Website Privacy Notice

INVENTIVA S.A., as the Controller of the personal data, has committed to comply with the General Data Protection Regulation (“GDPR”) and all applicable laws and regulations regarding data protection. INVENTIVA S.A. wants to make sure that you understand what personal information is collected about you, how your personal information is used and how it is kept safe.

GENERAL WARNING

Access to the website implies the User’s full and unreserved acceptance of this Privacy Notice (hereinafter the “Notice”), as well as its general terms of use and the Cookies Notice.

The Notice is valid for all pages hosted on the Website. It is not valid for the pages hosted by third parties to which INVENTIVA S.A. may refer and whose privacy policies may differ. INVENTIVA S.A. cannot therefore be held responsible for any data processed on these websites or by them. This Notice also applies to any other website that INVENTIVA S.A. may operate, including Company pages on LinkedIn, and YouTube.

DEFINITIONS

Processing: means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Purpose: the goal pursued by the controller.

Controller: means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Personal data

DPO: Data Protection Officer

GDPR: General Data Protection Regulation.

1. What personal data do we collect?

Depending on the purpose for which we process your personal data, we need to process one or other personal data, which will in general be, depending on each case, as follows:

• Identification data related to your queries (through contact form or email alerts you subscribed to): e.g. name, email address, or other details.
• Technical data: e.g. cookies may store in certain circumstances personal data which may include: IP addresses, browser type, location, operating system,… For more information, please consult our Cookies Notice.
• Aggregate data: aggregate statistical data (e.g. Company page on YouTube or LinkedIn*)

*For the use of social media, INVENTIVA S.A. will be joint-controller with Twitter, Facebook, YouTube and LinkedIn only for the following activities: accessing and processing statistical aggregate data provided by Twitter, Facebook, YouTube and LinkedIn in relation to the Company Page. For any other processing on the platform, social media platform shall be considered as the sole data controller.

Facebook and LinkedIn have created an “addendum” to their user agreements for company pages for the processing for which they are joint-controllers with us. Such agreement is not currently provided by Google Ireland or Twitter.

2. How do we use your personal information?

• Manage your queries: We will use your data to respond as a user to your queries in the contact form of this Website or the different email addresses appearing on our website.
• Email alerts: We will process your personal data to manage your subscription to our email alerts (in relation to news or events relevant to the activities of Inventiva S.A.).
• Technical data: See our Cookies Notice.
• Aggregate data: Some information related to follower’s visits are collected in an aggregate way by YouTube and LinkedIn. We can access to statistics provided by YouTube and LinkedIn in order to have information on the way our page is consulted.

3. On what basis do we use your personal data?

• Manage your queries: We consider that we have a legitimate interest in responding to the requests or queries you have raised through the various contact channels on our website. We understand that the processing of this data is also beneficial to you insofar as it allows us to assist you appropriately and to respond to the issues raised. If your requests are made in connection with your application for a position at Inventiva S.A., the appropriate legal basis may also be the execution of pre-contractual measures taken at your request.
• Email alerts: The legal basis for processing the re-use of your personal data to send you the email alerts (by electronic means) you have signed up for is your consent. Please remember that you can unsubscribe at any time and free of charge. We consider that we have a legitimate interest in the case of canvassing by post or to professionals or for similar goods and services, provided that you can object to this at any time.
• Technical data: See our Cookies Notice.
• Aggregate data: We consider that we have legitimate interest to understand the way our page is consulted (e.g. how many times our page is consulted, from which country,…).

4. How long will we keep your personal information?

The retention period of your personal data will depend on the purposes for which we process such data, as explained below:

• Manage your queries: We will process your data for the time necessary to meet your request or application.
• Email alerts: We will process your data until you unsubscribe or cancel your subscription to our email alerts. For marketing purposes, we will process your data until you withdraw your consent or 3 years from the last contact.
• Technical data: See our Cookies Notice.
• Aggregate data: Statistical information are stored by YouTube and LinkedIn and consequently subject to their retention policy.

5. Data sharing

• We do not sell, trade, or otherwise transfer to outside parties your personal data.
• For aggregate data, data are hosted on YouTube and LinkedIn servers and are subject to their Privacy Policy. We do not share statistical reports that we may own.
• Subject to what is indicated in this privacy notice, we may communicate personal data with persons employed by INVENTIVA S.A. and only to the extent necessary for the performance of the tasks entrusted to them.

6. How do we protect your information?

• INVENTIVA S.A. treats your personal data in a confidential manner and uses at least the same level of care in safeguarding your personal data that it uses with its own confidential information of similar nature.
• Your personal data are contained behind secured networks and are only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential.
• For aggregate data, data are hosted on YouTube and LinkedIn servers and are subject to their Privacy Policy. The statistics reports are stored on our servers and the same security measures apply.

7. Your rights

According to the GDPR, you have the following rights:

• You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, information related to the processing of data and a copy of the data being processed.
• You have the right to require rectification of inaccurate data about you.
• Erasure. To obtain the deletion of your personal data in the situations set forth by applicable data protection law (‘Right to be forgotten’).
• Restrict processing. You have the right to restrict processing of data under certain specified circumstances.
• Data portability. You have the right to request for the receipt or the transfer to another organization, in a machine-readable form, of your personal data.
• Right to withdraw consent. When you have given your explicit consent for the processing of your data (newsletter and new e-learning), you can withdraw it at any time without justification.

If you would like to exercise your rights, please let us know by contacting our DPO at inventiva.dpo@mydata-trust.info

You also have the right to lodge a complaint with your local Data Protection Authority or to the Data Protection Authority where the alleged infringement took place.

8. Contacts

You can contact the DPO of Inventiva S.A. at any time by using the following contact details:

dataprotection@inventivapharma.com

 

Inventiva Pharma

50 rue de Dijon

21121 Daix, France

+33 (0)3 80 44 75 00

Data Protection Authorities

https://edpb.europa.eu/about-edpb/board/members_en

 

France

CNIL – Commission Nationale de l’Informatique et des Libertés

3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07

Tel : +33(0)4.72.83.86.70

Site Web : CNIL.fr

 

Last Edited on May, 09 2022.