Privacy policy

1. Data controller

The controller of the personal data collected on the censogroupe.fr website is:

For any question regarding the protection of your personal data, you can contact us at the address above.

2. Data collected

Data you provide to us directly

When you use the contact or membership forms on the site, we collect:

• First and last name
• Professional capacity (partner doctor, centre director, etc.)
• Email address
• Phone number (optional)
• Content of your message

Data collected automatically

As you browse the site, we automatically collect certain technical data:

• IP address (anonymised)
• Browser type and version
• Pages visited and visit duration
• Traffic source (referring URL)
• Operating system
• Pages viewed, clicks, scrolling and cursor movements
• Anonymised recording of your browsing session (form fields are masked before transmission)

3. Purposes and legal bases

Your data is processed for the following purposes, each based on a distinct legal basis:

4. Retention period

Your data is kept for the period strictly necessary for the purposes for which it was collected:

At the end of these periods, your data is deleted or irreversibly anonymised.

5. Data recipients

Your personal data is intended solely for authorised staff of CensoGroupe SAS who need it in the course of their duties.

It may also be shared with the following technical processors, in strict compliance with the GDPR and on the basis of a data processing agreement:

• Website host — hosting of the pages and data (servers located in the European Union)
• Email tool — delivery of emails sent from the forms
• Microsoft Corporation — Microsoft Clarity service: click maps, scroll maps and anonymised recordings of browsing sessions. Microsoft privacy statement
• Google Ireland Limited — Google Analytics 4 service: audience measurement and traffic source analysis. Google privacy policy

Microsoft Clarity and Google Analytics are only activated after your consent has been obtained via the cookie banner. In Microsoft Clarity, anything you type into a form is masked before transmission and never appears in the recordings.

Your data is never sold to third parties and is not used for marketing purposes without your explicit consent.

6. Transfers outside the European Union

Two of our processors may process your browsing data outside the European Union:

• Microsoft Corporation (Microsoft Clarity) — United States
• Google Ireland Limited (Google Analytics 4) — collection through Google’s European servers, with possible processing in the United States by Google LLC

These transfers are covered by the European Commission adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, to which both Microsoft and Google have certified, supplemented by the European Commission’s standard contractual clauses.

These transfers only take place after your consent to analytics cookies has been obtained. Apart from these two tools, no data you send us through the forms is transferred outside the European Union.

7. Your rights

In accordance with the GDPR and the amended French Data Protection Act, you have the following rights:

Right of access (art. 15 GDPR)

You can obtain confirmation that data concerning you is being processed, and request a copy of it.

Right to rectification (art. 16 GDPR)

You can request the correction of inaccurate or incomplete data concerning you.

Right to erasure (art. 17 GDPR)

You can request the deletion of your data, in the cases provided for by the GDPR (in particular when the data is no longer necessary for the purposes for which it was collected).

Right to restriction (art. 18 GDPR)

You can request the restriction of processing in certain cases (contesting the accuracy of the data, unlawful processing, etc.).

Right to portability (art. 20 GDPR)

You can receive your data in a structured, commonly used and machine-readable format, where processing is based on your consent or on a contract.

Right to object (art. 21 GDPR)

You can object at any time, on grounds relating to your particular situation, to processing based on CensoGroupe’s legitimate interest.

Right to withdraw your consent

Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

Right to lodge a complaint with the CNIL

If you believe that the processing of your data does not comply with the regulations, you can lodge a complaint with the French data protection authority (CNIL) — www.cnil.fr — or any other competent supervisory authority.

8. Cookies

The censogroupe.fr website uses cookies and trackers. A cookie is a small text file placed on your device when you visit.

Strictly necessary cookies

These cookies are essential for the site to function (session management, security). They cannot be disabled and do not require your consent.

Analytics cookies

These cookies allow us to measure site traffic and analyse browsing behaviour to improve the user experience. They are only placed after obtaining your consent via the cookie banner.

The full details of each cookie are available in our cookie policy.

Managing your preferences

You can change your cookie preferences at any time:

• Via the cookie management banner on the site
• By configuring your browser (Safari, Chrome, Firefox, Edge…) to refuse or delete cookies

Disabling analytics cookies does not affect the operation of the site.

9. Data security

CensoGroupe implements appropriate technical and organisational measures to protect your data against any loss, unauthorised access, disclosure, alteration or destruction, in accordance with Article 32 of the GDPR.

These measures include in particular:

• Encryption of communications via the HTTPS protocol (TLS)
• Data access restricted to authorised staff only
• Hosting on secure servers located in the European Union
• Regular review of security practices

In the event of a data breach likely to result in a high risk to your rights and freedoms, you will be informed as soon as possible in accordance with Article 34 of the GDPR.

10. Minors

The censogroupe.fr website is intended exclusively for healthcare professionals and adults. We do not knowingly collect personal data relating to minors under the age of 15. If you become aware of such collection, please contact us so that we can take appropriate action.

11. Changes to the policy

CensoGroupe reserves the right to amend this privacy policy at any time, in particular to comply with any legal, regulatory or technical developments.

The date of last update is shown at the top of this page. In the event of a substantial change, you will be informed by email or via an information banner on the site.

We encourage you to check this page regularly to stay informed of any updates.

12. Contact us

For any question regarding this privacy policy or the exercise of your rights, contact us:

• By email: contact@censogroupe.fr
• Via the site’s contact form
• By post: CensoGroupe SAS — 31 rue Claude François, Zone Parc 2000, 34080 Montpellier

We undertake to handle any request relating to your data within a maximum of 30 days of receipt.