Protection of Personal Data
Last updated on [November 03, 2026]
The IHU Strasbourg is engaged in a process of continuous and dynamic improvement of its compliance with Regulation No. 2016/679, known as the General Data Protection Regulation (“GDPR”) and Law No. 78-17 of January 6, 1978 relating to information technology, to the files and freedoms in their modified version, about the data processing carried out on its website.
In keeping with this approach, the IHU Strasbourg wishes to inform you more specifically about the use of your personal data and your rights through this Policy.
Definitions
The terms set out below shall have the following meaning:
- “Personal data” – any information relating to an identified or directly or indirectly identifiable natural person;
- “Processing of personal data” – any operation relating to personal data and in particular the collection, recording, organisation, storage, adaptation, modification, extraction, consultation, use, communication by transmission, dissemination, making available, reconciliation, interconnection, locking, erasure or destruction;
- “Data Controller” – the body that determines the purposes pursued by the data processing and the means to carry it out;
- “Data Subject” – the natural person to whom the data that is the subject of processing relates
- “Recipient” – any person entitled to receive communication of data;
- “Processor” – the natural or legal person, public authority, agency or any other body which processes personal data on behalf of and at the direction of the controller;
- “Authorised third parties” – the authorities who, under legislative and regulatory provisions, have the power to require a data controller to transmit documents or information containing personal data.
Who is the data controller?
The data controller is:
Institute of Image-Guided of Strasbourg
1 place de l’Hôpital
67091 Strasbourg Cedex
Phone: +33 (0)3 90 41 36 00 / Fax: +33 (0)3 90 41 37 01
info@ihu-strasbourg.eu
Foundation for Scientific Cooperation – SIRET : 538405 952 000 10 – NAF : 7211Z
The legal representative is Mr Christian Debry, director of the establishment.
To exercise your rights or for more information, please contact us:
dpo@ihu-strasbourg.eu
For what purposes do we process your data?
As part of the operation of its website, the IHU Strasbourg may collect data about you. We collect this data directly from you (when you apply for a job opening, submit an unsolicited application, or make a request through the contact form) or indirectly (through the use of cookies or trackers).
Before data collection, you will be informed whether the requested personal data is required or optional. Data marked with an asterisk in a data collection form is required. Please be advised that if you do not provide the required data, you will be unable to access or use the Services. Other data is optional, and failure to provide it will not prevent the provision of services, although it may limit their effectiveness.
This data is processed in accordance with the purposes specified at the time of collection, namely:
1. Management of the website
a. Management of the services and functionalities of the site
When you visit our site, the IHU Strasbourg carries out data processing to manage the services and functionalities of the site, based on its legitimate interest in ensuring its proper functioning and to ensure routine administrative operations.
The data concerned are technical information such as the type of internet browser, the operating system used, the domain name of your internet service provider, and your IP address. This information is necessary to correctly display the requested web pages.
The recipients of this data will be the internal services of the IHU Strasbourg, and in particular the administration, recruitment, education services, the webmaster, the IT support as well as the medical teams requested when necessary.
b. Management of cookies and other tracers
When you visit our site, the IHU Strasbourg carries out data processing based on your consent to produce audience measurement statistics.
Cookies are small text files placed on your terminal and saved by your browser. For more information, please refer to our “Cookie Policy”.
The recipients of this data will be the internal services of the IHU Strasbourg, and in particular the webmaster.
c. Management of contact requests
Insofar as you provide us with information through our contact methods, IHU Strasbourg carries out data processing to receive and process your requests based on its legitimate interest in ensuring the processing of the requests made.
The data concerned are your identity data (last name, first name, contact details), information relating to your request and any other data related to our exchanges.
The recipients of this data will be the internal services of the IHU Strasbourg, and in particular the administration, recruitment, education services, the webmaster, the IT support as well as the medical teams requested when necessary.
Your data will be kept for the time necessary to process your request, which will be processed as soon as possible; the retention period applied is a maximum of 12 months.
d. Recruitment management
To the extent that you provide us with information as part of your application (CV, cover letter, possible exchanges), the IHU Strasbourg processes data in order to ensure recruitment management, based on the execution of pre-contractual measures taken at your request.
The data concerned are in particular your identity data (name, first name, contact details), your professional information (training, experience, skills) as well as any element communicated as part of the recruitment process.
The recipients of this data are the internal services of IHU Strasbourg and in particular the management responsible for recruitment, as well as any person involved in the evaluation of your application.
Your data will be kept for the duration strictly necessary to study your application. In the event of a negative outcome, your data may be retained for a maximum period of 2 years after the last contact, unless you object. In case of hiring, your data will be integrated into your employee’s administrative file and retained according to the applicable legal periods.
2. Newsletter Subscription and Statistical Tracking
When you subscribe to the IHU Strasbourg newsletter, we collect your email address, as well as your profile preferences (Patient/General Public, Researcher/Healthcare Professional, Student, Industry Representative) and language preferences, to send you personalised and relevant communications.
a. Outsourcing and Hosting
We use a third-party technical service provider, Mailjet (Sinch), to send our newsletters. Your data is hosted exclusively on secure servers located within the European Union, in strict compliance with the GDPR.
b. Tracking Technologies (Pixels)
To continuously improve the user experience and evaluate the relevance of our scientific and medical content, emails sent via Mailjet include tracking technology (web beacons). This process allows us to collect aggregate statistics regarding the open rate of our emails and clicks on embedded links. This data is used for internal analysis and is never cross-referenced with other databases.
c. Your Rights and Unsubscribing
You can prevent this tracking altogether by disabling the automatic display of images in your email client’s settings. In addition, you retain the right to withdraw your consent and unsubscribe from our mailing list at any time by clicking the unsubscribe link that is always included at the bottom of each of our communications.
3. Management of requests to exercise rights over your personal data
Based on our legal and regulatory obligations, the IHU Strasbourg processes data for the purpose of managing requests to exercise rights over your personal data.
The data concerned are your identity data (last name, first name, contact details) and data relating to your requests to exercise rights (subject of the request, follow-up).
The recipients of this data will be the person responsible for processing requests to exercise rights and the staff members concerned by your request.
Your data will be kept for a period not exceeding five (5) years from the closing of the request.
Who can have access to your data?
The recipients of your data may be, depending on the processing concerned:
- Internal recipients: The authorized internal services of the IHU Strasbourg (notably the human resources department, administration, recruitment, education, webmaster, IT support as well as the medical teams requested when necessary.
- External recipients: The host of our site, the service providers involved in our recruitment process, the bodies responsible for financial control of the structure.
The IHU Strasbourg uses data processors as part of the management of its website. In this case, the IHU Strasbourg ensures that they provide sufficient guarantees regarding the implementation of appropriate technical and organizational measures so that the processing meets the requirements of data protection rules and ensures protection of the rights of individuals.
In accordance with the regulations in force, your personal data may be transmitted to authorized third parties who, under legislative and regulatory provisions, have the power to require a controller to transmit documents or information containing personal data. When the IHU Strasbourg is faced with such a request, the necessary checks are carried out to ensure that the request is well-founded.
How do we secure your data?
The IHU Strasbourg undertakes to make the necessary efforts to implement organizational and technical measures adapted to the sensitivity of the data and the risks that weigh on the users in accordance with article 32 of the GDPR.
However, it is the responsibility of each user to ensure the security of personal data transmissions over the internet. The IHU of Strasbourg cannot be held responsible for the transmission of personal data via the Internet.
Data transfer outside the European Union
The IHU Strasbourg does not transfer data outside the European Union. In any case, the IHU Strasbourg undertakes not to transfer personal data to a country outside the European Union without first informing the users.
How to exercise your rights and who to contact?
In accordance with the GDPR, you have the following rights regarding your data: right of access, right to rectification, right to object, right to erasure, right to restriction of processing, right to portability and right to withdraw your consent.
To exercise your rights or for more information, please contact us:
dpo@ihu-strasbourg.eu
Please specify the subject of your request and the right(s) you intend to avail yourself of. As part of a request for rights and in case of reasonable doubt about your identity, you may be asked to provide a valid proof of identity.
If, after contacting us, you consider that your rights are not being respected, you can submit a complaint to the CNIL.
Evolution of the Policy
This Policy comes into effect on November 28, 2025. It may be required to evolve, notably due to legislative and regulatory developments.