Events Manager

Mérieux Foundation

Privacy Policy

Preamble

The purpose of this privacy policy is to inform users of the website about:

  • How their personal data is collected. Personal data is taken to mean any personal information about an identified or identifiable natural person. A natural person is considered to be “identifiable” if they can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, online identifier, or one or more specific details of their physical, physiological, genetic, psychological, economic, cultural, or social identity.
  • Their rights regarding this data.
  • The person responsible for processing the personal data collected and processed, known as the Data Controller.
  • The recipients of this personal data.
  • The website’s cookie policy.

Data controller and web hosting

Data Controller

The personal data is collected by the Mérieux Foundation, a foundation recognized as providing a public service under the French decree of December 7, 1976, having its principal office at 17 rue Bourgelat, 69002 Lyon, France.

The Data Controller responsible for personal data is Dorothée Lintner.

The Data Controller may be contacted as follows:

By post: 17 rue Bourgelat, 69002 Lyon, France.

By email: dataprivacy@fondation-merieux.org

Web hosting

The www.eventsmanager.fondation-merieux.org website is hosted by: EOLAS

Principles relating to the collection and processing of personal data

As the Data Controller, the Mérieux Foundation undertakes to collect, manage, protect, and store your data in compliance with national requirements and the requirements of EU Regulation 2016/679 known as the General Data Protection Regulation (GDPR).

In accordance with Article 5 of European Regulation 2016/679, personal data are:

  • Processed lawfully, fairly, and in a transparent manner in relation to the data subject.
  • Collected for specified, explicit, and legitimate purposes (see Article 3.1 of this document), and not further processed in a manner that is incompatible with such purposes.
  • Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
  • Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that is inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.
  • Kept in a form that permits the identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
  • Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

Processing is lawful only if and to the extent that at least one of the following applies:

  • The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Processing is necessary for compliance with a legal obligation to which the Data Controller is subject.
  • Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require protection of personal data, in particular where the data subject is a child.

Personal data collected and processed when using the website

When you use our website, the following data is automatically collected with your consent:

  • IP address
  • Logs (deleted daily)

The personal data we collect and store to help us manage your registration and ensure the event for which you have registered runs smoothly may include:

  • Identification data: your surname, first name, email address, photograph and emergency contact information
  • Professional data your position and employer, academic and/or professional background
  • Other data: your preferences or intolerances/allergies to allow us to adapt our service

These details are kept by the Data Controller under reasonable security conditions for a period of three years.

The Data Controller may retain certain personal data beyond this limit in order to meet its legal or regulatory obligations.

In the context of the processing of your data detailed above, you may receive communications from the Mérieux Foundation, from which you may unsubscribe by following the link at the bottom of the email or by sending an email to dataprivacy@fondation-merieux.org.

Depending on the way the event is organized, your personal data may be communicated to third parties to ensure the smooth running of the event (the establishment hosting the event, such as Les Pensières, partner university, hotel, etc.).

These third parties may be based outside the European Union. If this is the case, transfers will take place in accordance with the GDPR. For more information on this subject, please contact us at dataprivacy@fondation-merieux.org.

After the event, you may receive messages from the Mérieux Foundation, which you can unsubscribe from by following the link at the bottom of the email or by sending an email to dataprivacy@fondation-merieux.org.

Photographs may be taken at these events. You will be asked to provide specific authorization for this as part of your registration.

If you have any other questions not related to the processing of your personal data, please send an email to contact@fondation-merieux.org.

Security of personal data

The Mérieux Foundation takes the necessary precautions (including administrative, technical, and organizational measures) to protect your Personal Data against loss, theft, and fraudulent use, as well as against any unauthorized access, disclosure, alteration, or destruction of Personal Data.

Although security measures are applied to the Personal Data we collect, we must draw your attention to the fact that the transmission of data over the Internet (including by email) is never completely secure.

Rights of natural persons

Any user whose personal data is processed may exercise the following rights in application of European Regulation 2016/679 and French Data Protection Act (Law 78-17 of January 6, 1978):

  • Right of access, rectification, and erasure of data (set out respectively in Articles 15, 16, and 17 of the GDPR).
  • Right to data portability (Article 20 of the GDPR).
  • Right to restriction of processing (Article 18 of the GDPR) and right to object to processing (Article 21 of the GDPR).
  • Right not to be subject to a decision based solely on automated processing.
  • Right to determine what happens to their data after their death.
  • Right to lodge a complaint with a supervisory authority (Article 77 of the GDPR).

To exercise these rights, please write to:

Mérieux Foundation

For the attention of the Legal Department
17 rue Bourgelat
69002 Lyon, France

Or send an email to: dataprivacy@fondation-merieux.org

In order for the Data Controller to comply with the user’s request, the user may be required to provide certain information, such as their first and last names, email address, and account, personal space, or subscriber number.

Terms and conditions of changes to the Privacy Policy

The website’s publisher (www.fondation-merieux.org) reserves the right to modify this policy at any time in order to ensure that users of the website comply with the legislation in force.

Any changes will not affect purchases previously made on the website, which will remain subject to the policy in force at the time of purchase as accepted by the user when confirming the purchase.

Users are invited to familiarize themselves with this policy each time they use our services, without having to be formally notified.

This policy, published on June 8, 2017, was updated on April 28, 2025.

Cookies

What is a cookie?

A cookie is a small text file that is placed on your device (such as your computer) by a website.

Why does the Mérieux Foundation use cookies?

The Mérieux Foundation uses cookies for statistical purposes and to offer video content.

What type of cookies is used by the Mérieux Foundation?

The Mérieux Foundation uses third parties to analyze the use of the website.

An overview with more information about the analytical cookies placed in the browser, as well as the mandatory cookies, is provided below:

Name of the cookie Duration before expiry Description
_ga 2 years Used to distinguish users
__utma 2 years after installation or update Used to distinguish users and sessions. The cookie is created when javascript libraries are run and the __utma cookie does not yet exist. The cookie is updated every time data are sent to Google Analytics.
__utmb 30 min. after installation or update Used to determine new visits. The cookie is created when javascript libraries are run and the __utmb cookie does not yet exist. The cookie is updated every time data are sent to Google Analytics.
__utmc End of browser session Not used in ga.js. This cookie used to be used in conjunction with the __utmb cookie to determine whether the user was in a new session/visit.
__utmz 6 months after installation or update Logs the source of traffic or of a campaign to find out how the user arrived on your site. The cookie is created when javascript libraries are run and is updated every time data are sent to Google Analytics.
__utmv 2 years after installation or update Used to store variable and custom data about a visitor. This cookie is created when a developer uses the _setCustomVar method with a custom variable at the visitor level. This cookie was also used for the _setVar method, which is obsolete. The cookie is updated every time data are sent to Google Analytics.

How can I block and/or delete cookies?

If you do not want the Website to place cookies (except functional cookies) on your computer, you can block and/or delete cookies via your browser settings. Below we show how to block and/or delete cookies for the most frequently used browsers:

If you have blocked all or certain cookies, the website may no longer function properly or you may not be able to access certain parts of the website.

Hypertext links

The Mérieux Foundation’ website may offer links to other websites, mainly official websites. These web pages are not part of the Mérieux Foundation’s portals and therefore do not engage the Mérieux Foundation’s responsibility for their content.

We recommended to consult the privacy policy of these sites as their conditions may differ from those of the Mérieux Foundation. The Mérieux Foundation can not be held responsible for any processing of your Personal Data by these other websites.

Contact

If you require any information about the Mérieux Foundation’s personal data protection policy, please send a request by email to the following address: dataprivacy@fondation-merieux.org.

Changes

This privacy policy may be updated or changed, particularly to reflect changes in legislation and/or regulations. We therefore invite you to visit this page regularly to stay informed of how we protect your personal data.