This Privacy Notice applies to the processing of personal data related to the use of the website https://www.domaintherapeutics.com/ (hereinafter “the Website”).

Domain Therapeutics as the Controller of the personal data, has committed to comply with the General Data Protection Regulation N°EU 2016/679 (hereinafter, the “GDPR”) and the French law “Loi n° 78-17 du 6 janvier 1978 relative à l’informatique, aux fichiers et aux libertés (Lois Informatique et Liberté)”, collectively referred as “Data Protection Laws”.

With this Privacy Notice, Domain Therapeutics wants to make sure that you understand what personal information is collected about you, how your personal information is used and how it is kept safe.

General warning and use of social media

Access to the Website implies the User’s full and unreserved acceptance of this Privacy Notice (hereinafter the “Notice”), as well as its general terms of use and the Cookies Notice. The User acknowledges having read the information below.

The Notice is valid for all pages hosted on the Website. It is not valid for the pages hosted by third parties to which may refer and whose privacy notices may differ. Domain Therapeutics cannot therefore be held responsible for any data processed on these websites or by them. This Notice also applies to any other website that Domain Therapeutics may operate, including our Company pages on Twitter, LinkedIn, Facebook and Instagram.

Please, note that for the use of social media, Domain Therapeutics will be Joint-Controller with Twitter, LinkedIn, Facebook and Instagram only for the following activities: accessing and processing statistical aggregate data provided by Twitter, LinkedIn, Facebook and Instagram. For any other processing on the platform, social media platform shall be considered as the sole Data Controller.

Facebook, including Instagram, and LinkedIn have created an “addendum” to their user agreements for company pages for the processing for which they are Joint-Controllers with us. Such agreement is not currently provided by Twitter.

 

1. Why, how and for how long do we collect your personal data?

Depending on the purpose for which we process your personal data, we need to process one or other personal data. We will keep them for no longer than necessary to fulfill the purposes for which we collected it, including any legal requirements.

Depending on each case, the processing will therefore be as follows:

 

Purposes	Types of personal data	Legal basis	Retention period
To answer to your queries by email	Name, email address, company name   Please note that other Personal Data may be processed by Domain Therapeutics depending on your request and the information you provide us.	This processing is based on our legitimate interest in answering the requests or queries raised by you through the existing different contact channels.   We understand that the processing of these data is also beneficial to you to the extent that it enables us to assist you adequately and answer to the queries raised.	We will process your data for the time necessary to meet your request.
For job application	Name, email, address, phone number, CV, background	This processing is based on our legitimate interest for the purpose of our recruitment process in order to administer and appraise job applications.   We understand that the processing of these data is also beneficial to you to the extent that it enables you to get a job by providing a spontaneous application or answering to an offer.	We will process your data for the time necessary to manage your application. This data can be retain for other job opportunities within a recommended timeframe of two years.
For statistical purposes	Aggregate statistical data (e.g., Company page on Twitter, Facebook, Instagram and LinkedIn).	We consider that we have lawful interest to understand the way our page is consulted (e.g., how many times our page is consulted, from which country,…).	Statistical information is stored by Twitter, Facebook, Instagram and LinkedIn and consequently subject to their retention policy. We may export statistical reports, but we guarantee that this is only in an anonymous form.
Use of cookies for the functioning and managing of our website	Cookies may store in certain circumstances personal data which may include: IP addresses, browser type, location, operating system,…	Please, see our Cookies Notice for more information.	Please, see our Cookies Notice

 

2. Data sharing

We do not sell or trade to outside parties your personal data.

Nevertheless, Domain Therapeutics has contracted with the following Services Providers to manage the Website that may have access to your personal data:

• Flatchr for job application.
• OVH (www.ovh.com) as website hoster
• Google Analytics (analytics.google.com) as an analytical tool
• Google Inc.
• 18h25 as a digital agency.

Sharing your personal data as explained above may involve a transfer of personal data to a country outside the European Economic Area (EEA). Domain Therapeutics is therefore committed to complying with the transfer rules under applicable Data Protection Laws and therefore ensure to:

• Transfer your data to countries where the data recipient is located that has been recognized as adequate by the European Commission; or
• Where a country has not received an adequacy decision from the European Commission, to implement appropriate safeguards, such as the EU Standard Contractual Clauses (“SCCs”).

You can contact our DPO (see contact details below) if you want to have more details about the mechanism supporting data transfer.

 

3. How do we protect your information?

Domain Therapeutics treats your personal data in a confidential manner and provides for a sufficient and adequate level of protection of your personal data.

Your personal data are contained behind secured networks and are only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential.

 

4. Your rights

According to the GDPR, you have the following rights:

• You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, information related to the processing of data and a copy of the data being processed.
• You have the right to require rectification of inaccurate data about you.
• Right to be forgotten. To obtain the deletion of your personal data in the situations set forth by applicable data protection law.
• Restrict processing. You have the right to restrict processing of data under certain specified circumstances.
• Data portability. You have the right to request for the receipt or the transfer to another organization, in a machine-readable form, of your personal data.
• Object to processing. You have the right to object, on grounds relating to your particular situation, at any time to the processing of your data.
• Right to withdraw consent. When you have given your explicit consent for the processing of your data (e.g., Subscription to the Newsletter), you can withdraw it at any time without justification.

Please note that all these rights are not absolute and will be assessed on a case-by-case basis by our Data Protection Officer.

If you would like to exercise your rights, please let us know by contacting our DPO, domaintherapeutics.dpo@mydata-trust.info.

If you consider that your personal data is not processed in accordance with the GDPR, you have the right to lodge a complaint with the Data Protection Authority in the Member State of the European Union of your habitual residence, place of work or place of the alleged infringement.

Please find the contact information of all Authorities in section 6 “Contacts”.

 

5. Changes to this Privacy Notice

This Notice is effective as of the date stated at the top of this page. We may change this Notice from time to time. Please refer back to this Notice on a regular basis.

 

6. Contacts

Domain Therapeutics, acting as Controller

Bioparc 1 – 850 Boulevard Sébastien Brant
67400 Strasbourg – Illkirch – France
contact@domaintherapeutics.com

Data Protection Officer
domaintherapeutics.dpo@mydata-trust.info

French Data Protection Authority
Commission Nationale de l’Informatique et des Libertés – CNIL
3 Place de Fontenoy
TSA 80715 – 75334 Paris, Cedex 07
Tel: +33 (0)1 53 73 22 22
Fax: +33 (0)1 53 73 22 00
Website: http://www.cnil.fr/ https://www.cnil.fr/en/contact-cnil

For other EU Data Protection Authorities
https://edpb.europa.eu/about-edpb/about-edpb/members_en