We protect and respect your personal data

You are currently on the website of the I-Motion Institute managed by the Association Institut de Myologie (AIM): www.institut-myologie.org/imotion. When you browse, we collect and use some of your personal data. Their protection and security are at the center of our concerns. In this section, you will find more details on the type of data collected and how we process it.

1. AIM and personnel data protection

The General Data Protection Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) allows people to better understand and control the use that is made of their personal data. In that regard, the GDPR strengthens your rights and increases the responsibility of those collecting your data.

As data controller, AIM undertakes to comply with the obligations required by the GDPR and by the French Law  n°78-17 of the January 6, 1978 relating to data processing and freedoms, as amended by Law 2004-801 of August 6, 2004 and by Law 2018-493 of June 20, 2018 relating to the protection of personal data.

2. The data protection officer

In order to comply with the rules relating to the protection of personal data, AIM has appointed a Data Protection Officer (DPO). Its role is to ensure the proper implementation of the GDPR within the Association. She is the contact point between the French Supervisory Authority (the CNIL) and AIM, as well as yours for any questions you may have regarding the processing of your personal data.

3. Why should you read this policy?

 Because:

•  You visit the I-Motion Institute website (www.institut-myologie.org/imotion);
•  You wish to join AIM and you have contacted us at recrutement-aim@institut-myologie.org 

If you do not fall into any of these categories, we guarantee you an unambiguous information (purpose, rights, legal basis for processing, type of data concerned, etc.) when your data is collected.

4. What personal data is collected and what for?

AIM collects the data you provide:

• When you make an appointment for a consultation at the I-Motion Institute
  • Data collected: Name, first name, email address, other information necessary to make the administrative steps in the context of your appointment.
  • Purpose: To book an appointment for a medical consultation.
  • Recipient of the data: AIM and APHP (Administration of the Armand Trousseau Hospital)

• When you send your applications : 
  • Data collected: Name, first name, email address, CV and cover letter.
  • Purpose: To study the suitability of your application for the position offered and, if necessary, to guide you.
  • Recipients of the data: AIM’s HR department

AIM also collects personal data relating to your browsing on our website. These are cookies. This is information stored on your terminal when you browse the AIM site. Only the issuer of a cookie can read or modify the information it contains.

For more information, you can consult our cookies policy.

5. To whom is your data transmitted?

• Public authorities or authorized third parties

Under a law, regulation, subpoena or court order, disclosure of your personal data may be requested by an authorized third party. In these specific cases, we will make sure that the requester understands the confidential nature of your data and treats it with the necessary degree of care. Please be aware that unlawful or harmful behavior by one of the users of the AIM website may cause us, as data controller, to cooperate with certain investigations targeting these visitors.

• Providers

We use subcontractors as part of our services. They are subject to the same security and confidentiality obligations as AIM regarding your personal data.

•  Staff members of partners involved in the activities of the I-Motion Institute 

This may be Sorbonne University, AFM-Téléthon and AP-HP staff, for the sole purpose of responding to your request.

6. What is the period of conservation of you data?

When processing your personal data, AIM undertakes to keep this data only for the time strictly necessary for the fulfillment of the intended purpose.

We keep your data for:

• 24 months: For the data necessary for the management of the site (internal cookies)
• 24 months: For job applications
• 6 months : For your consent or refusal of cookies 

7. How can you exercise your rights?

The GDPR has strengthened the rights of data subjects to allow a better control. To exercise your rights, all you need to do is contact the AIM DPO.

•  By email: dpo@institut-myologie.org
•  By mail:

Data Protection Officer
Association Institute of Myology
47-83 boulevard de l’Hôpital
75651 Paris Cedex 13

You have the following rights:

• The right of access

This right allows you to have access to the data processed concerning you. You will receive them in an understandable format.

• The right to rectification

In case of inaccurate data about you, you can ask for it to be modified and updated.

• The right to object

You can object to the processing of your personal data for reasons relating to your particular situation. Please note that this will not lead to the deletion of your data. This right is used in particular in the context of opposition to commercial prospecting. For the latter you do not need any particular reason. In other cases, your request must be justified.

• The right to erasure

You can request the erasure of your personal data in the following cases:

 – The processing of your data is no longer necessary for the purpose for which it was collected;
 – You decide to withdraw your consent (only if the processing is based on it);
 – In the event of opposition to the processing, you can also request the deletion of your data;
 – The processing you are subject to is unlawful;
 – The erasure of your data is part of a legal obligation;
 – The data was collected from minors as part of the information society service offering.

• The right to portability

This right allows you to reuse your data for personal use. You can request the transmission of your data in a structured, commonly used and machine-readable format. Please note, this right only exists if the processing is based on your consent and if it is carried out automatically.

• The right to limitation

This right allows you to freeze the use of your data in the following cases:

– The accuracy of the personal data is contested,
– The processing is unlawful,
– AIM no longer needs your personal data, but they are still necessary for the establishment, exercise or defense of legal claims.

 Note: The rights to erasure and portability are limited or even excluded, in the context of scientific research.

 If you have difficulty exercising your rights with AIM Data Protection Officer, you can file a complaint with the French Supervisory Authority (CNIL).

8. Transfert of data outside the European Union (EU)

Your data is not transferred outside of the European Union. If such was the case, AIM will implement the appropriate measures to guarantee your data a level of protection equivalent to that of the European Union.

In case of questions relating to data transfers outside the EU, you can contact the DPO of AIM (dpo@institut-myologie.org).

For your information, the collection of your data for the subscription to the newsletter, applications through the “Recruitment” form and the information given via the “Contact us” form, are not transferred outside the European Union at the moment.

9. Security of your data

As data controller, AIM ensures a high level of security for your data through structural, organizational and technical measures.

10. Exter XTERNAL LINKS

The site www.institut-myologie.org/imotion contains external links to websites that have their own personal data privacy policy. Consequently, AIM cannot be held responsible for their content and their practice in terms of protection of personal data. We advise you to read carefully the privacy and personal data protection policies of the third-party sites in question.

 11. Update

AIM reserves the right to update this page relating to the protection of your personal data at any time in the event of changes in the law and / or our practices in this matter.

Please check this page regularly.

Last modification: 11/06/2021

12. GDPR glossary

Data controller:
The natural or legal person who determines the purposes and means of the processing.

Subcontractor:
The natural or legal person who processes personal data on behalf of the controller.

Data processing:
Examples: collection, recording, organization, structuring, conservation, modification, extraction, consultation…

Personal data or personal data:
Any information relating to an identified or identifiable natural person.
Examples: identifier, name, identification number, location data, online identifier, one or more specific elements.

Health data:
Personal data relating to the physical or mental health of a natural person, including the provision of healthcare services, which reveal information about the state of health of that person.

As a reminder, you can find all these definitions in Article 4 of the General Data Protection Regulation.