Privacy policy of the public site Immerscio.com

Introduction

The DIGITAL EDUCATION BIOTECH PLATFORM is particularly committed to respecting the privacy and personal data of its visitors and clients.

The SAS DIGITAL EDUCATION BIOTECH PLATFORM, a simplified joint-stock company under French law, registered with the Paris RCS under number 893 358 341, whose registered office is located at 46 avenue de la Grande Armée Paris 17th, acts as the data controller of your personal data.

The SAS DIGITAL EDUCATION BIOTECH PLATFORM uses SASU GANDI whose registered office is located at 63 Boulevard Masséna 75013 Paris and RCS Paris B 423 093 459, for the hosting of its website Immerscio.bio. The company GANDI acts as a subcontractor of SAS DIGITAL EDUCATION BIOTECH PLATFORM.

We aim to establish a relationship of trust by processing your data in a lawful, fair, and transparent manner. The SAS DIGITAL EDUCATION BIOTECH PLATFORM thus complies with the data protection framework implemented by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, “ GDPR ”) as well as with Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms known as the “ Data Protection and Liberties Law ”.

1. Definitions

This Privacy Policy (“ Policy ”) applicable to the website Immerscio.bio aims to describe the principles established by the SAS DIGITAL EDUCATION BIOTECH PLATFORM to comply with current regulations on data protection.

In accordance with Article 4 1) of the GDPR, we consider the following definitions :

• Personal data (“ Personal Data”) is defined as any information relating to an identified or identifiable natural person as defined by the GDPR ;

• Processing (“Processing ”) refers to “ any operation or set of operations performed, whether or not by automated processes, on personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. ”

2. Categories and purposes of collected data

We collect data about you when you interact and access our services.

The various categories of data collected will depend on your interactions with our website Immerscio.bio, as well as the features used. Your Personal Data will not, under any circumstances, be processed for purposes other than those mentioned below. In accordance with Article 15 1. a) and b) of the GDPR, the different categories of Personal Data collected via our website Immerscio.bio, depending on your status, are:

• When you are a visitor to the Immerscio.bio website

During a simple visit to the site, no Personal Data is explicitly collected in a non-anonymized manner.

Only Personal Data related to access to the site (IP address (anonymized), date and time of consultation, amount of data transferred, and access provider) will be collected by trackers. Access data, strictly necessary, will be used solely to ensure the functioning of the site and to improve the performance of our content.

For more information, please refer to the Section 7 Cookies.

• When you interact with our services through the Immerscio.bio website

As part of the registration form for the newsletter or sending an email to our teams, Personal Data may be collected, based on your consent. Your email address and name will be required for any interaction with our teams via our dedicated form or by email. Optionally, your first name may also be required and provided, also based on your consent.

Your consent will be explicitly collected by checking the box: “ By checking this box, I agree that the information entered may be processed in connection with my request to subscribe to the newsletter ” and pressing the “ save. ” button. If you refuse to check the box and therefore consent, no Personal Data will be collected, but you will not be able to use the form.

Any additional Personal Data provided by you and with your sole will during interactions with our services will be collected to meet your expectations, and their collection will be based on our legitimate interest.

As part of your possible registration for our training, a learner account will be created, and your Personal Data will be collected. Any information relating to these collected Personal Data is explicitly mentioned in the Privacy Policy of the Immerscio.bio Platform, available at the bottom of the homepage of the Immerscio.bio Platform.

The Immerscio.bio website does not collect any sensitive data as exposed in recitals 51 of the GDPR and limits its collection of Personal Data to the strict minimum, in the interest of data minimization.

Any minor over the age of 15 can freely accept the cookies of our Immerscio.bio website. If you are a minor under the age of 15, please do not use our Immerscio.bio website and do not communicate, if applicable, any Personal Data through it.

The Personal Data collected is strictly reserved for the use of the data controller and its subcontractors mentioned in Section 5, for access to the services provided by our Immerscio.bio website.

3. Legal basis for Processing Personal Data

The legality of the Processing of Personal Data is based on the legal bases of Article 6 of the GDPR.

On the one hand, we use your consent as the legal basis to collect your Personal Data via cookies (except strictly necessary cookies) and/or during your registration requests for the newsletter and/or inquiries and interactions with our teams.

On the other hand, we rely on our legitimate interest when you interact with our teams and access our website, for certain strictly necessary cookies placed on your devices.

4. Retention of Personal Data

We retain your Personal Data in a form that allows your identification for a period not exceeding that necessary to achieve the desired purpose, in accordance with Article 5 e) of the GDPR. As for the aforementioned Personal Data collected by the Immerscio.bio website during your registration for the newsletter and interactions with our teams, the retention period for the transmitted Personal Data is limited to 3 years, i.e., 36 months. This Personal Data may be deleted at any time if you withdraw your consent by sending a clear request for deletion to support@immerscio.com.

Regarding necessary cookies, they will be retained for a maximum of ninety (90) days after your visit and twelve (12) months for audience cookies.

For more details, please see Section 7 Cookies.

5. Sharing and transfer of collected Personal Data

To provide you with quality services, we work with various companies, engaged as service providers, acting as subcontractors under Article 4 8) of the GDPR.

Currently, we do not carry out any Processing of Personal Data involving a transfer outside of the European Union (EU). All our subcontractors thus host the Personal Data in their possession within the EU. In the event that we are required to make transfers outside the EU, we undertake to implement one of the following protection guarantees : either Standard Contractual Clauses (SCC), or Binding Corporate Rules (BCR), or a code of conduct or certification, if the transfer does not fall within one of the exceptions of Article 49 of the GDPR.

Your Personal Data is processed, shared, and stored by our subcontractors who act on our behalf and for our account:

• SAS GANDI whose registered office is located at 63 Boulevard Masséna 75013 PARIS, for the hosting of the Immerscio.bio website ;

• Association CAMPUS BIOTECH DIGITAL whose registered office is located at 46 Avenue de la Grande Armée, 75017 PARIS, for the management and operation of the website and client relations ;

The SAS DIGITAL EDUCATION BIOTECH PLATFORM may be required to disclose your Personal Data to comply with applicable laws or a court request (legal obligations), to enforce the General Terms of Use (GTC) of the Immerscio.bio website, to respond to complaints alleging violations of third-party rights, to protect the rights or interests of our website.

6. Security

We are committed to implementing all technical and organizational measures to ensure the security (availability, non-repudiation, integrity, and authenticity) of your Personal Data during its Processing. Among other things, we have established data traceability measures, software protection measures, data backup, data encryption, and access control measures for personnel to Personal Data.

Regarding our partners, we only process with subcontractors presenting sufficient guarantees regarding the implementation of appropriate technical and organizational measures to ensure the security of your Personal Data. Our relationships are strictly regulated by a legal act, in accordance with Article 28 of the GDPR.

7. Cookies

Our website Immerscio.bio uses, during your visit, trackers similar to small text files directly recorded in your browser called “ cookies ”.

We use so-called “ strictly necessary ” cookies with the sole purposes of enabling electronic communication and accessing and improving our services. For example, the cookies placed concern geolocation and identifying the device, trackers intended for authentication with a service, user interface customization trackers, and audience measurement trackers.

We also use audience measurement cookies, “ non-strictly necessary ” which allow us to respond, in particular, to detecting navigation problems, optimizing technical performance or usability, or analyzing the use of the service based on your consent.

Your consent is collected through our cookie banner, upon your first connection to our website.

8. Rights of individuals

In accordance with Articles 15 to 22 of the GDPR, you have a permanent right of access, rectification and deletion, opposition, portability, and a right to limit the Processing of Personal Data concerning you. You also have the right to refuse to be subject to automated decision-making, including profiling when it is based solely on an automated decision. The exercise of these rights may be limited by legitimate and/or compelling reasons, as well as legal provisions.

9. Contact us

To exercise these rights or for any requests regarding the Processing of your Personal Data carried out by SAS DIGITAL EDUCATION BIOTECH PLATFORM, you can write to the address : DPO@immerscio.com.

Upon verification of your identity, a response to your request will be sent to you within one (1) month, which may be extended by up to three (3) months depending on the complexity of your request.

If you are dissatisfied with the response, you have the right to file a complaint with the French National Commission on Informatics and Liberty (CNIL) – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07 – Phone: +33 (0)1 53 73 22 22.

10. Modification of the policy

We may modify this Policy due to changes in applicable law or in an effort to improve our activities and offerings. We therefore encourage you to regularly check this page for any changes.