Privacy policy

01

The data controller for this website is CABINET MEDICAL MARIANNE CAYATTE, SELARL, SIREN 907 577 068, represented by Dr Marianne Cayatte, 4 Passage Lonjon, 34000 Montpellier, France.

For any questions about your data or to exercise your rights: cayatte.marianne@gmail.com, by mail to the office address or by telephone at 04 67 66 35 50.

02

This policy applies to the site's access, requests made by its form, security features, notices posted and third-party services to which it provides access. It does not replace the specific information given to patients on their medical records.

The form directly collects your first and last name, email address, phone number, selected concern and message. These fields are marked as mandatory; without them, the form cannot be sent. You can contact the practice by phone.

Navigation can result in the processing of technical data: IP address, date and time, page consulted, type of browser and device, connection data and security events. Audience measurement and protection tools can also use identifiers and interaction information.

03

Answer a general question

The practice uses your contact information and request to respond to you and ensure the necessary exchanges. The basis is its legitimate interest in managing the requests addressed to it (Article 6.1.f GDPR).

Prepare a consultation at your request

When your request is for care, the pre-contractual measures requested by you (Article 6.1.b) are used as the basis for the pre-contractual measures. If health data are necessary for the management of care, their treatment falls within the scope of Article 9.2(h), subject to the applicable guarantees of professional secrecy.

Ensuring operation and safety

The prevention of abuse, detection of unwanted messages and incident management are based on the legitimate interest in protecting the site and its users (Article 6.1.f). Third-party tracers requiring consent remain subject to the rules described below.

Measure audience with non-essential tracers

Consent is the basis for such tracers and associated treatments (Article 6.1(a)), unless legally applicable. You can remove it without calling into question previous lawful treatments.

Processing a claim relating to your rights

The processing is based on the practice's data protection obligations (Article 6.1.c). The preservation of elements necessary for the defence of a right may be in its legitimate interest.

The "I've read the privacy policy" box attests to your information. It does not constitute consent to commercial prospecting or all cookies.

04

The messages are sent by e-mail to the practice's secretariat, using the Contact Form 7 form and the Gmail message used by the secretariat. The form is used to establish an initial contact; it is not a medical file repository.

Choosing a concern or free message may reveal information about your health. Limit your message to what is necessary to be contacted again. Please do not send a report, medical photograph, prescription, social security number or detailed health information. The practice will be able to provide you with a suitable exchange method.

The site does not issue automated diagnostics and the form is not intended for emergency management.

05

The applications are for Dr Marianne Cayatte and the authorized persons of the Secretariat, within the limits of their duties and applicable confidentiality obligations.

• OVHcloud / OVH SAS intervenes for the declared hosting of the site.
• Google intervenes for Gmail, Google Analytics and the reCAPTCHA device. According to the service, Google acts as a provider of the practice and/or for its own treatment described in its privacy rules.
• CookieYes is the cookie preferences manager installed on the site.
• Authorized maintenance personnel may access the technical data required for their mission. Authorities may receive data when there is a legal obligation.

The mere sending of a form does not authorize any transmission to partners for the purpose of stalling.

06

The following criteria determine retention; they do not constitute an authorization to keep data without limitation.

• Contact requests: time required to respond, carry out the requested procedures and close the exchanges. Additional retention must be justified by an applicable obligation or a real need for proof, with limited access and taking into account the relevant limitation period.
• Information integrated into care: the elements that are really useful for medical follow-up fall within the rules of the patient file, distinct from simple contact messages.
• Security logs: The duration of an incident is proportionate to the detection and analysis of incidents; elements related to an incident may be retained for its treatment or necessary legal follow-up.
• Applications for exercise of rights: time required for processing and proof of response, within the practice's accountability needs.
• Cookies, statistics and backups: durations depending on the settings of the tools and their purpose. The expiry of a cookie is not equivalent to automatic deletion of data already received by its provider.

You can ask the practice for details on the duration of your data. At the end of their usefulness, they must be deleted or made anonymous unless legally justified.

07

A cookie is a file saved on your device. Similar technologies can also read or transmit navigational information.

Your preferences

The "Cookie Settings" button, available on the site, opens the preferences manager. He proposes "Reject All", "Accept All" and "Save My Preferences". Tracers strictly necessary for the requested service do not require consent; others must be subject to a prior choice. Refusal of non-essential tracers should not prevent pages from being viewed. The simple continuation of the navigation is not valid for acceptance.

Tools on the site

• CookieYes: Managing and Memorizing Consent Choices.
• Google Analytics: measurement of usage and use of the pages. Browser identifiers, technical information, visited pages and events can be processed. This is not a guarantee of anonymity.
• Google reCAPTCHA : technical analysis and interaction in order to identify automated uses and limit unwanted messages. This service can transmit information to Google; its presence does not render all its tracers automatically exempt from consent.
• WordPress: authentication and operating cookies can be used for people with administration access.

The name and duration of a tracer depends on the supplier and the active configuration. Google's general information is available in its notice on cookies. The browser settings also allow you to view or delete the saved cookies; their deletion may erase your preferences.

08

The appointment buttons open the Doctolib external service. The information entered on Doctolib is processed as part of this service and the management of appointments of the practice. Its own data protection information has been accessible since Doctolib.

Links to Google, social networks or other sites lead to services that apply their own rules. An external link does not mean that all third party service treatments are performed by the practice.

09

The notice tape presents an imported selection of notices published on Google: author's name or pseudonym, date, note and comment. This information comes from a public source and is not collected from visitors on this page.

Their display is based on the practice's legitimate interest in presenting public returns concerning its activity, subject to the authors' rights. A public publication does not remove your rights: you can request rectification, deletion or object to this reuse by contacting the practice. A removal on the site does not automatically result in a deletion on Google.

The notices shall be kept for their presentation as long as they remain relevant, with a review in the event of a change to the source or request by the author. No opinion constitutes a guarantee of medical result.

10

The use of Google services, including Gmail, Analytics and ReCAPTCHA, may involve processing or accessing data outside the European Economic Area, particularly in the United States.

Google describes the mechanisms it uses for such transfers, including the EU-US data protection framework for certified entities where this framework is applicable, as well as standard contractual terms depending on the situation. Consult Google's transfer information and its confidentiality rules. You can contact the practice for details on the guarantees applicable to its processing; the information provided must respect the rights of third parties.

11

Under the conditions laid down in the texts, you can request access to your data, their rectification, erasure or limitation of their processing. You may object, for reasons relating to your particular situation, to treatments based on legitimate interest. The right to portability concerns data provided by you and processed in an automated way on the basis of consent or contract. You can withdraw your consent when it forms the basis for processing and define guidelines for the fate of your data after your death.

These rights are not absolute: certain data may have to be kept under a legal obligation or in the defence of a right.

Send your request to cayatte.marianne@gmail.com or by mail to the practice, 4 Passage Lonjon, 34000 Montpellier, specifying the data or processing concerned. A proportionate proof of identity can only be requested in the event of a reasonable doubt about your identity.

For GDPR applications, a response must be provided within one month. This period may be extended by two months depending on the complexity and number of requests; you must be informed with the reasons within the first month. Requests for access to the medical file follow their specific rules.

If you feel that your rights are not respected, you can make a complaint to the CNIL, in particular online or by mail to : CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

12

The site uses an HTTPS connection and antispam protection. These devices do not render an ordinary e-mail equivalent to a secure space for sharing medical documents. Confidentiality also depends on the access to the mail and the precautions taken by recipients; limit the data sent to what is strictly necessary.

The policy may evolve with the services used, the practices of the practice or the applicable texts. Its date of update is set out below. To understand your rights, you can also consult information of the CNIL.