1. Data liability

 

The data controller is the GENXMAP entity with which you have concluded a contract.

 

2. Processing of personal information

 

We process the personal data we receive from our customers, service providers, suppliers and/or we receive personal data from publicly accessible sources.

We process your personal information if you submit a query, receive a quote from us, or sign a contract with us. We also process your personal data for purposes, which include complying with our legal obligations, safeguarding a legitimate interest or based on the consent you have given us.

Depending on the legal basis, this concerns in particular the following categories of personal data: Name and first name; address ; communication data (telephone number, e-mail address); Date of Birth ; nationality; basic data relating to the contract, in particular contract number, duration, termination period, type of contract; billing data/sales data; payment data/account details; account information, in particular registration and logins; group of clients/interests; Client number ; contact history; appointment data; information relating to the profession.

We process your personal data taking account of the general data protection regulations (RGPD) and of the French law framed by the law of January 6, 1978 known as “Informatique et Liberates”. The law of June 20, 2018 relating to the protection of personal data amended the “Informatique et Libertés” law to adapt it to the provisions of the General Data Protection Regulation (RGPD), applicable everywhere in Europe since May 25, 2018. In addition to the GDPR, the European Union has adopted the directive (EU) of April 27, 2016 known as the "Police Justice Directive" relating to the processing of personal data in criminal matters. These two texts constitute "the European package" on data protection.

 

3. Consent

 

Based on the consent, you have granted (Art. 6 (1a) GDPR) when you have expressed your voluntary consent for us to collect or transmit certain personal data, this consent then constitutes the legal basis for the processing of this data. In the following cases, we will process your personal data on the basis of your consent: Market research (e.g. customer satisfaction surveys)

 

4. Execution of the contract

 

GENXMAP offers comprehensive analysis, synthesis and consulting services in the biology sectors. To perform a contract (art. 6 (1b) GDPR) and to fulfill legal obligations (art. 6 (1c) GDPR) or if it is in the public interest (art. 6 (1e) GDPR). As a company, we are subject to several legal obligations. In order to fulfill these obligations, it may be necessary to process personal data. Monitoring and reporting requirements. Due to a legitimate interest (Art. 6 (1f) GDPR), in some cases we may process your data to protect our legitimate interests or that of a third party, to ensure IT security and IT operations.

 

5. Contractual and legal obligations

 

To fulfill our contractual and legal obligations, your personal data is disclosed to various public or internal bodies, as well as to external service providers such as: Internet service providers as well as IT providers (for example, maintenance and accommodation); service providers for the destruction of files and data; Telecommunication; Payment service providers; Advisory and consultancy services; Web hosting service providers; Listeners; Public bodies.

In addition, we may be required to pass your personal data to other entities, such as authorities responsible for fulfilling legal reporting obligations.

Financial authorities; Customs authorities; Social insurance agencies.

If you have further questions regarding individual recipients, please contact us at info@genxmap.com.

 

6. Data protection outside the European Union

 

Countries outside the European Union (and the European Economic Area, the EEA) manage the protection of personal data differently from countries in the European Union. There is currently no proclamation from the European Commission that these third countries generally provide an appropriate level of protection.

 

7. Retention of personal data

 

We keep your personal data for as long as necessary to enable us to fulfill our legal and contractual obligations. If it is no longer necessary to store the data for the purpose of fulfilling contractual or legal obligations, your data will be deleted, unless further processing is necessary for the following reasons: Standard requirements; Fulfill commercial and tax withholding obligations; Preservation of evidence in the context of the regulatory limitation period.

 

8. Right to information

 

To find out about your rights, you can contact the data protection officers or authorities using the contact details provided. We will deal with your requests as soon as possible, in accordance with legal requirements, and inform you of the actions we have taken. You can request information to find out if we have stored personal data about you. If you wish, we will inform you what data we hold about you, what the data is used for, to whom the data has been disclosed, how long the data will be stored and what other rights you have in relation to that data. In the event of an objection, we will no longer process your personal data, unless we can prove that we have compelling legitimate reasons to do so, which outweigh your interests, rights and freedoms; or if the processing serves to assert, exercise or defend legal claims. You can revoke your consent to the processing of your personal data at any time. Please note that the revocation is only effective for the future.

Every data subject has the right to information in accordance with Art. 15 GDPR, to request information on the processing of your personal data; to obtain access to the personal data held about you; to request that incorrect, inaccurate or incomplete personal data be corrected; to request that personal data be erased when they are no longer needed or if their processing is unlawful; to oppose the processing of your personal data for prospecting purposes or for reasons related to your particular situation; to request the limitation of the processing of your personal data in specific cases; to recover your personal data, in a used and machine-readable format, for personal use or to transfer it to another organization; to request that decisions based on automated processing which concern or significantly affect you and which are based on your personal data be taken by natural persons and not only by computers. In this case, you also have the right to express your opinion and to challenge such decisions; in the event of material or moral damage linked to the violation of the GDPR, you have a right of recourse. You can file a complaint with the National Commission for Information Technology and Freedoms (CNIL) or initiate collective action, by appealing to approved national associations for the defense of consumers.

 

9. Commitments

 

We undertake: to respect the principle of protection of personal data and privacy imposed by the regulations, from the design of any project; to list the processing operations they implement in a processing register; to be able to prove that the processing of personal data implemented complies with the applicable rules, in particular by adhering to codes of conduct and obtaining certification; to notify any personal data breach by the data controller and the processor to the authorities and data subjects; to allow people whose data is processed to exercise their rights (to be forgotten, to data portability, limitation, etc.).

 

10. Obligation to provide your personal data

 

To enter a commercial relationship, you must provide us with the personal data necessary for the implementation of the contractual relationship, or that we are required to collect due to legal provisions. If you do not provide us with this data, we will not be able to implement or execute the contractual relationship.

 

 

11. Changes to this information

 

If the purpose or methods of processing your personal data are subject to material changes, we will update this information in a timely manner and communicate the changes promptly.

​

​

Effective date: March 2020 / version: January 2023