Pelican Health knows that you care how your personal data is processed and recognizes the importance of protecting your privacy.
This Privacy Policy (the « Policy ») explains how Pelican Health collects and processes your personal data. It contains information about the type of data we collect, how we process it, and for what purposes, in order to make its use as relevant to you as possible.
Contact us for any type of request – query – remark, or if you wish to exercise any of the rights relating to the processing of your data.
Definitions
For the purposes of the Policy, the following terms are defined as follows:
- « Service(s) »: all services accessible online or via customer service or Mobile Application(s), etc., whether or not they are subject to a charge.
- « Mobile Application(s) »: refers to any software, application, widget or plug-in downloaded onto a mobile device (smartphone, tablet, laptop as well as any device with an operating system enabling said applications to be downloaded, installed, operated and updated). If the Mobile Application includes notification or location features, please refer to sections 3.6 and 3.7 below.
- « We », « Us » and « Our »: refers to any company owned or operated, directly or indirectly, by any company in which Pelican Health has an interest and may collect or process your personal data and cookies, as well as their respective service providers located in France or abroad.
- « You » and « Your »: refers to any user of the Services, and who accesses any of the paid or free Services.
This policy was updated on 01 august 2024.
Basic principles – our commitment to privacy
Pelican Health is committed to processing personal data in compliance with applicable regulations on the protection of personal data and privacy, in particular in compliance with Regulation (EU) 2016/679 adopted on 27 April 2016 and on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the « Regulation »). We undertake to comply with the following principles:
- You are under no obligation to provide us with the personal data we request from you. However, some of this data may be mandatory in order to access certain Services. Therefore, if you decide not to provide us with this data, you may not be able to access some of these Services.
- We collect and process your data only for the purposes described in this Policy or for specific purposes of which we have informed you and/or to which you have consented.
How do we protect your personal data?
We are aware of the importance of the security of your personal data. We do our best to protect your personal data from misuse, interference, damage, unauthorised access, alteration or disclosure. We have implemented numerous security measures to help you protect your personal data. In particular, we use access controls, firewalls and secure servers, and we encrypt personal data.
Sharing your personal data
When we share your personal data with our subsidiaries or other organisations, we ensure that we do so only with organisations that have extensive security measures in place for your data and its storage and that comply with privacy protection laws on terms equivalent to those we comply with.
Your personal data will not be shared, sold, rented or disclosed for purposes other than those described in the Policy. We may, however, transfer your data for purposes other than those set out in the Policy in cases where disclosure is required by law or government authorities.
International transfers of your data
Personal Data may be processed outside the European Economic Area (EEA). If this is the case, Pelican Health will make every effort to ensure that this international transfer of data has an adequate level of security and safeguards.
The safeguards we use to protect international data transfers include:
- Model standard contractual clauses validated by the European Commission. These standard clauses provide a sufficient guarantee because they enable the relevant security levels to be respected as required by the regulations relating to the protection of personal data, and in particular in relation to the Regulation (the aforementioned regulation and the Regulation are hereinafter referred to together as the « Regulation »).
- Through certification mechanisms that attest that third parties located outside the EEA process personal data in a manner that complies with the Regulations. These certifications must be approved either by the European Commission, or by the competent supervisory authority pursuant to the Regulations, or by the national accreditation body designated in accordance with the Regulations.
Automated individual decision-making and profiling
We may use your personal data for automated decisions, including profiling for certain Services. We will inform you of our intention to apply these methods and give you the opportunity to object in advance. You may also contact us to obtain more information about this type of processing.
- Cookies and other technologies
Through our use of cookies and other technologies, such as web beacons, device fingerprints and web beacons, we may also collect personal data about you when you visit our websites or third party websites, or our mobile or third party applications. This may include:
- Information about the browser on your device and the operating system you are using.
- The IP address of the device you are using.
- The web pages you visit.
- The links you click while interacting with our services.
- We adopt the principle of minimising the collection of personal data: i.e. collecting only the personal data that is necessary for the processing and uses envisaged, without collecting any data that is superfluous.
- If any personal data we hold is no longer required for the purposes of the personal data processing we carry out, and there is no legal obligation for us to retain it, we will do everything in our power to delete, destroy or anonymise it.
What personal data do we collect?
The personal data we collect varies depending on the purpose of the collection and the Service we are providing to you. Generally, we may collect the following categories of personal data directly:
- Browsing history, such as the pages visited, the date of the visit, the location at the time of the visit, or the IP address.
For what purposes do we collect your personal data?
We collect your personal data in order to provide you with the best online experience and quality service and browsing. In particular, we may collect, hold, use and disclose your personal data for the following purposes:
- To develop and improve our services, communication methods and the functionality of our websites, applications and Services.
- To better understand and assess consumers’ interests and desires and the changes they require, with a view to improving our websites/applications, Services and/or developing new services.
We may also need your personal data to comply with legal obligations or as part of our contractual relationship with you.
When we collect and use your personal data for the purposes mentioned below or for any other request, we will inform you before or at the time of collection.
Where necessary, we will seek your consent to process your personal data. If you have given your consent to the processing of your personal data, you have the right to withdraw that consent at any time.
Your rights
Where we process your personal data, you are entitled to a number of rights which you may exercise at any time. Below is an overview of these rights and what they mean for you.
The right to access your personal data and the right of rectification
It is important to us that the personal data we hold about you is accurate, up to date, complete, relevant and not misleading. To ensure that we meet this commitment, you have the right to access, correct or update your personal data at any time.
The right to portability of your data
You have the right to receive your personal data in a structured, commonly used and machine-readable format if we have processed your personal data on the following basis:
- You have given us your consent to process your personal data for a purpose or purposes that we have previously communicated to you.
- We have processed your personal data in order to facilitate a business transaction, such as providing you with the services you order.
- We have processed your personal data using automated means (such as profiling).
The right to request the deletion of your personal data
You have the right to request the deletion of your personal data when:
- Your personal data is no longer necessary for the purposes for which we collected it.
- You withdraw the consent you previously gave us to process your personal data, provided there is no other legal basis for us to continue processing your personal data.
- You object to us processing your personal data for direct marketing purposes.
- You object to us processing your personal data for Pelican Health’s legitimate interests (such as improving the overall user experience on our websites).
- Personal data is not processed legally.
- Your personal data must be deleted in order to comply with applicable legislation.
If you wish us to erase the personal data we hold about you, please let us know and we will take reasonable steps to comply with your request in accordance with legal requirements. If the personal data we collect is no longer required for any purpose and there is no legal obligation for us to retain it, we will make every effort to delete, destroy or anonymise that data.
The right to limit the processing of your data
You have the right to request the restriction of the processing of your personal data if:
- You believe that the personal data we hold about you is inaccurate.
- In the case of personal data that is not processed lawfully, you would prefer us to restrict its processing rather than delete it.
- We no longer need your personal data for the purposes for which we collected it, but you need the data in order to establish, exercise or defend legal claims.
- You have objected to the processing of your personal data and are waiting to hear whether your interests in relation to that objection override the legitimate grounds pursued by Pelican Health.
If you wish to restrict our processing of your personal data, please let us know and we will take reasonable steps to comply with your request in accordance with legal requirements.
The right to object to the processing of your personal data
You have the right to object to the processing of your personal data at any time.
The right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint directly with a supervisory authority, such as the CNIL, about the way in which we process your personal data.
