Last update: 14 November 2024

Version: 1.0

This Policy may be modified by SERVIER to take into account changes in applicable law and our activities. Any changes will be posted on this page, which we invite you to consult regularly.

1. Who is the Data Controller?

SERVIER AFFAIRES MEDICALES ("SERVIER"), whose registered office is located at 35 rue de Verdun – 92284 Suresnes Cedex - France, is the data controller.

2. Why do we collect your personal data and on what basis? What data are we talking about?

This Policy describes the activities and purposes for which we need to use or collect your personal data. In compliance with regulations:

• We only collect data that is strictly necessary for the purposes we pursue.
• The data processing that we carried out has a legal basis.

Purpose	Data Collected	Legal Basis
Management of working group organisation	All data spontaneously communicated	Legitimate interests of SERVIER
Account creation	First name, last name, email address, password, work addres, country	Legitimate interests of SERVIER
Management of Log connection	Username, connection date and time	Legitimate interests of SERVIER

3. How long do we keep your personal data?

SERVIER will only keep your personal data for as long as is necessary to achieve the purposes pursued in this Policy. More specifically:

Purpose pursued	Data Retention
Management of working group organisation	We keep your personal data for the duration of your contract (30th September 2025)
Account creation	For the period of use of the account and until the end of your contract (30th September 2025)
Management of Log connection	We keep your log connection data 6 calendar months

4. How do we secure your personal data?

We put in place adequate technical and organisational measures to ensure security, integrity and confidentiality of your personal data.

5. Do we share your personal data?

Your personal data processed by SERVIER will only be accessible by a limited list of recipients on a need-to-know basis or where required by law, including but not limited to:

• Departments and personnel of SERVIER and other legal entities of the SERVIER Group with a need-to-know.
• Service providers of SERVIER, particularly those responsible for hosting the website, acting as data processor of SERVIER
• Competent authorities such as health authorities in certain legally defined cases.

6. Do we transfer your personal data internationally?

As SERVIER is part of an international group with subsidiaries, partners and sub-contractors located in many countries around the world, your personal data may be transferred for the needs of the above purposes to other organisations, including SERVIER subsidiaries, located outside the European Economic Area (EEA).

Certain recipient countries may not be considered to offer a level of protection equivalent to that of the country in which SERVIER is located.
This is the reason why, prior to the transfer, SERVIER will take all necessary measures and guarantees to secure such transfers (such as the conclusion of the European commission’s standard contractual clauses).

7. What are your rights?

According to the legal basis for the processing concerned and when the applicable law provides it, you have different rights:

• Request access to your personal data
• Update, correct or erase your personal data
• Request that some of the personal data you have gave to us be provided to you, or to another data controller, in a commonly used and machine-readable format (right to portability of your personal data)
• Define post-mortem directives
• Limit or object to the processing of your personal data
• Withdraw your consent, at any time, to the activities, without affecting the legitimacy of the processing where your personal data are used on the basis of your consent

You can exercise these rights with the Data protection Officer (“DPO”) of SERVIER:

• By email to the following address: dataprivacy@servier.com
• By postal address to the following address: SERVIER MONDE - 50, rue Carnot - 92284 Suresnes Cedex - FRANCE

You also have the right to lodge a complaint with the CNIL - (Commission nationale de l'informatique et des libertés) on its website https://www.cnil.fr/fr .