This Privacy Notice applies to the processing of personal data in connection with the use of the website https://rosetta-omics.com/ (hereinafter the "Website"), including communications with Rosetta Omics and applications submitted through the contact details provided on the Website.
Rosetta Omics (hereinafter "Rosetta Omics", "we" or "us"), acting as Data Controller, is committed to complying with Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter the "GDPR"), and applicable EU and French data protection laws and regulations (collectively referred to as "Data Protection Laws").
With this Privacy Notice (hereinafter the "Notice"), Rosetta Omics aims to ensure that you understand what personal data we collect about you, how we use your personal data, with whom we may share it, and how we protect it.
General warning and use of social media
This Notice applies to the processing of personal data in connection with the Website. It does not apply to third-party websites to which Rosetta Omics may refer and whose privacy notices may differ.
Rosetta Omics also maintains professional pages on social media platforms, including Facebook, Instagram, LinkedIn, YouTube and X (formerly Twitter), through which we share information about our activities and interact with users.
For certain processing activities relating to our professional pages, particularly the collection and processing of personal data to generate aggregated statistical information ("Page Insights"), Rosetta Omics acts as Joint Controller with Meta Platforms Ireland Limited (for Facebook and Instagram) and LinkedIn Ireland Unlimited Company (for LinkedIn), within the meaning of Article 26 GDPR.
These platforms have established Joint Controller arrangements defining the respective responsibilities of the parties for the relevant processing activities. For other processing activities carried out independently by these platforms, please refer to their respective privacy notices.
Where you interact directly with Rosetta Omics through these platforms, for example by sending messages or commenting on our publications, we may process the personal data you provide for the purpose of managing our communications and responding to your enquiries.
The Website may also contain links to third-party services, including YouTube. Where third-party content is embedded into the Website, additional personal data processing may occur through cookies or similar technologies. For further information, please refer to our Cookie Notice.
1. Why, how and for how long do we collect your personal data?
Depending on the purpose for which we process your personal data, we may collect and process different categories of information. We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, taking into account applicable legal requirements.
The processing activities carried out in connection with the Website are described below.
| Purposes | Types of personal data | Legal basis | Retention period |
|---|---|---|---|
| To respond to your requests and enquiries submitted by email or through the contact details provided on the Website. | Name, email address, professional contact details, organization. Other personal data may be processed depending on your request and the information you provide us. | Our legitimate interest in answering the requests or queries raised by you through the existing contact channels. This processing is also beneficial to you, as it enables us to assist you adequately and answer your queries. | For the time necessary to meet your request. |
| To manage job applications and recruitment processes, including spontaneous applications submitted through the Website. | Name, contact details, CV, professional qualifications, education, employment history, skills, professional experience, and any other information voluntarily provided in your application. | Our legitimate interest in administering and appraising job applications. This processing is also beneficial to you, as it enables you to apply spontaneously or answer an offer. | For the time necessary to manage your application. |
| To ensure the operation, maintenance and security of the Website, including preventing unauthorised access, detecting technical issues and protecting against malicious activities. | IP address, browser type, operating system, technical identifiers, connection data, access logs and information relating to the use of the Website. | Our legitimate interest (Article 6(1)(f) GDPR) in maintaining the security and proper functioning of the Website. | Limited to what is necessary for these purposes. |
| For statistical purposes. | Aggregate statistical data (e.g., company pages on X, Facebook, Instagram, LinkedIn and YouTube). | Our legitimate interest in understanding how our pages are consulted (e.g., how many times, from which country). | Statistical information is stored by X, Facebook, Instagram, LinkedIn and YouTube and is subject to their retention policies. We may export statistical reports, only in anonymous form. |
| Use of cookies for the functioning and managing of our Website. | Cookies may in certain circumstances store personal data, which may include IP address, browser type, location, operating system, etc. | Please see our Cookie Notice for more information. | Please see our Cookie Notice. |
Where you contact us or submit a job application, we may process additional personal data depending on the information you voluntarily provide.
We encourage you not to include sensitive personal data, such as health information, in your communications or job applications unless strictly necessary. Where such data is processed, an appropriate legal basis and, where relevant, an applicable condition under Article 9 GDPR must be identified.
Cookies and third-party content
The Website uses cookies and similar technologies to support its operation and may integrate services provided by third parties, including YouTube and Google Maps. Some of these technologies may be necessary for the Website to function properly, while others require your prior consent. Where consent is required, you will be able to accept or refuse the relevant cookies and manage your preferences at any time.
For further information about the cookies used, their purposes, providers and retention periods, please consult our Cookie Notice.
2. Data sharing
We do not sell or trade your personal data to outside parties. However, we may share your personal data with authorised recipients where necessary for the purposes described in this Notice. These recipients may include:
- Our authorised personnel, including individuals responsible for responding to enquiries, managing professional relationships, administering the Website or handling recruitment processes.
- Technical and IT service providers, including providers responsible for hosting, maintaining, securing or operating the Website and related communication services.
- Third-party service providers, including providers of embedded content and website functionalities, such as YouTube, where applicable.
- Public authorities or other recipients, where disclosure is required by applicable law or necessary to comply with a legal obligation.
Where service providers process personal data on our behalf, we require them to provide appropriate guarantees for the protection of personal data, including through contractual arrangements where required under Article 28 GDPR.
International data transfers
Sharing your personal data as explained above may involve a transfer of personal data to a country outside the European Economic Area (EEA). Rosetta Omics is therefore committed to complying with the transfer rules under applicable Data Protection Laws and ensures to:
- Transfer your data to countries that have been recognized as adequate by the European Commission, or
- Where a country has not received an adequacy decision from the European Commission, implement appropriate safeguards, such as the EU Standard Contractual Clauses ("SCCs").
You can contact our Data Protection Officer ("DPO") (see contact details below) if you want more details about the mechanism supporting data transfers.
3. How do we protect your information?
Rosetta Omics is committed to protecting your personal data and ensuring its confidentiality, integrity and availability.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful processing, accidental loss, destruction or damage, taking into account the nature of the personal data processed and the risks associated with the processing activities. These measures include encrypted connections (HTTPS) for all traffic to the Website, protection against automated and malicious traffic, and access controls on the tools we use to handle your communications and applications.
Access to personal data is restricted to authorised personnel and service providers who require such access for the performance of their duties and who are subject to appropriate confidentiality obligations.
4. Your rights
Under the GDPR, you have the following rights, subject to the conditions and limitations provided by applicable Data Protection Laws:
- Right of access: to obtain confirmation as to whether your personal data is being processed and, where applicable, to access it and obtain information about its processing.
- Right to rectification: to request the correction of inaccurate personal data and the completion of incomplete personal data.
- Right to erasure: to request the deletion of your personal data in certain circumstances.
- Right to restriction of processing: to request that the processing of your personal data be restricted in certain circumstances.
- Right to data portability: where applicable, to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller.
- Right to object: where processing is based on our legitimate interests, to object to such processing on grounds relating to your particular situation.
- Right to withdraw consent: where processing is based on your consent, to withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.
You also have the right not to be subject to a decision based solely on automated processing, including profiling, where the conditions of Article 22 GDPR apply.
Please note that these rights are not absolute and may be subject to certain conditions or limitations under applicable Data Protection Laws. If you wish to exercise any of your rights, please contact us using the contact details provided in Section 6 of this Notice. We will respond to your request within the time limits established by the GDPR.
Right to lodge a complaint
If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a competent supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement. In France, the competent supervisory authority is the Commission Nationale de l'Informatique et des Libertés ("CNIL"). You can find its contact details in Section 6.
5. Changes to this Privacy Notice
This Notice is effective as of the date indicated at the top of this page. We may update this Notice from time to time to reflect changes in our processing activities, the operation of the Website or applicable legal requirements. Any updated version will be made available on the Website, with an indication of the date of its latest revision. Please refer to this Notice on a regular basis.
6. Contacts
Data Controller
Rosetta Omics
Station F, 5 Parvis Alan Turing, 75013 Paris, France
Email: contact@rosetta-omics.com
Data Protection Officer
MyData-TRUST SA, Avenue Lavoisier 18B, 1300 Wavre (Belgium)
rosetta-omics.dpo@mydata-trust.info
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Tel: +33 (0)1 53 73 22 22
Fax: +33 (0)1 53 73 22 00
Website: www.cnil.fr · Contact the CNIL