Privacy Statement and Handling of Personal Data
ImCheck Therapeutics would like to provide you with information on how we handle your personal data, that we receive not only when you browse our website (imchecktherapeutics.com), but also how we handle certain personal data that we collect and process in the practice of our business, including the sensitive data we are responsible for as Sponsor of clinical trials.
I. Handling of data received during navigation on the website imchecktherapeutics.com
The website imchecktherapeutics.com (hereinafter the “Website“) is provided by ImCheck Therapeutics SAS. For further information regarding the provider of the Website, please refer to Legal Notice.
Unless otherwise indicated in the following chapters, the legal basis for the handling of your personal data results from the fact that such handling is required to make available the functionalities of the Website requested by you (Art. 6(1)(b) General Data Protection Regulation).
1. Access to the website
When you call up the website, your browser will transfer certain data to our web server. This is done for technical reasons and required to make available to you the requested information. To facilitate your access to the website, the following data are collected, stored with anonymized IP address during 180 days and used:
- IP address
- Date and time of access
- Time zone
- Content of request
2. Use of contact forms of our website
This website contains a general contact form that allows you to contact us directly. In the event that you would like to contact us through this form, you may provide us with the following information: Name, surname, email address, general subject of your request, and your message.
We will collect, process and use the information provided by you via the contact form exclusively for the processing of your specific request. Data will be stored and automatically deleted after 180 days.
3. Subscription to our newsletter and receipt of the information of the company
You can subscribe to our newsletter and receive ImCheck Therapeutics public information via our website by completing a dedicated form. Based on your prior consent, we will collect via this form the following information: name, surname, email address, company. We will use the indicated email address to provide you with the newsletter and this public information. For this subscription we use a procedure of “simple consent”, that is to say you agree to receive this newsletter and the public information of the company as soon as you fill in the dedicated form. Nevertheless, you may after subscribing, and at any time, unsubscribe freely using a dedicated link in our emails or by writing us to communication(at)imchecktherapeutics(dot)com
4. External services or content on our website
We include third-party services and/or content on our Website. When you use such third-party services or when third-party content is displayed, communication data are exchanged between you and the respective provider for technical reasons.
The respective provider of the services or content may also process your data for own additional purposes. To the best of our knowledge, we have configured the services and content of providers known to process data for own purposes in such a way that either any communication for other purposes than to present their services or content on our Website is blocked, or communication only takes place once you have actively opted to use the respective service. However, since we have no control over data collected and processed by third parties, we are not in a position to provide binding information regarding the scope and purpose of such processing of your data.
For further information regarding the scope and purpose of such collection and processing of your data, please consult the privacy statements of the providers whose services and/or content we include and who are responsible for the protection of your data in this context, notably Twitter and linkedin.
II. Treatment of data received in clinical trials
“Clinical Trial Data” means the physiological and biological data of patients and volunteers (or obtained from the examination of biological samples taken from such patients) necessary for the conduct of clinical trials, in accordance with the patient’s or volunteer’s wishes and in strict compliance with the informed consent letter signed by the patient or volunteer. These Data including personal data within the meaning of Law No. 78-17 of 6 January 1978 relating to data, files and freedoms, as amended, and / or European Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data, that is to say any information relating to an identified natural person or who may be identified, directly or indirectly, by reference to an identification number or to one or more elements of its own.
“Pseudonymised data” means data from clinical trials to which a de-identification technique has been applied which minimizes the risk of re-identification by replacing one attribute with another in a record. Pseudonymisation does not exclude the possibility of indirectly identifying a person and does not correspond to anonymisation, but reduces the risk of correlating a set of data with the original identity of a person concerned.
Only the Pseudonymized Data are transmitted to ImCheck Therapeutics and can be transferred between the different ImCheck Therapeutics entities and between ImCheck Therapeutics and its subcontractors. These data benefit from reinforced security measures, applied by both ImCheck Therapeutics and its subcontractors.
ImCheck Therapeutics undertakes that this data being used in accordance with the will of the patient and that it is not used for the purpose of identifying the patient or in such a way as to compromise or violate the confidentiality of the information of the patient, or his / her private life.
III. Transfer of data for commissioned processing
For the processing of your data we may use specialized service contractors. Such service contractors are carefully selected by ImCheck Therapeutics and meet strict requirements, formalized in executed contracts. They will only process your personal data upon our instructions and strictly in accordance with our directives and in accordance with the General Data Protection Regulation EU/2016/679 of 27 April 2016 (“GDPR”).
IV. Processing data outside the UE / the EEA
Your data may also be processed in countries outside the European Union (“EU”) or the European Economic Area (“EEA”), which may have a lower data protection level than European countries. In such cases, ImCheck Therapeutics will ensure that a sufficient level of protection is provided for your data, e.g. by concluding specific agreements with our contractual partners, or we will ask for your explicit consent to such processing.
V. Information regarding your rights
In accordance with the applicable regulations to the protection of personal data and the provisions of the GDPR, you have the following rights on your data:
- Right of information about your personal data we store;
- Right to request the correction, deletion or restricted processing of your personal data;
- Right to object to a processing for reasons of our own legitimate interest, public interest, or profiling, unless we are able to proof that compelling, warranted reasons superseding your interests, rights and freedom exist, or that such processing is done for purposes of the assertion, exercise or defense of legal claims;
- Right to data portability;
- Right to file a complaint with a data protection authority;
- You may at any time with future effect revoke your consent to the collection, processing and use of your personal data.
If you wish to exercise your rights, please address your request by mail to our company data protection officer indicated below:
ImCheck Therapeutics SAS
Délégué à la Protection des Données – DPO
31 chemin Joseph Aiguier
CS 70071
13402, MARSEILLE Cedex 09
France
or by email: DPO(at)imcheck(dot)fr
VI. Amendment of our privacy statement and processing personal data
We are committed to a policy of continuous improvement of our privacy policy and the processing of personal data, especially since the entry into force of the General Data Protection Regulation EU/2016/679 of 27 April 2016 (“GDPR”). Thus, during this process of continuous improvement, we will be able to update this policy. Any amendments become effective upon publication on our website. We therefore recommend that you regularly visit the site to keep yourself informed on possible updates.
Version of June 19, 2022