PERSONAL DATA PROTECTION POLICY

Last update: April 27, 2022

The website https://mesresultats.synlab.fr/ (hereinafter the “ Website ”), published by the company SYNLAB Gestion (hereinafter “SYNLAB Gestion” ), is intended to allow:

• free of charge, to patients of medical analysis laboratories that are members of its network (hereinafter the 'Users'), an electronic service allowing them to view their analysis results on mySYNLAB, print them and compare their values ​​over time.

In the context of accessing, consulting, browsing and using the Website and the services it offers, you are required to communicate personal data concerning you to SYNLAB Gestion.

These data are protected by law. For this reason, SYNLAB Gestion, in its capacity as data controller, has implemented appropriate security measures to protect your personal data.

Thank you for reading this policy, explaining how your personal data is used by SYNLAB Gestion. This policy supplements any document or information notice referring to the policy.

If necessary, you can ask all your questions directly to the data protection officer of SYNLAB Gestion by sending an email to [email protected] or a letter to the following address:

1. WHAT PERSONAL DATA ARE LIKELY TO BE PROCESSED BY SYNLAB GESTION?

Certain data is automatically collected by the Website, namely:

Data categories	Sample Data	Purposes
Location data	Location data by geographical area	These data are only collected and processed with your prior consent.
Connection and navigation data	Date and time of connection, IP address, IP address location, newsletter subscription IP, pages visited, browser type, browser language, event logs	This data is necessary for the proper technical functioning of the Website and the services it offers, as well as for measuring the use of the Website.

Data categories	Sample Data
Civil status, identity, identification data	mySYNLAB ID, surname, first name, mobile phone number, landline number, email address, password, NIR

Some of this data is mandatory, others optional in order to benefit from all the services offered on the Website. The mandatory or optional nature of the personal data to be provided is indicated during collection. If you refuse to provide the mandatory data, SYNLAB Gestion will not be able to provide you with the services requested (such as the creation of your account on the Website), nor to respond to any other requests you may have.

2. WHY SYNLAB GESTION USE YOUR PERSONAL DATA?

SYNLAB Gestion processes your personal data only for the following reasons:

Purpose	Example of use of your personal data	Legal basis
Management of analyzes and results	to make your analyzes available on a secure dedicated server	Contract

3. WHO CAN HAVE ACCESS TO YOUR PERSONAL DATA?

In the context of accessing, consulting, browsing and using the Website and the services offered there, your personal data may be communicated to the following recipients:

Recipients	Storage periods
Management of analyzes and results	For the purpose of providing the services offered on the Website (providing online analysis results) and managing the Website
Laboratory making analysis results available online	For the purpose of providing the services offered on the Website (provision of online analysis results)
Administrative or judicial authorities	Only in the event of an express and reasoned request on their part in the event of a proven breach of legal or regulatory provisions

4. HOW LONG ARE YOUR PERSONAL DATA RETAINED?

No data collected and processed by SYNLAB Gestion concerning you is transferred to a country outside the European Union.

5. HOW DOES SYNLAB GESTION PROTECT YOUR PERSONAL DATA?

SYNLAB Gestion has implemented technical and organizational measures to protect your personal data, in particular against possible breaches likely to result, accidentally or unlawfully, in the destruction, loss, alteration, access or disclosure unauthorized access to your personal data. These measures ensure an appropriate level of data security and take into account the state of knowledge, the costs of implementation in relation to the risks and the nature of the data to be protected.

SYNLAB Gestion also guarantees that the members of its staff and any person required to process personal data concerning you comply with the internal rules and procedures relating to the processing of personal data and in particular the technical and organizational security measures put in place to protect your data. personal

6. HOW LONG ARE YOUR PERSONAL DATA RETAINED?

In general, your personal data will only be kept for the period necessary to achieve the purposes for which this data was collected or to comply with legal or regulatory requirements.

Purposes	Storage periods
Management of analyzes and results	Active base: 5 years after the last intervention in the active base Intermediate archiving: 15 years on separate medium Source: (simplified Cnil standard no. 53).

7. WHAT ARE YOUR RIGHTS OVER YOUR PERSONAL DATA?

In accordance with the applicable regulations on the protection of personal data, you have the following rights over your personal data:

• You can ask to have access to the personal data that SYNLAB Gestion has on you and to obtain a copy , including in electronic format;
• You can request the correction , updating and deletion of your personal data, as well as the limitation of their processing.
• You can request the portability of your personal data;
• you can communicate to SYNLAB Gestion your "last wishes" with regard to your personal data in the event of your death (for example, their deletion or their transmission to any person of your choice).

In some cases, you must explain to SYNLAB Gestion why you are exercising one of these rights and, if necessary, justify your identity.

For any questions and to exercise your rights, you can contact SYNLAB Gestion's personal data protection officer directly by sending an email to [email protected] or a letter to the following address:

SYNLAB Management
Data Protection Officer
60/62 rue d'Hauteville
75010 Paris

If necessary, you can file a complaint with the CNIL via its website or by mail: 3, place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07. This right can be exercised at any time free of charge, apart from the costs of the mail if necessary, and any costs of assistance or representation if you choose to be assisted in this procedure by a third party.

8. SITE BELONGING TO THIRD PARTIES

Links on the SYNLAB Gestion website may refer you to external sites.

In this regard, we draw your attention to the fact that the personal data protection policies of these sites may differ from this policy.

It is therefore recommended to read the personal data protection policy of each of the sites concerned.

In any event, SYNLAB Gestion cannot be held liable in the event that the content of one of the sites contravenes the legal and regulatory provisions in force.

9. UPDATE TO THIS POLICY

This policy may be modified, in particular in the event of changes to the services offered by SYNLAB Gestion on the Website. Therefore, we recommend that you consult this policy each time you access the Website.