Personal data

We protect and respect your personal data

We protect and respect your personal data

You are currently on the website of the Association Institut de Myologie (AIM): www.institut-myologie.org. As you browse, we collect and use some of your personal data: protecting and securing it is central to our concerns. In this section you will find more detail on the type of data collected and on the way we process it.

1. AIM and data protection

The General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) is intended to help individuals better understand and control how their personal data is used. To this end, the GDPR strengthens your rights and increases the accountability of those who collect your data.

As data controller, AIM undertakes to comply with the obligations set out in the GDPR.

2. The Data Protection Officer

In order to comply with the rules on the protection of personal data, AIM has appointed a Data Protection Officer (DPO). The role of the DPO is to ensure that the GDPR is properly implemented within the Association. The DPO acts as the interface between the French data protection authority (CNIL) and AIM, and is the point of contact for any questions you may have about the processing of your personal data.

3. Why does this policy concern you?

Firstly, because:

Secondly, if you fall into none of these categories, we guarantee that you will be fully informed (purpose, rights, legal basis for the processing, type of data concerned, etc.) at the time your data is collected.

4. What personal data is collected? What is it used for?

AIM collects the data you provide:

  • Through the “Contact” form:
    • Data collected: surname, first name, email address.
    • Purpose: to answer your questions as fully as possible.
  • Through the “Job opportunities” form:
    • Data collected: surname, first name, email address, position sought, qualifications, professional experience, availability, CV and cover letter.
    • Purpose: to assess how well your application matches the position offered and, where appropriate, to point you in the right direction.
  • Through your subscription to the newsletter:
    • Data collected: title, surname, first name, email address, position, organisation, country.
    • Purpose: to send you the newsletter.

AIM also collects personal data such as data relating to your browsing on our website. These are cookies, that is to say information placed on your device when you browse the AIM website. Only the issuer of a cookie can read or modify the information it contains.

For more information, you can consult our cookie policy.

5. Who is your data shared with?

  • 1. Members of the AFM-Téléthon galaxy
    AIM may be required to share some of the personal data you have entrusted to us with the members of the AFM-Téléthon galaxy, namely:

a) AFM-Téléthon itself,

b) CECS (Centre for Stem Cell Studies): a research and development centre specialising in developing treatments for rare genetic diseases using stem cells,

c) Généthon: the research laboratory dedicated to gene therapies.

  • 2. Public authorities and authorised third parties
    Under a law, a regulation, a subpoena or a court order, an authorised third party may request the disclosure of your personal data. In such cases, we will make sure that the requesting party fully understands the confidential nature of your data and handles it with the necessary care. Please note that unlawful or harmful behaviour by a user of the AIM website may lead us, as data controller, to cooperate with certain investigations into those visitors.
  • 3. Service providers
    We use processors to deliver our services. They are subject to the same security and confidentiality obligations as AIM with regard to your personal data.

For more information, you can visit the websites of our processors:

Zegami: this partner gives you access to the Muscle Atlas

  • 4. Staff of the partners involved in the activities of the Institute of Myology
    This may include staff from Sorbonne University, Inserm and AP-HP, solely for the purpose of responding to your request.

6. How long do we keep your data?

When processing your personal data, AIM undertakes to keep it only for the period strictly necessary to achieve the intended purpose.

Your data is kept for up to:

  • 24 months: for the data required to run the website (internal cookies)
  • 12 months: for the data provided through the contact form
  • 24 months: for the data provided as part of job applications

7. How can you exercise your rights?

The GDPR has strengthened the rights of data subjects so that you can have better control over your data. To exercise your rights, simply contact the AIM DPO.

  • By email: dpo@institut-myologie.org
  • By post, writing to the following address:
    Data Protection Officer
    Association Institut de Myologie
    47-83 boulevard de l’Hôpital,
    75651 Paris Cedex 13

You have the following rights:

  • The right of access
    This right allows you to obtain the data processed about you. It will be provided to you in an understandable format.
  • The right to rectification
    If any data about you is inaccurate, you can ask for it to be corrected and updated.
  • The right to object
    You can object to the processing of your personal data on grounds relating to your particular situation. Please note that this will not result in your data being deleted. This right is used in particular to object to direct marketing, in which case you do not need to give any specific reason. In all other cases, your request must state the grounds for it.
  • The right to erasure
    You can ask for your data to be erased in the following cases:

a) The processing of your data is no longer necessary in view of the purpose for which it was collected;
b) You decide to withdraw your consent (where the processing is based on it);
c) Where you object to the processing, you can also ask for your data to be deleted;
d) The processing you are subject to is unlawful;
e) The erasure of your data is required by a legal obligation;
f) The data was collected from minors in relation to the offer of information society services.

  • The right to data portability
    This right allows you to reuse your data for your own purposes. It allows you to ask for your data to be provided in a structured, commonly used and machine-readable format. Please note that this right applies only where the processing is based on your consent and is carried out by automated means.
  • The right to restriction of processing
    This right allows you to freeze the use of your data in the following cases:

a) The accuracy of the personal data is contested,
b) The processing is unlawful,
c) AIM no longer needs your personal data but it is still required for the establishment, exercise or defence of legal claims.

Please note: the rights to erasure and to data portability are limited, or even excluded, in the context of scientific research.

If you have difficulty exercising your rights, you can lodge a complaint with the French data protection authority (CNIL).

8. Transfer of data outside the European Union (EU)

Your data may be transferred outside the European Union. Should that happen, AIM will implement the appropriate measures to guarantee your data a level of protection equivalent to that of the European Union.

If you have any questions about data transfers outside the EU, you can contact the AIM DPO (dpo@institut-myologie.org).

Please note that no transfer outside the European Union currently takes place for the data collected when you subscribe to the newsletter, for the applications you submit through the “Join us” form, or for the information you submit through the “Contact us” form.

9. Security of your data

As the data controller, AIM maintains a high level of security for your data through structural, organisational and technical measures.

10. External links

The www.institut-myologie.org website contains links to external sites that have their own personal data management policies. AIM cannot therefore be held responsible for their content or for their practices regarding the protection of personal data. We advise you to read the privacy and personal data protection policy of the third-party sites concerned.

This section applies only to the data collected on the AIM website: www.institut-myologie.org and solely as part of AIM’s activities.

11. Updates

AIM reserves the right to update this page on the protection of your personal data at any time, should the law and/or our practices in this area change.
Please feel free to check this page regularly.

Last updated: 25 September 2020

12. GDPR glossary

Data controller:
The natural or legal person who determines the purposes and means of the processing.

Processor:
The natural or legal person who processes personal data on behalf of the data controller.

Data processing:
Examples: collection, recording, organisation, structuring, storage, alteration, retrieval, consultation, etc.

Personal data:
Any information relating to an identified or identifiable natural person.
Examples: an identifier, a name, an identification number, location data, an online identifier, one or more specific factors.

Health data:
Personal data relating to the physical or mental health of a natural person, including the provision of healthcare services, which reveal information about that person’s health status.

As a reminder, you can find all these definitions in Article 4 of the General Data Protection Regulation.