your information
To require the deletion of personal information about you in certain situations by submitting a "Rights Request" to us.
To receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, and have the right to pass this data on to a third party in certain situations
To object at any time to the processing of your personal information for direct marketing
To oppose decisions made by automated means (including profiling)
To object in some cases to the continued processing of your personal information
To limit the processing of your personal information in certain circumstances

You also have the right to file a complaint at any time with the French National Commission for Data Protection and Freedoms (CNIL), the French supervisory authority for matters relating to data protection and individual rights, under the General Data Protection Regulation.

National Commission for Information Technology and Freedoms
3 place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07
01.53.73.22.22

We hope that we will be able to resolve any concerns you may have before you contact the CNIL, so do not hesitate to contact us in the first place: [email protected]