Privacy Policy

WHAT IS THE SCOPE OF THIS PRIVACY POLICY?

This notice describes the processing of personal data of internet users visiting the iPEPS website, the
startup incubator of the Institut du Cerveau.

WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

The Institut du Cerveau, which acts as the data controller, is a private foundation recognized as a
public utility, whose mission is to support and develop research on the brain and spinal cord.
Committed to protecting personal data and respecting the privacy of all individuals with whom it
interacts, the Institut du Cerveau ensures compliance with French and European data protection
laws, particularly the General Data Protection Regulation (GDPR) of April 27, 2016, and the French
Data Protection Act of January 6, 1978, as amended.

WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU?

Personal data refers to any information related to an individual that can identify them, either directly
or indirectly.
We collect personal data for the purposes mentioned in the section “Why is your personal data
processed?” The following personal data may be collected for these purposes. The mandatory nature
of providing certain information is indicated by an asterisk.

  • Via the contact form:
    • Identification data: Last name*, First name*
    • Contact details: Postal address*, Email*, Phone number

WHY IS YOUR PERSONAL DATA PROCESSED?

The personal data collected by the Institut du Cerveau allows us to:

  • Provide you with services and information following the completion of the contact form by you.
  • Offer you an optimal browsing experience (display preferences, etc.) through the use of cookies.

WHAT LEGAL GROUNDS DO WE RELY ON TO PROCESS YOUR PERSONAL DATA?

The legal basis for processing your personal data depends on the purposes of the processing. It may be:

  • The performance of a contract or pre-contractual measures.
  • The legitimate interest pursued by the Institut du Cerveau in the context of its activities and missions.
  • Your consent, which you can withdraw at any time.

WHAT COOKIES DO WE USE?

A cookie is a tracker that provides information about your navigation on our site.
Cookies placed directly by our website allow us to save user-selected settings (e.g., language choice).
If you block these cookies, we cannot guarantee optimal site usability. Below is the list of cookies
directly placed by our site:

Cookie Name Type Purpose Retention Period
pll_language Functional Cookie Save language preference One (1) year

HOW TO MANAGE COOKIES?

You can also disable the saving of cookies by configuring your browser:

WHO ARE THE RECIPIENTS OF YOUR DATA?

The Institut du Cerveau only shares the data it collects with its internal services, as well as its service
providers and their staff, for the purposes of performing the services entrusted to them and carried
out on its behalf. The personnel who have access to your data are authorized and subject to
confidentiality obligations.

ARE THERE TRANSFERS OF DATA OUTSIDE THE EUROPEAN UNION?

The Institut du Cerveau may transfer personal data outside the European Union. If a transfer occurs
to a third country that does not offer an adequate level of protection, the Institut ensures that
appropriate safeguards are in place with the recipients to protect your personal data, notably
through the use of standard contractual clauses approved by the European Commission.

HOW LONG IS YOUR DATA RETAINED?

We ensure that your personal data is retained for no longer than necessary to fulfill the purposes
mentioned above and in accordance with applicable law, if relevant.
Personal data provided via contact forms is retained for five (5) years from the last contact.
Cookie retention periods are specified in the section “What cookies do we use?”

WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

In accordance with applicable legal and regulatory provisions, particularly the General Data
Protection Regulation (GDPR – EU Regulation 2016/679) and the French Data Protection Act of
January 6, 1978 (n°78-17), you have the following rights:

  • Request access to your personal data: obtain a copy of the personal data we hold about you.
  • Request correction or updating of your data if it is inaccurate or incomplete.
  • Request deletion of your data.
  • Object, for reasons related to your particular situation, to the processing of your personal data.
  • Withdraw your consent to the processing of your data when our processing is based on your consent.
  • Request the limitation of the processing of your data, meaning that your data is no longer used or processed.