Privacy Policy

Advanced Accelerator Applications SA, with registered office at 8 rue Henri Sainte-Claire Deville, CS 10150, 92563 Rueil-Malmaison Cedex, France, acts as data controller for the processing of your Personal Data. You can also contact us using the following telephone numbers:

Tel.: +33 (0) 1 55 47 63 00

If you wish to contact us to exercise your GDPR data privacy rights, please send an email to [email protected] specifying your request.

Most of the services we offer by means of this Website do not require any form of registration, allowing you to visit our Website without telling us who you are. However, we may collect and process the following Personal Data relating to you:

• Data directly collected from you while you browse on this Website, such as:
  • the IP address and the domain name of your device;
  • the Uniform Resource Identifiers of the requested resources;
  • the time of your request, the method you use to submit such request to the server, the file size obtained in response, the numerical status code received in response by the server (e.g. successful, error, etc.); and
  • other parameters concerning your device, operating system and IT environment;
    (hereinafter, jointly referred to as “Web Surfing Data”);
• Data voluntarily provided by you when you contact us using the contact details listed in the Website, such as:
  • your name;
  • email address;
  • telephone number; and
  • other Personal Data relating to you that you should communicate to us in this context;
    (hereinafter, jointly referred to as “Identification Data”).

In addition, we will collect Personal Data relating to you where you submit your application for job openings displayed on the Website. In this case, we will process your Personal Data according to the provisions of the privacy information notice, available at the following link.

Moreover, we will collect your Personal Data if you fill in one of the form available on the Website to:

• report to us an adverse drug reaction related to the use of one of our products;
• ask us medical information;
• report to us a complaint or concern related to the quality of one of our marketed products; or
• have questions regarding availability, ordering, handling, or reimbursement of one of our marketed products

We will process your Web Surfing Data in accordance with the cookie policy for the following purposes:

• to guarantee the security of the Website and check its functioning (“Purposes of Legitimate Interest of Operation”);
• to personalize content and ads, to provide social media features and to measure our traffic. We also share information about your use of our website with our social media, advertising and analytics partners who may combine it with other information that you have provided to them or that they have collected from your use of their services (“Purposes of Consent”).

We will process your Identification Data to:

• provide customer support answer to other requests for information that you should submit to us by using the contact details available on the Website (“Purpose of Legitime Interest of Client Service” in order to better serve its clients and prospects)
• to comply with any legal and regulatory obligations, where applicable (“Law Purposes”);
• for our business purposes, to carry out activities to the extent reasonably necessary for development of or to proceed with the negotiation or completion of a corporate or commercial transaction such as acquisitions, mergers, spin-offs or other transformations, to conduct audits, as well as to protect or enforce our rights vis-à-vis you or third parties in the event of a dispute (“Purposes of Legitimate Interest of Business”).

We may combine your Identification Data with other data relating to you we may otherwise legitimately collect from or about you from other sources, such as public databases, providers of demographic information, joint marketing partners, social media platforms, and other third parties. Please refer to the privacy information notices of these recipients.

The processing of your Web Surfing Data for Legitimate interest is mandatory since the collection of such data takes place automatically while you browse on this Website. Therefore, if you do not want your Web Surfing Data to be processed for these purposes, you will not be able to use the services available on this Website.

The processing of your Identification Data for Contractual Purposes is also mandatory given that if you do not want us to process your Identification Data for these purposes, we may not be able to provide you with customer support nor to reply to your requests for information.

The processing of your Identification Data for Law Purposes is mandatory, where it is required by applicable laws.

The processing of your Web Surfing Data for Purposes of Legitimate Interest of Operation and the processing of your Identification Data for the Purposes of Legitimate Interest of Business are functional to the pursuit of our legitimate interests which are adequately balanced with your interests, according to the limits imposed on the relevant processing activities and it is not mandatory. You will have the right to object to the processing activities carried out for these purposes, as indicated in section “What are your rights and how can you exercise them?” of this Privacy Policy, unless we have an overriding interest to continue processing Personal Data.

This Privacy Policy describes the circumstances in which we may share your Personal Data. We may share your Personal Data with the following entities: (i) employees and collaborators of both Advanced Accelerator Applications and the following entities, within the scope of their duties, in their quality of persons authorized to the processing; (ii) other Advanced Accelerator Applications subsidiaries and affiliates worldwide, in their quality of data processors; (iii) third parties who act on our behalf, for further processing in accordance with the purpose(s) for which the Personal Data was originally collected or may otherwise be lawfully processed, such as – by way of example – services delivery, evaluating the usefulness of this Website, data management, technical support, legal advisors, insurance companies, in their quality of data processors; (iv) agencies and authorities whose right of access to your Personal Data is expressly recognized by law, regulations or provisions issued by the competent authorities, in their quality of autonomous data controllers; (v) companies or business branches assignees, companies resulting from possible mergers, spin-offs or other transformations of the Controller, in their quality of autonomous data controllers.

Except for agencies and authorities whose right of access to your Personal Data is expressly recognized by law, the above-mentioned third parties have contracted with us to only use Personal Data for the agreed upon purpose, and not to sell Personal Data to third parties, and not to disclose it to third parties except as may be permitted by us, as required by law, or as stated in this Privacy Policy.

Your Personal Data may also be processed, accessed, or stored in countries outside the European Economic Area (“EEA”). Such countries may offer a different level of protection of personal data. If we transfer your Personal Data to external companies in other jurisdictions, we will make sure to protect your Personal Data by applying the level of protection required under applicable data privacy laws. You may obtain upon request a copy of the appropriate or suitable safeguards in place by contacting [email protected]

For transfers of personal data among Advanced Accelerator Applications and its subsidiaries and affiliates, Advanced Accelerator Applications adopted Binding Corporate Rules, a system of principles, rules, and tools, authorized by European law, to regulate the transfer of personal data outside the EEA and Switzerland. Read more about the Advanced Accelerator Applications SA Binding Corporate Rules by clicking here.

Personal Data will be processed both by IT means and hardcopies. We use appropriate technical, administrative, and physical safeguards to protect your Personal Data. Unfortunately, no organization can guarantee the absolute security of information, especially information transmitted over the internet.

Our Website is not directed at children. We do not knowingly collect Personal Data from children under the age of 14.

We will only retain your Personal Data for as long as necessary to fulfil the purpose for which it was collected. However:

• Web Surfing Data collected via cookies will be retained for a maximum of 13 months from the moment they are placed, unless a longer retention period is necessary to ascertain responsibility in case of frauds committed against the Website or to comply with requests issued by the authorities;
• Identification Data collected for Legitimate Interest will be retained for 2 months from the moment we provide you with the requested information;
• Identification Data collected for Law Purposes will be retained for the period provided for each category of data by the law;
• Identification Data collected for Purposes of Legitimate Interest of Business are retained for a period of 5 years from the moment of collection, if the processing of your Personal Data is carried out to protect or enforce our rights, while in case the processing is carried out to perform activities for development of or to proceed with the negotiation or completion of corporate or commercial transactions, the retention periods listed above referred to the main processing activity to be carried out will apply.

Once the above-mentioned terms have expired, Personal Data may be deleted, made anonymous and/or aggregated.

Whenever we process Personal Data, we take reasonable steps to keep your Personal Data accurate and up-to-date for the purposes for which it was collected. However, you are entitled to exercise the following rights under the conditions and within the limits set forth in the European Regulation and other law provisions.

If you wish to contact us regarding the use of your Personal Data or you want to object in whole or in part to the processing of your Personal Data, please contact us. If you have provided consent, you may withdraw consent anytime without affecting the lawfulness of processing based on consent before its withdrawal. You may also request, subject to confidentiality obligations, to:

• access your Personal Data as processed by us, in order to obtain the confirmation of the processing of your Personal Data and to be made aware of its content and source, verify its accuracy or request its updating, or rectification;
• ask for erasure, transformation into anonymous form or blocking of your Personal Data processed in violation of the law;
• ask for the restriction of Personal Data processing in the event that (i) you challenge the accuracy of Personal Data, for the period necessary for us to verify the accuracy of such Personal Data; (ii) the processing is unlawful and you object to the erasure of Personal Data, but ask for its use to be restricted; (iii) Personal Data is necessary to protect or enforce our rights, although we no longer need Personal Data for the purposes of the processing; (iv) you have objected to the processing pursuant to Article 21, paragraph 1, of the European Regulation, pending verification as to whether our legitimate interests override your legitimate interests; object to the processing for marketing purpose;
• to obtain, or see a copy of the appropriate safeguards under which your Personal Information is transferred to a third country or international organization.
• To oppose at any time to be contacted by phone for direct marketing purposes, by registering free of charge on the website: www.bloctel.gouv.fr;
• request portability, where applicable, of your Personal data, i.e. that the Personal Data you have provided to us, is returned to you or transferred to the person of your choice, in a structured, commonly used and machine-readable format; and
• define general or specific directives concerning the fate of your personal data after your death.

In addition to the above rights, you have the right to object to any processing of your Personal Data justified by Advanced Accelerator Application’s legitimate interest, including profiling (as opposed to your consent, or to perform a contract with you). You also have the right to object to any processing of your Personal Information for direct marketing purposes, including profiling.

Moreover, you have the right to lodge a complaint before the French Data Protection Authority - Commission Nationale de l'Informatique et des Libertés - with the modalities indicated on the Authority's website (https://www.cnil.fr/en/contact-cnil) in case the relevant conditions are met.