Data protection

1 – What personal data do we collect?

The personal data we collect on digital or paper media include, in particular, the following:
– Identification data: last name, first name, title
– Contact data: email and postal address, telephone number
– Transaction and payment data: banking information (credit card number*), date and time of the donation, donation amount, and other details related to the transaction

*These confidential data are processed automatically and exclusively through our service providers’ secure online payment system and are not accessible to the Institut de la Leucémie.

2 – For what purposes do we collect this data?

The Leukemia Institute uses your personal data mainly for the following purposes:

• responding to your requests (any type of question submitted via contact forms, appointment requests, applications)
• managing external information and communication (newsletters and brochures)
• managing relationships with donors, legators, potential donors, and potential legators
• complying with our contractual, legal, regulatory, and statutory obligations
• managing any potential dispute involving us
• managing real estate assets arising from legacies or donations
• managing the processing of liberalities
• carrying out automated processing activities
• fulfilling our commitments in a secure environment

3 – How do we process the data collected?

Your personal data are processed by the Institut de la Leucémie.
They remain confidential and are used only for the purposes for which you provided them. For example, personal data provided to make a donation will be used to process that donation and issue a tax receipt.

If your data are used for other purposes, we will inform you and give you the opportunity to object.

We may also send you our general information letter, digital newsletter, and thematic bulletins by email. You may subscribe or unsubscribe at any time by clicking the link included in each email.

For any technical questions or if you no longer wish to receive information by email, please notify us at contact@institut-leucemie.fr, and we will block all email communications to the indicated address.

4 –On what legal grounds do we process your data?

When we process your personal information for the purposes set out on this page, we rely on the following legal bases:

– compliance with a legal obligation, such as issuing your tax receipt
– legitimate interest, for example responding to your requests, sending you information related to our social mission, or requesting your support

5 – How long do we keep your data?

We retain your personal data only for the duration necessary to fulfill the purposes for which they were collected and processed.

6 – Security
The Institut de la Leucémie attaches great importance to the security and integrity of your personal data.
In accordance with the GDPR, we undertake to take all necessary precautions to preserve the security of your data and protect them against any alteration, destruction, loss, unauthorized disclosure or access, as well as against any other unlawful form of processing or communication to unauthorized persons.

7 – Sharing your personal data

The personal data you provide are used exclusively by the Institut de la Leucémie and will not be transmitted or sold to third parties under any circumstances.

We may use third parties to process your personal data, such as:
Google Analytics: analysis of website traffic.

8 – Use of cookies

A cookie is a small text file that a website sends to the browser’s cookie folder on your computer’s hard drive to remember who you are. A cookie generally contains the domain name from which it originates, its lifespan, and a value, usually a randomly generated unique number.

On this site, we use session cookies. These are temporary cookies stored in your computer’s memory and deleted when you close your browser or when you stop using the internet for a certain period (usually around twenty minutes).

To prevent cookies from being downloaded or to control how they are used on your device, please refer to your browser’s help section or visit: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser

9 – Your rights regarding your personal data

In accordance with the GDPR, you have the following rights concerning your personal data:

• access to your personal data
• rectification of your data
• erasure of your data, unless this conflicts with other regulatory or contractual obligations
• data portability when processing is based on your consent or on a contract and carried out automatically
• objection to the processing of your personal data (in such cases, certain services offered by the Institut de la Leucémie may not be accessible)
• restriction of processing in order to verify accuracy, object to deletion, or exercise/defend legal claims
• withdrawal of your consent at any time, without affecting the lawfulness of processing carried out before such withdrawal
• lodging a complaint with the CNIL, which you may contact online via the link provided

To exercise your rights, please send a request by email to: contact@institut-leucemie.fr

The CNIL provides an automatic letter generator on its website in the section “Les courriers pour agir.” We encourage you to use it.

10 – Changes

The Institut de la Leucémie reserves the right to modify this page at any time to reflect changes in its practices as well as new regulations on personal data protection.

11 – Unsubscribing
We use the email address you have provided to send you information. If you wish to unsubscribe and stop receiving emails, unsubscribe instructions are included at the bottom of each email. You may also contact us at contact@institut-leucemie.fr

Contact us:
If you have any questions regarding the matters mentioned above, you can contact us by email at contact@institut-leucemie.fr or by mail at:
Institut de la Leucémie – 16 rue de la Grange aux Belles – 75010 Paris, France.
You may also contact us through our contact form.

The Université Paris Cité Foundation is a hosting partner foundation. As such, it hosts the Institut de la Leucémie.

According to its statutes, the Université Paris Cité Foundation is legally responsible and manages the bank account, but it does not oversee donation monitoring, the issuance of tax receipts (CERFA), or the management of donor personal data when donors have not interacted directly with the foundation.

The Université Paris Cité Foundation neither uses nor retains data from any of the Institut de la Leucémie’s contacts, whatever their nature.

The Institut de la Leucémie processes certain personal data relating to its users. These processing activities are carried out in compliance with French Law no. 78-17 of 6 January 1978 (as amended), relating to data processing, files, and freedoms (“Informatique et libertés”), and with the European General Data Protection Regulation (GDPR) of 25 May 2018.