What is personal data?
The term “personal data” includes all information that allows the identification of an individual:
Name,
Postal address,
Telephone number,
E-mail address,
Medical specialty,
Product interest(s).
What personal data is collected?
Deleo may collect your name, postal address, e-mail address, password, telephone numbers, browsing data, order history, after-sales service interventions, preferences and interests, products viewed, and information relating to the monitoring of your order, its delivery, and its payment.
Who is responsible for processing my personal data?
The data controller is the person, public authority, or organization that determines the purposes (i.e., why the data is used) and the means of processing.
DELEO is the data controller. DELEO SAS – Head office: 239 via Nova – Pôle Excellence Jean-Louis, 83600 Fréjus, France.Web : www.deleo.fr.
| Purpose | Data processed | Retention period |
| Identity | Title, last name, first name, city, department, country, telephone number, e-mail address, medical specialty, company name, product interest(s) | – Prospects: 5 years after the last contact. – Clients: 5 years after the last contact and/or the end of the business relationship, except for identification data strictly necessary for consultation and re-issuance. |
| Customer relationship | Data necessary depending on the nature of your request via the chosen channel (e-mail, chat, telephone, social networks, etc.): title, last name, first name, city, department, country, telephone number, e-mail address, medical specialty, company name, product interest(s) | 5 years after the last contact |
| Direct and indirect marketing (newsletters, SMS, satisfaction surveys) | – Identity: title, last name, first name, city, department, country, telephone number, e-mail address, medical specialty, company name, product interest(s). – Browsing data: navigation history such as pages viewed, clicks made, etc. | 5 ans après le dernier contact |
Website
Deleo.fr and deleo-medical.com (French and English version of our website)
On our websites www.deleo.fr (French version) and www.deleo-medical.com (English version), via our online forms. Required fields are marked with an asterisk.
Trade shows / Congresses
During our events, you may be asked to complete one or more contact forms as part of the resulting business relationship.
DELEO has appointed a Data Protection Officer responsible for ensuring the compliance of data collection and processing activities.
Retention
“Prospects/Leads” are individuals who have never made a purchase from DELEO. The starting point of the retention period is determined based on the last contact with DELEO. The last contact is defined as the date of the most recent activity: creation/access to the professional area or the Partnerzone, newsletter subscription, quotation request via a product page form on the websites deleo.fr or deleo-medical.com, or a click in an e-mail.
“Clients” are individuals who have made at least one purchase of a product or service from DELEO. The starting point of the retention period is determined based on the last contact with DELEO and/or the end of the business relationship.
Data from the active prospecting database is retained for 5 years from the end of the business relationship and/or the last contact.
Security
DELEO pays close attention to the security of your personal data and takes all necessary measures to ensure its protection. The company complies with the requirements of the ISO 27001 standard applicable to its field of activity and to the software it uses.
Direct mail
You may receive postal mailings from DELEO.
Newsletter & SMS
You may subscribe to DELEO’s information and offers by signing up for our newsletter.
When making a purchase or requesting information, you are required to provide your e-mail address and/or your mobile phone number. If you are a client, you will receive promotional offers and special deals from DELEO by SMS and/or e-mail. You may object to this use immediately by indicating it at the time your data is collected, or later by exercising your Data Protection rights.
You have the right to:
Right of access:
You have the ability to access the Personal Information concerning you. However, due to DELEO’s obligation of security and confidentiality in the processing of personal data, you are informed that your request will be processed provided that you supply proof of your identity, in particular by producing a scan of your valid identity document or a signed photocopy of your valid identity document (in the case of a written request).
DELEO informs you that it shall be entitled, where appropriate, to oppose requests that are manifestly abusive (by their number, repetitive or systematic nature).
To assist you in your process, in particular if you wish to exercise your right of access through a written request to the postal address mentioned in point 1, you will find by clicking on the following link a sample letter prepared by the French Data Protection Authority (the “CNIL”):
https://www.cnil.fr/fr/modele/courrier/exercer-son-droit-dacces
Right of rectification:
Under this right, the legislation entitles you to request the rectification, updating, blocking, or deletion of data concerning you that may prove to be inaccurate, erroneous, incomplete, or obsolete.
You may also define general and specific instructions relating to the fate of your personal data after your death. Where applicable, the heirs of a deceased person may request that the death of their relative be taken into account and/or that the necessary updates be made.
To assist you in your process, in particular if you wish to exercise, on your own behalf or on behalf of a deceased relative, your right of rectification by means of a written request to the postal address mentioned in point 1, you will find by clicking on the following link a sample letter prepared by the CNIL:
https://www.cnil.fr/fr/modele/courrier/rectifier-des-donnees-inexactes-obsoletes-ou-perimees
Right of objection:
This right may only be exercised in one of the following two situations:
Where the exercise of this right is based on legitimate grounds; or
Where the exercise of this right aims to prevent the collected data from being used for commercial prospecting purposes.
To assist you in your process, in particular if you wish to exercise your right of objection through a written request to the postal address indicated in point 1, you will find by clicking on the following link a sample letter prepared by the CNIL:
https://www.cnil.fr/fr/modele/courrier/supprimer-des-informations-vous-concernant-dun-site-internet
Right to restriction of processing:
This is the right to have processing suspended for the time necessary to carry out a verification (for example: verifying the accuracy of personal data, verifying whether the legitimate grounds put forward by the individual prevail over those of the data controller in the case of an objection request, etc.).
Right to data portability:
You have the right to obtain that your personal data be transmitted in a structured format:
To yourself; or
Directly from one data controller to another, where technically feasible.
Right to lodge a complaint with a supervisory authority:
For more information regarding the exercise of your rights: https://www.cnil.fr/fr/comprendre-vos-droits