The GDPR provides Persons concerned with rights that they can exercise. The following are provided:
- Right to information: the right to clear, accurate and complete information on the use of personal Data by Bioprojet.
- Right of access: the right to obtain a copy of the personal Data that the Data Controller has regarding the requester.
- Right of correction: the right to have personal Data corrected if they are inaccurate or obsolete and/or to complete them if they are incomplete.
- Right of deletion/right to be forgotten: the right, in certain situations, to have Data deleted, unless Bioprojet has a legitimate interest in maintaining them.
- Right of opposition: the right to oppose the Processing of personal Data by Bioprojet for reasons depending on the requester’s unique situation (subject to conditions).
- Right to withdraw Consent: the right, at any time, to withdraw Consent when Processing is dependent on Consent.
- Right to limitation of Processing: the right, in certain situations, to request that personal Data Processing be temporarily suspended.
- Right to Data portability: the right to request that personal Data be transmitted in a reusable format allowing them to be used in another Database.
- Right to not be subject to an automated decision: the requester’s right to refuse entirely authorised decision-making and/or to exercise relevant additional safeguards.
- Right to define post-mortem directives: the requester’s right to define directives regarding the fate of their personal Data after their death.
Additional rights may be granted by local Regulations to Persons concerned.
To this end, Bioprojet has implemented a procedure for the management of the rights of Persons in compliance with the requirements of applicable Legislation. This procedure establishes:
- The standards to be respected to ensure transparent information of the Persons concerned;
- The legal requirements that must be satisfied;
- The authorised means for submitting a request for each right, according to the category of Persons concerned;
- The operational processes to process these requests in compliance with the aforementioned requirements;
- The parties involved in these processes, their roles and responsibilities.
To exercise your rights, you can contact the Data Protection Officer (DPO): firstname.lastname@example.org
When you submit a request to exercise a Right to us, you are asked to specify the scope of your request as far as possible, the type of right exercised, the personal Data Processing concerned, and any other useful information, so as to facilitate the assessment of your request. Furthermore, where there is reasonable doubt, you may be asked to prove your identity.
You also have the right to contact the National Commission for Information and Liberties (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, with any complaints regarding the manner in which Bioprojet collects and processes your Data.