Updated: January 2020
The companies of the Sterimed Group ("Sterimed," "we," "us," or "our") are committed to respecting your privacy. In support of our commitment, we developed this privacy notice to be transparent about the data we collect about you and how it is used and shared, as well as the choices and rights available to you with respect to the data we maintain about you. This privacy notice applies to:
- All Sterimed websites, applications, communications, and resources that display or link to this privacy notice.
- Information about you collected physically.
If you reside in the United States or elsewhere outside of Europe, Sterimed will be responsible for the data we collect, maintain, or otherwise process about you. If you reside in Europe, Sterimed will be the controller of your personal data and responsible for the processing of such data by or on behalf of Sterimed.
Collection and Use of Personal Data
Personal Data Collected
We collect information that can be used to identify or contact a person. Personal data includes information that does not directly identify you by name or include your contact information, but which may be used to identify that a specific computer or device has accessed our website and which if combined with certain other information could be used to identify you. The types of personal data we collect and process include:
- Full name
- Contact information
- Education and experience information
We collect personal data when:
- you provide it to us directly;
- generated by your activity on our website;
- available through publicly available sources (e.g., information shared by you on LinkedIn).
Use of Personal Data
We collect, use, store, organize, structure, disclose, or otherwise process personal data as described below:
- We process personal data for the purposes for which such personal data was provided.
- To arrange interviews, consider you for employment, and personnel administration (to the extent you apply for a job through our website).
- To manage data subject requests.
The applicable legal bases for our processing of your personal data include the following:
- Based on your consent;
- Compliance with applicable laws or performance of a contract;
- Our legitimate interest in communicating with you and managing our interactions with you regarding our products and services, scientific research, and educational opportunities. You can register your objection by contacting us as described below.
How Personal Data is Shared and Transferred
Personal Data Shared within Sterimed Group
We may share your personal data with Sterimed affiliates (e.g., for internal administrative purposes).
International Transfers of Personal Data
If you reside in Europe or your personal data is otherwise subject to European law, all Sterimed affiliates outside of the European Union that access or receive your personal data are subject to data protection contracts approved by the European Commission and that impose on such affiliates a level of protection for your personal data equivalent to European data protection requirements.
In any event, we only share personal data with Sterimed affiliates in such a manner that the processing they conduct will meet the requirements of applicable law and ensure the protection of your personal data.
Your Rights
You have various rights with respect to the collection, use, transfer and processing of your personal data, as described below. However, we reserve the right to limit these rights at any time where permitted under applicable law. To exercise any of the rights below, please contact the Sterimed Data Protection Officer, responsible for the processing of your personal data using the applicable contact:
dataprotectionofficer@sterimed.fr
Access Right
You have the right to obtain confirmation as to whether or not your personal data is being processed by Sterimed. Where we are processing your personal data, you have the right to access the data and to obtain certain information about the processing of such data.
Right to Rectification
You have the right to obtain rectification of any personal data that is inaccurate or incomplete, including by means of providing a supplementary statement.
Right to Erasure
You have the right to have your personal data erased where one of the following applies:
- Your personal data is no longer necessary with regards to the purposes for which it was collected;
- You withdraw your consent (where the processing is based on such consent);
- You object to the processing where such processing is based on Sterimed's legitimate interest and there are no overriding legitimate grounds for the processing;
- Your personal data must be erased to comply with a legal obligation under applicable law.
However, this right to erasure will not apply to the extent the processing is necessary for:
- Compliance with a legal obligation which requires processing; or
- Archiving purposes to the extent permitted under applicable law.
Right to Withdraw Consent
Where the processing of your personal data is based on your consent, you have the right to withdraw such consent at any time, without affecting the lawfulness of processing based on consent before such withdrawal.
Right to Submit a complaint to supervisory authorities
You have the right to lodge a complaint with an applicable data protection authority. If you reside in Europe, you have the right to lodge such a compliant in the European country of your habitual residence, place of work, or place of an alleged infringement if you consider that the processing of your personal data infringes applicable EU data protection laws.
Protection of your personal data
We provide reasonable technical, physical, and organizational safeguards to protect your personal data, including safeguards designed to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed which may lead to physical, material or non-material damage. To the extent appropriate or required by applicable law, these security measures include:
Access to personal data is limited to authorized employees and service providers who need access to perform the activities described in this privacy notice on our behalf.
Sterimed personnel engaged in the processing of personal data are informed of the confidential nature of personal data, receive appropriate training on their responsibilities, and are obligated pursuant to Sterimed policy to maintain the confidentiality of personal data.
The effectiveness of Sterimed security measures is regularly tested, assessed, and evaluated to ensure the ongoing security of processing systems.
Internet-connected databases containing personal data are monitored for unauthorized intrusions using network- based and/or host-based intrusion detection mechanisms.
Service providers and other third parties engaged by us to process personal data on our behalf are contractually obligated to process personal data only on our documented instructions and must provide similar security measures as those used by Sterimed or as required under applicable law.
Although we strive to provide reasonable and appropriate security for the personal data we process and maintain, no security system can prevent all potential security breaches. In particular, email or forms sent using our website may not be secure. You should take special care before deciding to send us information via email.
Retention and Deletion of Personal Data
Sterimed implements and maintains reasonable restrictions on the retention of personal data and generally disposes of such personal data once it is no longer necessary for the purposes for which it was collected or further processed.
Contact us
If you have any questions about this privacy notice, our use of your personal data, or your rights with respect to such use, you may contact the applicable Sterimed affiliate using the contact information below:
Sterimed Infection Control, 47/49 avenue Edouard Vaillant – 92100 Boulogne-Billancourt (France)
+33177373528
dataprotectionofficer@sterimed.fr
Changes to Our Privacy Notice
Sterimed reserves the right to amend this privacy notice at our discretion and at any time.
