Privacy Policy
The IHU Strasbourg is engaged in a process of continuous and dynamic improvement of its compliance with Regulation No. 2016/679, known as the General Data Protection Regulation (“GDPR”) and the Law No. 78-17 of January 6, 1978 relating to information technology, to the files and freedoms in their modified version, with regard to the data processing carried out on its website.
In keeping with this approach, the IHU Strasbourg wishes to inform you more specifically about the use of your personal data and your rights through this Policy.
Definitions
The terms set out below shall have the following meaning:
- “Personal data” – any information relating to an identified or directly or indirectly identifiable natural person;
- “Processing of personal data” – any operation relating to personal data and in particular the collection, recording, organization, storage, adaptation, modification, extraction, consultation, use, communication by transmission, dissemination, making available, reconciliation, interconnection, locking, erasure or destruction;
- “Data Controller” – the body that determines the purposes pursued by the data processing and the means to carry it out;
- “Data Subject” – the natural person to whom the data that is the subject of processing relates
- “Recipient” – any person entitled to receive communication of data;
- “Processor” – the natural or legal person, public authority, agency or any other body which processes personal data on behalf of and at the direction of the controller;
- “Authorised third parties” – the authorities who, under legislative and regulatory provisions, have the power to require a data controller to transmit documents or information containing personal data.
Who is the data controller?
The data controller is:
University Hospital Institute of Strasbourg
1 place de l’Hôpital
67091 Strasbourg Cedex
Phone: +33 (0)3 90 41 36 00 / Fax: +33 (0)3 90 41 37 01
webmaster@ihu-strasbourg.eu
Foundation for Scientific Cooperation – SIRET : 538405 952 000 10 – NAF : 7211Z
The legal representative is Mr. Christian Debry, director of the establishment.
The personal data protection officer is:
The company ACTECIL
204 avenue de Colmar
67100 Strasbourg, France
+33 (0)9 722 722 93
dpo@ihu-strasbourg.eu
For what purposes do we process your data?
As part of the operation of its website, IHU Strasbourg may collect data about you. We collect this data directly from you (when you apply for a job offer, make an unsolicited application or during requests made through the contact form) or indirectly (via the use of cookies or tracers).
Prior to the collection of data, you will be informed whether the personal data requested must be provided or if they are optional. The data identified by an asterisk within a collection form are mandatory. You are informed that by not providing the mandatory data, access to the Services and their use will be impossible. The other data are optional and their non-provision will not call into question the delivery of services, although it may limit their relevance.
These data are processed in accordance with the purposes intended at the time of collection, namely:
1. Management of the website
a. Management of the services and functionalities of the site
When you visit our site, the IHU Strasbourg carries out data processing in order to manage the services and functionalities of the site, based on its legitimate interest in ensuring its proper functioning and to ensure routine administration operations.
The data concerned are technical information such as type of internet browser, operating system used, domain name of your internet service provider, your IP address. This information is necessary to correctly display the requested web pages.
The recipients of this data will be the internal services of the IHU Strasbourg, and in particular the administration, recruitment, education services, the webmaster, the IT support as well as the medical teams requested when necessary.
b. Management of cookies and other tracers
When you visit our site, the IHU Strasbourg carries out data processing based on your consent in order to produce audience measurement statistics.
Cookies are small text files placed on your terminal and saved by your browser. For more information, please refer to our “Cookie Policy”.
The recipients of this data will be the internal services of the IHU Strasbourg, and in particular the webmaster.
c. Management of contact requests
Insofar as you provide us with information through our contact methods, IHU Strasbourg carries out data processing in order to receive and process your requests based on its legitimate interest in ensuring the processing of the requests made.
The data concerned are your identity data (last name, first name, contact details), information relating to your request and any other data related to our exchanges.
The recipients of this data will be the internal services of the IHU Strasbourg, and in particular the administration, recruitment, education services, the webmaster, the IT support as well as the medical teams requested when necessary.
Your data will be kept for the time necessary to process your request, which will be processed as soon as possible; the retention period applied is a maximum of 12 months.
d. Recruitment management
To the extent that you provide us with information as part of your application (CV, cover letter, possible exchanges), the IHU Strabourg processes data in order to ensure recruitment management, based on the execution of pre-contractual measures taken at your request.
The data concerned are in particular your identity data (name, first name, contact details), your professional information (training, experience, skills) as well as any element communicated as part of the recruitment process.
The recipients of this data are the internal services of IHU Strasbourg and in particular the management responsible for recruitment, as well as any person involved in the evaluation of your application.
Your data will be kept for the duration strictly necessary to study your application. In the event of a negative outcome, your data may be retained for a maximum period of 2 years after the last contact, unless you object. In case of hiring, your data will be integrated into your employee’s administrative file and retained according to the applicable legal periods.
2. Management of requests to exercise rights over your personal data
Based on our legal and regulatory obligations, the IHU Strasbourg processes data for the purpose of managing requests to exercise rights over your personal data.
The data concerned are your identity data (last name, first name, contact details) and data relating to your requests to exercise rights (subject of the request, follow-up).
The recipients of this data will be the person responsible for processing requests to exercise rights and the staff members concerned by your request.
Your data will be kept for a period not exceeding five (5) years from the closing of the request.
Who can have access to your data?
The recipients of your data may be, depending on the processing concerned:
- Internal recipients: The authorized internal services of the IHU Strasbourg (notably the human resources department, administration, recruitment, education, webmaster, IT support as well as the medical teams requested when necessary.
- External recipients: The host of our site, the service providers involved in our recruitment process, the bodies responsible for financial control of the structure.
The IHU Strasbourg uses data processors as part of the management of its website. In this case, the IHU Strasbourg ensures that they provide sufficient guarantees regarding the implementation of appropriate technical and organizational measures so that the processing meets the requirements of data protection rules and ensures protection of the rights of individuals.
In accordance with the regulations in force, your personal data may be transmitted to authorized third parties who, under legislative and regulatory provisions, have the power to require a controller to transmit documents or information containing personal data. When the IHU Strasbourg is faced with such a request, the necessary checks are carried out to ensure that the request is well-founded.
How do we secure your data?
The IHU Strasbourg undertakes to make the necessary efforts to implement organizational and technical measures adapted to the sensitivity of the data and the risks that weigh on the users in accordance with article 32 of the GDPR.
However, it is the responsibility of each user to ensure the security of personal data transmissions over the internet. The IHU of Strasbourg cannot be held responsible for the transmission of personal data via the Internet.
Data transfer out site the European Union
The IHU Strasbourg does not transfer data outside the European Union. In any case, the IHU Strasbourg undertakes not to transfer personal data to a country outside the European Union without first informing the users.
How to exercise your rights and who to contact?
In accordance with the GDPR, you have the following rights regarding your data: right of access, right to rectification, right to object, right to erasure, right to restriction of processing, right to portability and right to withdraw your consent.
To exercise your rights or for more information, you can contact us:
The company ACTECIL
204 avenue de Colmar
67100 Strasbourg, France
+33 (0)9 722 722 93
dpo@ihu-strasbourg.eu
Please specify the subject of your request and the right(s) you intend to avail yourself of. As part of a request for rights and in case of reasonable doubt about your identity, you may be asked to provide a valid proof of identity.
If, after contacting us, you consider that your rights are not being respected, you can submit a complaint to the CNIL.
Evolution of the Policy
This Policy comes into effect on December 01, 2025. It may be required to evolve, notably due to legislative and regulatory developments.