Personal data: privacy policy

1. Preamble

The protection of your personal data is a priority for the Grenoble Institute of Neurosciences (GIN), a joint research unit, and its supervisory bodies.
The purpose of this policy is to provide you with clear, transparent and accessible information about the collection, use and protection of your personal data when you visit the website https://neurosciences.univ-grenoble-alpes.fr/fr/linstitut (hereinafter ‘the Website’) or use the services offered on it.
This policy complies with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978 on information technology, files and civil liberties. 

2. Data controller

The processing of personal data collected via the Website is carried out by the Grenoble Institute of Neurosciences (GIN) joint research unit, represented by its Director, in his capacity as data controller (definition of the purposes and means of processing). 

Address:
Edmond J. Safra Building
Chemin Fortuné Ferrini
Health Site
38706 La Tronche Cedex

For any questions relating to the protection of personal data, you can contact the Data Protection Officer (DPO): dpouniv-grenoble-alpes.fr (dpo[at]univ-grenoble-alpes[dot]fr)
 

Postal address: 
Data Protection - DPO
Domaine universitaire, 31, rue des mathématiques 
38400 Saint-Martin-d’Hères – France

3. Data collected and purposes

3.1 Browsing data

When you visit the Website, certain data is automatically collected as part of your browsing activity (IP addresses, browser type, pages viewed, date and time of viewing). This data is used to:

• ensure the functioning and security of the Website;
• produce anonymised visitor statistics;
• improve the quality and usability of the Website.

For more information, please see our cookie policy.

3.2 Data from forms

The Website may contain forms (e.g. contact, internship application, job application) and internship applications or job applications may also be sent by email or post. The data you provide is used exclusively to process and respond to your request.
In this context, the categories of data that may be collected and processed are as follows:

• Identification data: surname, first name;
• Contact details: email address, telephone number, postal address;
• Data relating to the request: subject and content of the message, information provided in connection with an internship application or job application;
• Data relating to professional and academic background (in the context of a job application or internship request): CV, cover letter, qualifications, professional experience, skills;
• Technical data relating to the sending of the form or message: IP address, date and time of sending.

4. Legal basis for processing

The processing operations carried out are based on the following legal grounds:
Personal data collected via the contact form or email application are processed on the basis of:

• the legitimate interest of the data controller, in order to respond to requests sent via the website;
• or, when the request is part of a pre-contractual process (request for a quote, application, request for information about a service), on the basis of the implementation of pre-contractual measures taken at the request of the data subject;
  The fields identified as mandatory in the form are necessary for the processing of the request. If they are not filled in, the request cannot be processed.
  Browsing data collected during use of the website (IP address, connection logs, cookies, trackers, etc.) are processed:
• on the basis of legitimate interest, when strictly necessary for the technical functioning of the website, its security or the prevention of fraud;
• on the basis of consent, in the case of cookies or trackers subject to prior authorisation (non-exempt audience measurement, advertising, social networks, etc.).

For more information on the use of cookies and other trackers, users are invited to consult the Cookie Policy.

5. Recipients of the data
The data collected via the Website is accessible only

The data collected via the Website is accessible only to authorised departments of GIN and the University of Grenoble Alpes, which hosts and maintains the Website.
Institutional partners or subcontractors may receive data when necessary for the purpose of processing and in strict compliance with applicable regulations.

6. Transfers outside the European Union

However, when you visit the website, certain technical data, including your IP address, may currently be transmitted to technical service providers such as jsDelivr when certain resources (fonts, technical libraries) are loaded from their servers.
In order to limit these data flows, an internal (local) hosting solution for these resources is currently being deployed. Ultimately, the fonts and libraries concerned will be hosted directly on our servers, which will eliminate any transfers associated with these third-party services.
For further information, please contact us at the address indicated in this privacy policy.

7. Retention period

Data is retained for the period strictly necessary to achieve the purposes for which it was collected:

• Job application or internship application – successful candidate: the data is added to the personnel file and kept for the duration of the contractual relationship, then archived in accordance with applicable legal obligations.
• Job application or internship application – unsuccessful candidate Creation of a CV database (with the candidate's consent): kept for 2 years from the last contact.
  For more information on the retention periods for cookies and other trackers, users are invited to consult the Cookie Policy.

8. Data security

The Institute of Neurosciences implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, disclosure or alteration, in accordance with its information systems security policy. 

9. Your rights

In accordance with the GDPR, you have the following rights:

• right of access;
• right of rectification;
• right to erasure under the conditions provided for by law;
• right to restriction of processing;
• right to object under the conditions provided for by law;
• right to data portability, where applicable;
• right to withdraw your consent at any time without calling into question the lawfulness of the processing based on consent prior to its withdrawal.

You can exercise your rights by contacting the DPO at the above address. 
You also have the right to lodge a complaint with the Commission.