PRIVACY POLICY

PRIVACY POLICY

Transgene, as data controller, collects, accesses, uses, modifies, stores, transmits and deletes personal data in the course of your daily use of the Transgene website (The “Website”) and your interaction and exchanges with our employees via the contact forms. By using Transgene’s Website and by providing us with information about yourself, you authorize us to use your personal data in accordance with the provisions of this Privacy Policy.

Transgene is committed to protecting the personal information and privacy of its customers, website visitors and any person using its services in general, in compliance with the applicable provisions and in particular with the European Regulation 2016/679 of 27 April 2016 and the amended Law No. 78-17 of 6 January 1978, known as the “Data Protection Act” (hereinafter the “Applicable Provisions”). The confidentiality and security of your personal data are at the heart of our concerns, and we undertake to use them exclusively for the purposes defined in this Privacy Policy.

The purpose of this Privacy Policy is to inform you about:

• The types of personal data that we collect about you.
• How your personal data is processed by Transgene.
• The terms and conditions of use of your personal data and your rights in this respect, in compliance with applicable European and French legislation.

In the event that you object to the collection, storage and/or use of your personal data hereunder, we invite you to promptly inform us by e-mail at privacy@transgene.fr.

• What types of personal data do we collect and process?

• Data collected via contact forms: identification data (name, address, telephone number, fax, e-mail, company address or any other information you agree to submit…);
• Data collected during the use of the Website: Personal information may be collected during the connection to the site by automatic recording of your IP address, cookies and other tracers, pages consulted by the user, date and time of consultation, geographical location, source of the connection (social networks, search engine, partner site, directory …);
• Data collected in case of job application: communicated through our “Careers” portal on the Website: identification data, name, first name, e-mail address, postal address, telephone number, CV, cover letter, diplomas, training, professional experience.

Most of the personal data concerning you are collected within the framework of our direct exchanges. However, we may, in some cases, collect or receive information about you from third parties (for example, as part of our recruitment process, we may receive information about you from your previous employer or from a recruitment officer).

• What are the legal grounds for processing your personal data?

The use of your personal data is based on the following legal grounds:

• Consent: We may ask for your consent to use your personal data.
• Performance of a contract: We may collect and use your personal data to enter into a contract with you or to fulfill our obligations under a contract with you.
• Legitimate interests of Transgene: We may use your personal data to enable Transgene to pursue legitimate business interests.
• Compliance with applicable laws or regulations: We may use your personal data to comply with applicable laws and regulations.

The legal grounds listed above are cumulative.

• For what purposes is your data collected and processed?

We may need your personal data for the following purposes:

• Newsletter subscription management: Sending updates, communications, proposals that may be of interest to an investor, partner, supplier, etc. Any subscription to a newsletter or subscription to an e-mail distribution list may be canceled at any time by sending an e-mail to Transgene at communication@transgene.fr .
• Management of requests via contact forms (purchasing platform or general contact form): Establishing or following up on commercial, financial and/or scientific relationships with you in connection with Transgene’s activities; requesting additional information, sending information regarding changes/updates to our services, activities or policies.
• Website Management: To record and track your use of our Website or other online services, including analyzing usage, measuring Website performance and generating reports. The personal data we collect at each login, such as cookies (see our Cookie Policy), may also help us better understand how users navigate the Website, gather statistics on page views, monitor the operation of the Website, and generally improve and/or customize the online experience of using the Website.
• Complaints management: Processing requests for access, rectification, opposition, deletion rights, managing litigation (creating, exercising or defending our rights, particularly in legal proceedings).
• Management of your application for a position in our company.
• Legitimate business interests including research and business analysis.
• Preventing and responding to actual or potential fraud or illegal activity.

• How do we share data with third parties?

The majority of the personal data we collect from you will be used solely by Transgene and its affiliates and, unless otherwise specified at the time of collection, will not be shared with third parties for any purpose.

In some cases, however, we may share information about you with third parties who will be subject to relevant contractual obligations regarding confidentiality and security.

In addition, your personal data may be shared with partners or service providers located in countries outside the European Union whose privacy laws and regulations may differ from those applicable in France and, in such cases, we will put in place appropriate security measures and contracts to ensure the protection of your personal data.

• How do we ensure the security of your data?

Transgene has implemented all appropriate technical and organizational measures to ensure the confidentiality of personal data collected and processed and a level of security appropriate to the risk.

Transgene ensures the security of your personal data by implementing enhanced data protection using physical and logical security measures.

Transgene has defined a personal data protection policy and informs any person acting under its authority who has access to this information of its confidential nature. In addition, Transgene ensures that its technical service providers, who may have access to personal data, respect the same confidentiality.

However, it is the responsibility of each user to ensure the security of personal data transmissions over the Internet. Transgene cannot be held responsible for the transmission of personal data via the Internet.

• How long will your data be kept?

Transgene will keep your personal data in a secure environment only for as long as is necessary to fulfill the purposes for which it was collected or for the maximum retention period provided for by the applicable legislation in France. For more information, please refer to the table below:

• How can you exercise your rights?

Under the European Data Protection Regulation (“GDPR”) No. 2016/679/EU of April 27, 2016 “on the protection of individuals with regard to the processing of personal data and on the free movement of such data” as well as the French law No. 78-17 of January 6, 1978, as amended, you have the following rights:

• Data subjects have the right to be informed about the collection and use of their personal data.
• Right of access: data subjects have the right to obtain confirmation as to whether personal data relating to them is being processed and, when they are, access to such personal data.
• Right of rectification: The data subject has the right to obtain from the controller, as soon as possible, the rectification of personal data concerning him/her which are inaccurate. Considering the purposes of the processing, the data subject has the right to obtain that incomplete personal data is completed, including by providing a supplementary declaration.
• The right to erasure: The data subject has the right to obtain from the controller the erasure of personal data concerning him / her when the personal data are no longer necessary for the purposes for which they were collected or the data subject withdraws the consent on which the processing is based, etc.
• Right to object: Data subjects have the right to object to the processing of their personal data for advertising purposes or for commercial purposes.
• Right to data portability: Data subjects have the right to receive the personal data concerning them, in a structured, commonly used and machine-readable format, and have the right to transmit these data to another controller, where technically feasible.
• Right to restriction of processing: Data subjects have the right to obtain the restriction of processing of their data.

To exercise your rights, you may contact Transgene’s DPO:

• By e-mail: privacy@transgene.fr
• By post: DPO Transgene, Parc d’Innovation, 400 Boulevard Gonthier d’Andernach, 67400 Illkirch-Graffenstaden

If you feel, after having contacted us, that your rights regarding your personal data have not been respected, you can send a complaint to the CNIL or to the Supervisory Authority of your place of residence.

• Updates

This policy became effective on 02/25/2020. It was revised in October 2022.

To check for updates to our Policy, please consult this page regularly.

For further information on Transgene’s global approach to all personal data processing activities, please consult Transgene’s general privacy policy.