About us
We process your personal data in compliance with the GDPR, with transparency and human validation.
Last updated: 11 June 2025
Introduction
This policy applies to the gepromed.com website, published by the Gepromed association. It describes the personal data we collect, the purposes of its processing, its recipients, retention periods, your rights and our use of cookies.
It supplements the legal notice, available separately. By using this site, you acknowledge that you have read this policy.
Collection and processing of data
Our processing follows the principles of Article 5 of the GDPR: lawfulness, fairness and transparency, specified purposes, data minimization, time-limited storage, integrity and confidentiality.
In accordance with Article 6, the legal basis for our processing is your free and informed consent (or that of your legal guardian), unless a contract or legal obligation requires otherwise.
Nature of the data
Depending on the service concerned, we collect the following data, for the purposes and periods indicated:
| Processing | Data collected | Retention |
|---|---|---|
| Training registration | Identity, contact details, dietary constraints, any questions. | Duration of the training, then 5 years (legal obligations). |
| Congress registration | Data collected via an external site (congres-esvb.pourdevrai.events). | 3 years after the event. |
| Contact form message | Name, email, subject and message content. | 3 years from the last exchange. |
| Engineering request | Name, email, institution, desired date and description of the request (explant analysis, testing, equipment rental). | 3 years from the last exchange; 10 years if the request leads to a contract. |
| Signed documents uploaded online | Signed training contract and proof of bank transfer, uploaded from the link received after registration. | 10 years (accounting and contractual obligations). Access restricted to the Gepromed team; documents are not public. |
| Membership & donations | Name, contact details and payment information, via the HelloAsso platform. | 3 years after membership; minimum 6 years for donations (tax records). |
Recipients
IT subcontractors (Codein, Montpellier), an office suite for email and organization, and training sponsors. No data is transferred outside the European Union.
Hosting
Personal data sent by email passes through the Brevo SMTP relay and is stored on its servers.
Data controller and DPO
Data controller
Gepromed association, represented by Pr. Nabil Chakfé, President.
+33 (0)3 68 85 40 94
As data controller, Gepromed undertakes to:
- Determine the purposes and means of the data processing carried out.
- Protect the data collected and restrict its sharing with third parties.
- Notify users of any rectification or deletion of their data.
- Report any security breach likely to present a risk to the user.
Your rights
In accordance with Articles 15 to 22 of the GDPR, you have the following rights:
- Right of access, rectification and erasure.
- Right to data portability in a standard format.
- Right to restrict and object to processing.
- Right not to be subject to a solely automated decision.
- Right to determine the fate of your data after your death.
- Right to refer the matter to the CNIL or the competent judge if a request is refused.
How to exercise them
Send your request to the DPO by email at dpo@gepromed.com, or by post to: Association Gepromed / Confidentialité, 4 rue Kirschleger, 67000 Strasbourg, France. Include your name, email and a copy of an identity document. A response will be provided within a maximum of 30 days.
File a complaint with the CNILModifications to the policy
This policy may be amended to remain compliant with legislation. We encourage you to consult it regularly; major changes will be communicated to you by email. Last updated: 11 June 2025.
Contact us
Administrative offices
Bâtiment d'Anesthésiologie, 1 place de l'Hôpital, 67085 Strasbourg
Education center
Bâtiment eXplora, 2 rue Marie Hamm, 67000 Strasbourg