Privacy Policy

Advanced Accelerator Applications SA, with registered office at 8 rue Henri Sainte-Claire Deville, CS 10150, 92563 Rueil-Malmaison Cedex, France, acts as data controller for the processing of your Personal Data. You can also contact us using the following telephone numbers:

Tel.: +33 (0) 1 55 47 63 00

If you wish to contact us to exercise your GDPR data privacy rights, please send an email to [email protected] specifying your request.

The services we offer by means of this Website do not require any form of registration, allowing you to visit our Website without telling us who you are. However, we may collect and process the following Personal Data relating to you while you browse this Website:

• the IP address and the domain name of your device;
• the Uniform Resource Identifiers of the requested resources;
• the time of your request, the method you use to submit such request to the server, the file size obtained in response, the numerical status code received in response by the server (e.g. successful, error, etc.); and
• other parameters concerning your device, operating system and IT environment;
  (hereinafter, jointly referred to as “Web Surfing Data”);

We will process your Web Surfing Data in accordance with the cookie policy for the following purposes:

• to guarantee the security of the Website and check its functioning (“Purposes of Legitimate Interest of Operation”);
• to personalize content and ads, to provide social media features and to measure our traffic. We also share information about your use of our website with our social media, advertising and analytics partners who may combine it with other information that you have provided to them or that they have collected from your use of their services (“Purposes of Consent”).

The processing of your Web Surfing Data for Legitimate interest is mandatory since the collection of such data takes place automatically while you browse on this Website. Therefore, if you do not want your Web Surfing Data to be processed for these purposes, you will not be able to use the services available on this Website.

The processing of your Web Surfing Data for Purposes of Legitimate Interest of Operation are functional to the pursuit of our legitimate interests which are adequately balanced with your interests, according to the limits imposed on the relevant processing activities and it is not mandatory. You will have the right to object to the processing activities carried out for these purposes, as indicated in section “What are your rights and how can you exercise them?” of this Privacy Policy, unless we have an overriding interest to continue processing Personal Data.

This Privacy Policy describes the circumstances in which we may share your Personal Data. We may share your Personal Data with the following entities: (i) employees and collaborators of both Advanced Accelerator Applications and the following entities, within the scope of their duties, in their quality of persons authorized to the processing; (ii) other Advanced Accelerator Applications subsidiaries and affiliates worldwide, in their quality of data processors; (iii) third parties who act on our behalf, for further processing in accordance with the purpose(s) for which the Personal Data was originally collected or may otherwise be lawfully processed, such as – by way of example – services delivery, evaluating the usefulness of this Website, data management, technical support, legal advisors, insurance companies, in their quality of data processors; (iv) agencies and authorities whose right of access to your Personal Data is expressly recognized by law, regulations or provisions issued by the competent authorities, in their quality of autonomous data controllers; (v) companies or business branches assignees, companies resulting from possible mergers, spin-offs or other transformations of the Controller, in their quality of autonomous data controllers.

Except for agencies and authorities whose right of access to your Personal Data is expressly recognized by law, the above-mentioned third parties have contracted with us to only use Personal Data for the agreed upon purpose, and not to sell Personal Data to third parties, and not to disclose it to third parties except as may be permitted by us, as required by law, or as stated in this Privacy Policy.

Your Personal Data may also be processed, accessed, or stored in countries outside the European Economic Area (“EEA”). Such countries may offer a different level of protection of personal data. If we transfer your Personal Data to external companies in other jurisdictions, we will make sure to protect your Personal Data by applying the level of protection required under applicable data privacy laws. You may obtain upon request a copy of the appropriate or suitable safeguards in place by contacting [email protected]

For transfers of personal data among the Novartis Group and its subsidiaries and affiliates, Advanced Accelerator Applications SA, as a member of the Novartis Group, has adopted the Novartis Binding Corporate Rules, a system of principles, rules, and tools, authorized by European law, to regulate the transfer of personal data outside the EEA and Switzerland. Read more about the Novartis Binding Corporate Rules by clicking here.

Personal Data will be processed both by IT means and hardcopies. We use appropriate technical, administrative, and physical safeguards to protect your Personal Data. Unfortunately, no organization can guarantee the absolute security of information, especially information transmitted over the internet.

Our Website is not directed at children. We do not knowingly collect Personal Data from children under the age of 14.

We will only retain your Personal Data for as long as necessary to fulfil the purpose for which it was collected. However, Web Surfing Data collected via cookies will be retained for a maximum of 13 months from the moment they are placed, unless a longer retention period is necessary to ascertain responsibility in case of frauds committed against the Website or to comply with requests issued by the authorities;

Once the above-mentioned terms have expired, Personal Data may be deleted, made anonymous and/or aggregated.

Whenever we process Personal Data, we take reasonable steps to keep your Personal Data accurate and up-to-date for the purposes for which it was collected. However, you are entitled to exercise the following rights under the conditions and within the limits set forth in the European Regulation and other law provisions.

If you wish to contact us regarding the use of your Personal Data or you want to object in whole or in part to the processing of your Personal Data, please contact us at [email protected] . If you have provided consent, you may withdraw consent anytime without affecting the lawfulness of processing based on consent before its withdrawal. You may also request, subject to confidentiality obligations, to:

• access your Personal Data as processed by us, in order to obtain the confirmation of the processing of your Personal Data and to be made aware of its content and source, verify its accuracy or request its updating, or rectification;
• ask for erasure, transformation into anonymous form or blocking of your Personal Data processed in violation of the law;
• ask for the restriction of Personal Data processing in the event that (i) you challenge the accuracy of Personal Data, for the period necessary for us to verify the accuracy of such Personal Data; (ii) the processing is unlawful and you object to the erasure of Personal Data, but ask for its use to be restricted; (iii) Personal Data is necessary to protect or enforce our rights, although we no longer need Personal Data for the purposes of the processing; (iv) you have objected to the processing pursuant to Article 21, paragraph 1, of the European Regulation, pending verification as to whether our legitimate interests override your legitimate interests; object to the processing for marketing purpose;
• to obtain, or see a copy of the appropriate safeguards under which your Personal Information is transferred to a third country or international organization.
• request portability, where applicable, of your Personal data, i.e. that the Personal Data you have provided to us, is returned to you or transferred to the person of your choice, in a structured, commonly used and machine-readable format; and
• define general or specific directives concerning the fate of your personal data after your death.

In addition to the above rights, you have the right to object to any processing of your Personal Data justified by legitimate interest of Advanced Accelerator Applications SA, including profiling (as opposed to your consent, or to perform a contract with you). You also have the right to object to any processing of your Personal Information for direct marketing purposes, including profiling.

Moreover, you have the right to lodge a complaint before the French Data Protection Authority - Commission Nationale de l'Informatique et des Libertés - with the modalities indicated on the Authority's website (https://www.cnil.fr/en/contact-cnil) in case the relevant conditions are met.