Last update: February 2024
As part of this website, the owners of Petit Mas Thym carry out processing of personal data.
These processing operations are carried out in accordance with the legislation in force, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, General Data Protection Regulation (GDPR) and Law No. 78-17 of 6 January 1978, Data Protection Act (LIL), as amended.
Definitions
Personal data: any information that identifies, directly or indirectly, a natural person.
Processing: any operation or set of operations applied to personal data (examples: collection, registration, organization, consultation, extraction, erasure, destruction).
Controller: the natural or legal person, public authority, service or other body that determines the purposes and means of processing.
Data subject: person whose personal data are processed.
GECO obligation for www.geco-medical.org
Communication on the identity of the controller
The data controller is: GECO, groupe d’étude pour la chirurgie osseuse, 24 Rue de la Sinne, 68100 MULHOUSE – FRANCE.
Appointment of a Data Protection Officer (DDP)
The data protection officers of www.geco-medical.org is Didier MAINARD, GECO President.
His role is to inform and advise the data controller. All requests relating to the protection of personal data can be sent by post to GECO – 24 Rue de la Sinne, 68100 MULHOUSE – FRANCE or by e-mail to info@geco.asso.fr or via the contact form on the site.
Security measure
GECO implements technical and organisational security measures to protect the personal data processed.
Any security breach detected can be reported to the Information Systems Security Manager (RSSI) by e-mail to: info@geco.asso.fr.
Information of persons whose data are processed
GECO inform you during the collection:
- The purpose of the collection;
- The mandatory or optional nature of the collection;
- Recipients of the data: GECO, and as well as all internal stakeholders who are authorized and need to know your request;
- The retention period of data;
- Possible transfer of data outside the EU;
- Your rights over your data and the right to lodge a complaint with the CNIL.
Processing concerning the contact form
GECO collects information about you in order to respond to your contact request.
The data collected will be communicated only to the following recipients: GECO, as well as all internal stakeholders who are authorized and need to know your request.
Data will be kept for a period not exceeding 12 months, unless you request that your data be deleted.
Processing your access/member area
GECO collects information about you in order to ensure the smooth operation of your member area.
The data collected will be communicated only to the following recipients: GECO, as well as all internal stakeholders who are authorized and need to have access to information concerning you for the proper functioning of the member area.
Data will be kept for a period not exceeding 12 months, unless you request deletion in advance.
Processing your online congress registration
GECO collects information about you in order to respond to your online registration for a GECO event.
The data collected will be communicated only to the following recipients: GECO, as well as all internal stakeholders who are authorized and need to know your request.
Data will be kept for a period not exceeding 12 months, unless you request that your data be deleted.
Processing for downloading or ordering GECO practical guide(s)
GECO collects information about you in order to respond to your request to download or order GECO practical guide(s).
The data collected will be communicated only to the following recipients: GECO, as well as all internal stakeholders who are authorized and need to know your request.
Data will be kept for a period not exceeding 12 months, unless you request that your data be deleted.
Rights of persons whose data are processed
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, General Data Protection Regulation (GDPR) and Law No. 78-17 of 6 January 1978, Data Protection Act (LIL), as amended, you have the right of access, rectification, erasure, opposition, limitation of processing, data portability, to make a complaint to the CNIL and to define directives relating to the fate of your data after your death.
The right of access
You may request the disclosure of your personal data.
GECO may refuse to do so, in particular if your request is unfounded or excessive, or if it infringes the rights of third parties.
The right of rectification
You can request the correction of your personal data that is inaccurate or incomplete.
The right to erasure or the right to be forgotten
You can request the erasure of personal data concerning you, provided that you are in one of the following cases:
- Your data is no longer necessary in view of the objectives of the processing initially established;
- You withdraw your consent to the use of your data (in cases where the processing is based on your consent);
- Your data was collected when you were a minor;
- Your data is subject to unlawful processing;
- Your data must be erased to comply with a legal obligation;
- You object to the processing of your data and there is no compelling legitimate reason for the processing.
It is important to specify the data you are requesting to be deleted.
The right to opposition
You can object to data being processed for a specific purpose. You must put forward “reasons relating to your particular situation”.
Your request to object may be refused, in particular when:
- There are legitimate and compelling reasons for processing your data;
- Your data is necessary for the establishment, exercise or defense of legal claims;
- We are legally obliged to process your data;
- You have given your consent – you must withdraw your consent, not object;
- There are compelling legitimate grounds for processing your data;
- Your data is necessary for the establishment, exercise or defense of legal claims;
- There is a legal obligation to process your data;
- You have given your consent – you must withdraw your consent, not object.
The right to limitation of processing
You may request a temporary freeze on the use of some of your data.
If you dispute the accuracy of your data or object to your data being processed, the law allows us to verify or review your request for a certain period of time.
The right to data portability
You can request to recover part of your data in a machine-readable format.
This right applies to:
- The data you have provided;
- The processing of which is based on your consent;
- Whose processing is automated.
The exercise of this right must not infringe the rights and freedoms of third parties.
The right to complain to the CNIL
If you feel, after contacting us, that your rights are not respected, you can file a complaint with the CNIL.
The right to choose the fate of your data after your death
In accordance with Article 85 of the Data Protection Act, as amended: “any person may define directives relating to the retention, erasure and communication of his personal data after his death”.
The directives can be general or specific:
- The general guidelines relate to all the personal data of the data subject.
- They can be registered with a digital trusted third party certified by the CNIL.
- The specific directives relate to the processing of personal data mentioned in these directives. They are registered with the data controllers concerned. The person concerned must give specific consent. The specific directives cannot result from the sole approval of general conditions of use.
Exercise of your rights
We provide you with the following means to exercise your rights:
- Or by email to the address of the Data Protection Officer info@geco.asso.fr ;
- Either via the site’s contact form du site ;
- Either by postal mail to GECO – 24 Rue de la Sinne, 68100 MULHOUSE – FRANCE.
GECO will answer you, in principle, within 1 month of receipt of the request. But as an exception, this period will be extended to 3 months in the event of a complex request or if there are a large number of applications in progress. You will be informed during the 1-month period of the reasons for the possible extension of the deadline.
Do you have a question or need clarification about the GECO website privacy policy? Please do not hesitate to contact the GECO secretariat.
