Privacy policy

Effective date: 1 June 2024. Last updated on 1 June 2024

GAMIDA SA (“us”, “we”, “our”) operates the https://gamida.fr website (hereinafter referred to as the “Service”).

This page explains our policies on the collection, use and disclosure of personal data when you use our Service and the choices you have regarding this data.

We use your data to provide and improve the Service. By using the Service, you consent to the collection and use of information in accordance with this policy.

Definitions

• Service: By Service we mean the website https://gamida.fr operated by GAMIDA
• Personal data: Personal data means data relating to a living individual who can be identified from that data (or from that data and other information in our possession or likely to come into our possession).
• Usage data: Usage Data is collected automatically and is generated either by use of the Service or by the Service infrastructure itself (e.g. duration of page consultation).
• Cookies: Cookies are small files stored on your device (computer or mobile device).
• Data Controller: Data Controller means the natural or legal person (individually or together with others) who determines the purposes and methods for which all personal data is processed or is to be processed. For the purposes of this Privacy Policy, we are a Data Controller for your personal data.
• Subcontractor (or Service Provider): The term Subcontractor (or Service Provider) refers to any natural or legal person who processes data on behalf of the Data Controller. We may use the services of several Service Providers in order to process your data more efficiently.
• Data Subject (or User): Data Subject means any living person who uses our Service and is the subject of Personal Data.

Collection and use of data

We collect several types of data for different purposes in order to provide and improve our Service.

Types of data collected

Personal Data

When you use our Service, we may ask you to provide us with certain nominative personal data that can be used to contact you or identify you (“Personal Data”). Nominative personal data may include, but is not limited to:

• Email address
• First name and surname
• Cookies and Usage Data

We may use your Personal Data to send you newsletters, commercial communications or promotions and other information that may be of interest to you.

You can choose not to receive any communication from us or to receive only certain communications by clicking on the unsubscribe link or by following the instructions in each email we send you.

Usage data

We may also collect information about how you access and use the Service (“Usage Data”). This Usage Data may include information such as the Internet Protocol (IP) address of your computer, browser type, browser version, the pages of our Service that you visit, the date and time of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking and cookie data

We use cookies and other similar tracking technologies to track activities on our Service, and we store certain information.

Cookies are small data files that may contain an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies such as pixels, tags and scripts are also used to collect and track information and to improve and analyse our Service.

You can ask your browser to refuse all cookies or to warn you when a cookie is being sent. However, if you do not accept cookies, you may not be able to use certain elements of our Service.

Examples of cookies we use:

• Session Cookies. We use Session Cookies to operate our Service.
• Preference Cookies. We use Preference Cookies to remember your preferences and different settings.
• Security Cookies. We use Security Cookies for security reasons.

Use of data

GAMIDA uses the data collected for various purposes:

• To provide and maintain our Service
• To notify you about changes to our Service
• To enable you to use the interactive features of our Service when you want to
• To provide customer support
• To collect valuable data or analysis that will enable us to improve our Service
• To monitor the use of our Service
• To detect, prevent and fix technical problems
• To provide you with news, special offers and general information about other goods, services and events we offer which are similar to those you have already purchased or enquired about, unless you have previously indicated that you do not wish to receive information of this nature.

Legal basis for processing personal data under the General Data Protection Regulation (GDPR).

If you reside in the European Economic Area (EEA), GAMIDA’s legal basis for collecting and using the personal data described in this Privacy Policy depends on the Personal Data we collect.

GAMIDA may process your Personal Data:

• Because we need to perform a contract with you
• Because you have authorised us to do so
• Because we have a legitimate interest in carrying out this processing and
  your rights do not override that legitimate interest
• For payment processing purposes
• To comply with the law

Data retention

GAMIDA will only retain your Personal Data for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary for us to fulfil our legal obligations (for example, to comply with applicable legislation), resolve disputes and enforce our agreements and policies.

GAMIDA will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except where such data is used to enhance the security or improve the functionality of our Service, or where we are legally required to retain such data for a longer period.

Transfer of data

Information about you, including your Personal Data, may be transferred from your region, province, country or other territorial division to computers – and stored on them – located in a place where data protection legislation differs from that of the territory in which you reside.

If you reside outside France and choose to provide us with information, please be aware that we transfer data, including Personal Data, to France and process it there.

By accepting this Privacy Policy and then submitting this information, you consent to this transfer.

GAMIDA will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and your Personal Data will not be transferred to any organisation or country unless adequate controls are in place, including with respect to the security of your data and other personal data.

Disclosure of Data Disclosure of Data to Law Enforcement

In certain circumstances, GAMIDA may be required to disclose your Personal Data if required to do so by law or in response to valid requests from public authorities (e.g. a court or government agency).

Legal requirements

GAMIDA may disclose your Personal Data if it believes in good faith that this is necessary to:

• Fulfil a legal obligation
• Protect and defend the rights or property of GAMIDA
• Prevent or investigate possible wrongdoing in connection with the Service
• Ensure the personal safety of users of the Service or the public
• Protect against civil liability

Other communication

• Data collected by GAMIDA may also be transmitted to GAMIDA’s subcontractors and partners and to social networks.

Data security

The security of your data is important to us. However, you should bear in mind that no method of data transmission over the Internet or method of electronic storage is 100% secure. Although we endeavour to use commercially acceptable methods to protect your Personal Data, we cannot guarantee its absolute security.

Your data protection rights under the General Data Protection Regulation (GDPR)

If you reside in the European Economic Area (EEA), you have certain data protection rights. GAMIDA intends to take reasonable steps to allow you to correct, amend, delete or limit the use of your Personal Data.

If you would like to know what Personal Data we hold about you and would like it deleted from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

• The right to access, update or delete the information we hold about you. When this option is available, you can consult or update your Personal Data or request its deletion in the settings section of your account. If you are unable to carry out these actions yourself, please contact us for assistance.
• Right of rectification. You have the right to have your data rectified if it is inaccurate or incomplete.
• Right to object. You have the right to object to our processing of your Personal Data.
• Right of restriction. You have the right to ask us to restrict the processing of your personal data.
• The right to data portability. You have the right to receive a copy of the information we hold about you in a commonly used, structured and machine-readable format.
• Right to withdraw consent. You also have the right to withdraw your consent at any time if GAMIDA has relied on your consent to process your personal data.

Please note that we may ask you to prove your identity before responding to requests of this nature.

You have the right to lodge a complaint with a data protection authority about our collection and use of your Personal Data. For more information, please contact your nearest data protection authority in the European Economic Area (EEA).

Service Providers

We may use third party companies and individuals to facilitate the provision of our Service (“Service Providers”), to provide the Service on our behalf, to provide services related to the Service or to assist us in analysing how our Service is used.

These third parties only have access to your Personal Data to carry out these tasks on our behalf and are prohibited from communicating or using it for any other purpose.

Analyses

We may use third-party Service Providers to monitor
and analyse the use of our Service.

• Google Analytics: Google Analytics is a web analysis service provided by Google that tracks and reports on website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the data collected to contextualise and personalise ads on its own advertising network. You can prevent any of your activities that are part of the Service from being made available to Google Analytics by installing the Google Analytics Opt out browser add-on. This plugin prevents the Google Analytics JavaScript code (ga.js, analytics.js and dc.js) from sharing information about visit-related activities with Google Analytics. For more information on Google’s confidentiality practices, please consult Google’s Privacy Policy and Terms page.

Links to other sites

Our Service may contain links to other sites that we do not operate. If you click on a third party link, you will be redirected to that third party’s site. We strongly recommend that you examine the privacy policy of each site you visit.

We have no control over the content, policies or confidentiality practices of third-party sites or services and accept no responsibility for them.

Children’s privacy

Our Service is not intended for persons under the age of 18 (“Children”).

We do not knowingly collect personal data from people under the age of 18. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without checking for parental consent, we will take steps to delete this information from our servers.

Changes to this Confidentiality Policy

We reserve the right to update our Privacy Policy from time to time. We will inform you of any changes by publishing the new Privacy Policy on this page.

Before the change takes effect, we will notify you by email and/or by placing a prominent notice on our Service and we will update the “effective date” at the top of this Privacy Policy.

We advise you to consult this Confidentiality Policy periodically to take note of any changes. Changes to this Privacy Policy take effect when they are published on this page.

Contact us

If you have any questions about this Privacy Policy, please contact us:

By email: dpo@gamida.fr