Privacy Policy of the VALAB Company
Privacy Policy of the VALAB Company
1 Preamble
The confidentiality and security of personal data are an essential prerequisite for the relationship of trust that we wish to maintain with everybody who entrust us with their Personal Data (hereinafter referred to as "Data" or "Personal Data").
The VALAB company processes this Data solely in the context of its activities, in accordance with the regulations, and guarantees the rights of persons with regard to their Personal Data.
VALAB undertakes to only implement lawful processing based on the legal foundations provided for in the legislation: the consent of the person, the performance of its contractual obligations, compliance with a legal obligation, legitimate interest and this, inasmuch as the processing does not infringe the rights of the persons.
VALAB only collects Data that is necessary for the purposes described below.
VALAB implements security measures that in particular take into account the sensitive nature of the Data, the nature of the processing and of the risks incurred by persons in the case in particular of unavailability of the processing or compromised integrity or confidentiality of the Data. VALAB takes into account these risks as much when designing and when determining the processing means as at the moment of the processing itself.
In the event of the use of a service provider carrying out on its behalf the processing of Personal Data, VALAB selects subcontractors who meet the legal obligations and guarantees related to the protection of Personal Data.
The present privacy policy is available at all times on the Valab website.
The present privacy policy is subject to change due in particular to changes in the processing carried out by VALAB and/or in the legal obligations.
2 Data controller - Data Protection Officer
The controller for the processing mentioned in the present document is the VALAB company.
-
Name: The VALAB company
-
Type of company: Société à responsabilité limitée (SARL - French limited liability company)
-
Share capital: 7 622.45 €
-
RCS (Trade and Companies Register) number: RCS of Toulouse, France: N° 340 677 665 00010
-
VAT number: FR 73340677665
-
Head office: 13 chemin de la Madeleine, 31130 Flourens, France
-
Phone Number: +33 (0) 531 083 499
-
Data Protection Officer: Délégué à la protection des données personnelles, VALAB, 13 chemin de la Madeleine, 31130 Flourens, France
The VALAB company is certified ISO 9001 by Bureau Veritas Certification.
3 The Data processed
VALAB may collect your Personal Data for one or more processing purposes mentioned below.
3.1 Processing of the Data of customers and suppliers of VALAB
We process Personal Data that we collect in the course of our commercial relationships or that you send us directly, in particular the following information:
processing - purpose
Personal data Processed
Legal grounds
Performance of the licence agreement of a software product sold by VALAB.
Civil status, last name, first name, professional phone number, professional electronic address, professional postal address, function and employer
Contract performance
Performance of the maintenance agreement of a software product sold by VALAB.
Civil status, last name, first name, professional phone number, professional electronic address, professional postal address, function and employer
Contract performance
Use of the private part of the www.valab.com website allowing the performance of its contractual obligations by VALAB.
Login, last name, first name, electronic address
Contract performance
Use of the private part of the www.valab.com website providing access to technical and sales information defined by VALAB.
Login, last name, first name, electronic address
Express consent
Management of VALAB's commercial relationships with its customers.
Civil status, last name, first name, professional phone number, professional electronic address, professional postal address, function and employer
Contract performance / legitimate interest
Management of VALAB's commercial relationships with its suppliers.
Civil status, last name, first name, professional phone number, professional electronic address, professional postal address, function and employer
Contract performance / legitimate interest
Marketing - Prospection for the sale of software licences, the sale of software maintenance contracts and the sale of associated services.
Civil status, last name, first name, professional phone number, professional electronic address, professional postal address, function and employer
Express consent
Web traffic statistics for the www.valab.com website.
IP address
3.2 The special case of Data processed by the Valab® software solution
The Valab® software solution, marketed and developed by the VALAB company, is hosted by your medical laboratory in your own information system or with the certified health data hosting provider you have chosen.
The Valab® software solution allows the processing of Personal Data of your patients and in particular of health Data. The processing carried out by the Valab® software solution consists of an aid for the biological validation of the test results of your patients.
It is your responsibility to evaluate the persons to whom you intend to communicate such Data and the conditions of its communication in respect of the legal provisions.
In the context of the services it provides, the VALAB company shall in no way be a recipient of Personal Data of your patients.
4 Security of your Data
VALAB has implemented organisational and technical measures to preserve the security of your Personal Data against alteration, accidental or unlawful loss, unauthorised use, disclosure or access.
In this context, we have implemented in particular the following measures:
- Appointment of a manager of the VALAB information system;
- Appointment of a Data Protection Officer;
- Creation of an entity devoted to information system security;
- Awareness-raising concerning confidentiality requirements for our collaborators liable to gain access to your Personal Data;
- Obligations of confidentiality imposed upon all recipients of your Personal Data;
- Heightened security of access to our premises and to our information technology platforms;
- Formalization and implementation of a VALAB information system security policy;
- Reinforced security for the access, sharing and transfer of Data;
- Obligation of our subcontractors and partners to respect the legal requirements;
- Definition of procedures to manage possible security breaches, to analyse their consequences and define actions to be implemented to address them.
5 Recipients of your Data - Transfer of your Data
- Only VALAB and its subcontractors are authorised to process your Personal Data.
- Public, administrative and judicial authorities may be recipients of your Data due to legal obligations which must be respected by VALAB and/or its subcontractors.
- Your Data is not communicated to any other third party, namely to any other person than VALAB and its subcontractors and any other persons who are placed under the direct authority thereof.
- Your Personal Data is not used for any commercial purpose.
- Your Data is not processed or transferred in any way whatsoever outside the territory of the European Union.
6 Automated decisions and profiling
The only case where profiling can be carried out by VALAB on your Personal Data outside the context of performance of a contract is for marketing or prospection for the sale of software licences and/or of the associated services.
7 Your rights on your Personal Data
You have the following rights on your Personal Data, you can:
- ascertain, update, modify or request the deletion of your Data;
- request the limitation and/or oppose the processing of your Data;
- request the portability and transfer of your Data to any other data controller;
- define general and specific directives specifying the way you wish these rights to be exercised after your death.
You can exercise the aforementioned rights by contacting directly VALAB through the post at the address: VALAB, Délégué à la protection des données personnelles, 13 chemin de la Madeleine, 31130 Flourens, France.
To answer such requests, VALAB should be the addressee of your postal and electronic addresses, and please provide a copy of a document (passport, identity card, . . .) proving your identity, and, if applicable, any other useful information.
You also have the right to lodge a complaint with the CNIL (French National Commission for Data Protection and Liberties (CNIL) - www.cnil.fr) or any other legal authority.
1 Preamble
The confidentiality and security of personal data are an essential prerequisite for the relationship of trust that we wish to maintain with everybody who entrust us with their Personal Data (hereinafter referred to as "Data" or "Personal Data").
The VALAB company processes this Data solely in the context of its activities, in accordance with the regulations, and guarantees the rights of persons with regard to their Personal Data.
VALAB undertakes to only implement lawful processing based on the legal foundations provided for in the legislation: the consent of the person, the performance of its contractual obligations, compliance with a legal obligation, legitimate interest and this, inasmuch as the processing does not infringe the rights of the persons.
VALAB only collects Data that is necessary for the purposes described below.
VALAB implements security measures that in particular take into account the sensitive nature of the Data, the nature of the processing and of the risks incurred by persons in the case in particular of unavailability of the processing or compromised integrity or confidentiality of the Data. VALAB takes into account these risks as much when designing and when determining the processing means as at the moment of the processing itself.
In the event of the use of a service provider carrying out on its behalf the processing of Personal Data, VALAB selects subcontractors who meet the legal obligations and guarantees related to the protection of Personal Data.
The present privacy policy is available at all times on the Valab website.
The present privacy policy is subject to change due in particular to changes in the processing carried out by VALAB and/or in the legal obligations.
2 Data controller - Data Protection Officer
The controller for the processing mentioned in the present document is the VALAB company.
-
Name: The VALAB company
-
Type of company: Société à responsabilité limitée (SARL - French limited liability company)
-
Share capital: 7 622.45 €
-
RCS (Trade and Companies Register) number: RCS of Toulouse, France: N° 340 677 665 00010
-
VAT number: FR 73340677665
-
Head office: 13 chemin de la Madeleine, 31130 Flourens, France
-
Phone Number: +33 (0) 531 083 499
-
Data Protection Officer: Délégué à la protection des données personnelles, VALAB, 13 chemin de la Madeleine, 31130 Flourens, France
The VALAB company is certified ISO 9001 by Bureau Veritas Certification.
3 The Data processed
VALAB may collect your Personal Data for one or more processing purposes mentioned below.
3.1 Processing of the Data of customers and suppliers of VALAB
We process Personal Data that we collect in the course of our commercial relationships or that you send us directly, in particular the following information:
| processing - purpose | Personal data Processed |
Legal grounds |
|---|---|---|
|
Performance of the licence agreement of a software product sold by VALAB. |
Civil status, last name, first name, professional phone number, professional electronic address, professional postal address, function and employer |
Contract performance |
|
Performance of the maintenance agreement of a software product sold by VALAB. |
Civil status, last name, first name, professional phone number, professional electronic address, professional postal address, function and employer |
Contract performance |
|
Use of the private part of the www.valab.com website allowing the performance of its contractual obligations by VALAB. |
Login, last name, first name, electronic address |
Contract performance |
|
Use of the private part of the www.valab.com website providing access to technical and sales information defined by VALAB. |
Login, last name, first name, electronic address |
Express consent |
|
Management of VALAB's commercial relationships with its customers. |
Civil status, last name, first name, professional phone number, professional electronic address, professional postal address, function and employer |
Contract performance / legitimate interest |
|
Management of VALAB's commercial relationships with its suppliers. |
Civil status, last name, first name, professional phone number, professional electronic address, professional postal address, function and employer |
Contract performance / legitimate interest |
|
Marketing - Prospection for the sale of software licences, the sale of software maintenance contracts and the sale of associated services. |
Civil status, last name, first name, professional phone number, professional electronic address, professional postal address, function and employer |
Express consent |
|
Web traffic statistics for the www.valab.com website. |
IP address |
3.2 The special case of Data processed by the Valab® software solution
The Valab® software solution, marketed and developed by the VALAB company, is hosted by your medical laboratory in your own information system or with the certified health data hosting provider you have chosen.
The Valab® software solution allows the processing of Personal Data of your patients and in particular of health Data. The processing carried out by the Valab® software solution consists of an aid for the biological validation of the test results of your patients.
It is your responsibility to evaluate the persons to whom you intend to communicate such Data and the conditions of its communication in respect of the legal provisions.
In the context of the services it provides, the VALAB company shall in no way be a recipient of Personal Data of your patients.
4 Security of your Data
VALAB has implemented organisational and technical measures to preserve the security of your Personal Data against alteration, accidental or unlawful loss, unauthorised use, disclosure or access.
In this context, we have implemented in particular the following measures:
- Appointment of a manager of the VALAB information system;
- Appointment of a Data Protection Officer;
- Creation of an entity devoted to information system security;
- Awareness-raising concerning confidentiality requirements for our collaborators liable to gain access to your Personal Data;
- Obligations of confidentiality imposed upon all recipients of your Personal Data;
- Heightened security of access to our premises and to our information technology platforms;
- Formalization and implementation of a VALAB information system security policy;
- Reinforced security for the access, sharing and transfer of Data;
- Obligation of our subcontractors and partners to respect the legal requirements;
- Definition of procedures to manage possible security breaches, to analyse their consequences and define actions to be implemented to address them.
5 Recipients of your Data - Transfer of your Data
- Only VALAB and its subcontractors are authorised to process your Personal Data.
- Public, administrative and judicial authorities may be recipients of your Data due to legal obligations which must be respected by VALAB and/or its subcontractors.
- Your Data is not communicated to any other third party, namely to any other person than VALAB and its subcontractors and any other persons who are placed under the direct authority thereof.
- Your Personal Data is not used for any commercial purpose.
- Your Data is not processed or transferred in any way whatsoever outside the territory of the European Union.
6 Automated decisions and profiling
The only case where profiling can be carried out by VALAB on your Personal Data outside the context of performance of a contract is for marketing or prospection for the sale of software licences and/or of the associated services.
7 Your rights on your Personal Data
You have the following rights on your Personal Data, you can:
- ascertain, update, modify or request the deletion of your Data;
- request the limitation and/or oppose the processing of your Data;
- request the portability and transfer of your Data to any other data controller;
- define general and specific directives specifying the way you wish these rights to be exercised after your death.
You can exercise the aforementioned rights by contacting directly VALAB through the post at the address: VALAB, Délégué à la protection des données personnelles, 13 chemin de la Madeleine, 31130 Flourens, France.
To answer such requests, VALAB should be the addressee of your postal and electronic addresses, and please provide a copy of a document (passport, identity card, . . .) proving your identity, and, if applicable, any other useful information.
You also have the right to lodge a complaint with the CNIL (French National Commission for Data Protection and Liberties (CNIL) - www.cnil.fr) or any other legal authority.