Privacy & Cookie Policy

When you browse this website, Gustave Roussy collects and uses some of your personal data in its capacity as data controller. This policy explains what data is collected, why, how long it is kept, who it is shared with and what your rights are under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the French Loi Informatique et Libertés.

1. Data controller

Institut Gustave Roussy
39 bis, rue Camille Desmoulins
94805 Villejuif Cedex — France
Tel.: +33 (0)1 42 11 42 11

2. Why is your data collected?

Personal data collected via this website allows Gustave Roussy to:

• Process your registration to the Gustave Roussy & The Lancet Lecture Series (in-person or online), send you practical information and confirmations relating to the event;
• Respond to contact requests sent through the website;
• Optimise your browsing experience (display adapted to your device, language detection, storage of your preferences);
• Carry out statistical analysis of visits to the website in order to improve it.

3. What data is collected?

Through forms

When you fill in a form on this website, mandatory fields are marked with an asterisk. The data collected may include:

• First and last name;
• Email address;
• Professional affiliation / institution;
• Attendance mode (in person or online);
• Any additional information you choose to provide.

Through cookies

Some data is collected automatically while you browse the website, via cookies. Two categories of cookies may be used:

• Strictly necessary cookies — required for the website to function (session, security, consent storage). They cannot be disabled.
• Audience measurement cookies — placed only if you accept them via the cookie banner, to produce anonymous statistics on the use of the website.

You can change your choice at any time by clearing this site's storage in your browser settings; the banner will then appear again on your next visit.

4. Legal basis for processing

• Your consent — for event registration, contact requests and the placing of analytics cookies (Article 6.1.a GDPR);
• Legitimate interest — for the placing of strictly necessary cookies and for ensuring the proper operation and security of the website (Article 6.1.f GDPR).

5. Is your data shared with third parties?

Some of your personal data may be shared with service providers who assist Gustave Roussy in delivering the event website, namely:

• The hosting provider of this website;
• The audience-measurement provider (only if you consent);
• The email-delivery provider used to send registration confirmations and practical information related to the event.

Your data is never sold and is shared with these providers only for the purposes described above. They act as processors and are bound by contract to apply appropriate security measures.

6. How long is your data kept?

• Data collected through the registration form: kept for the duration of the event and up to 3 years afterwards, for the organisation of future editions.
• Data collected through cookies: 6 months maximum.
• Contact requests: 3 years from the last contact with Gustave Roussy.

7. International transfers

Personal data is processed within the European Union. Where a processor is located outside the EU, appropriate safeguards (such as the European Commission Standard Contractual Clauses) are put in place.

8. Your rights

In accordance with the GDPR, you have the right to access, rectify, object to, restrict, delete and port the data concerning you that is collected through this website. You also have the right to withdraw your consent at any time and to define directives concerning the fate of your data after your death.

To exercise these rights, contact the Gustave Roussy Data Protection Officer:

• By email: donneespersonnelles@gustaveroussy.fr
• By post: Institut Gustave Roussy, Délégué à la protection des données, Direction de la transformation numérique et des systèmes d'information, 114 rue Édouard-Vaillant, 94805 Villejuif Cedex — France.

If you are not satisfied with our response, you may lodge a complaint with the French data-protection authority (CNIL): www.cnil.fr/fr/plaintes.

9. Updates

This policy may be updated to reflect changes in the website or in applicable regulations. The "Last updated" date at the top of this page indicates the latest revision.