This Privacy Policy explains how Cure51 collects, uses, shares and protects personal data in connection with its website dedicated to the stories and experiences of patients and carers.
It distinguishes between two types of users:
Contributors: whose identity, image, voice, testimonials and health data are processed by Cure51 for the sole purpose of co-creating, validating and disseminating editorial content;
Visitors: whose technical browsing data is processed by Cure51 to ensure the management and improvement of the website.
This information may be shared with trusted third parties (hosting providers, distribution platforms) and is protected by appropriate technical and organisational security measures.
In accordance with applicable regulations (GDPR), all data subjects have the right to access, rectify and erase their personal data. Contributors also have the right to withdraw their consent at any time regarding the use of their content. For any queries or to exercise your rights, please contact CURE51 at dpo@cure51.com.
TABLE OF CONTENTS
DATA CONTROLLER AND DATA SUBJECTS
DATA PROCESSED
2.1 For Contributors
2.2 For Visitors (Technical Data)
HOW CURE51 USES DATA
3.1 Content Management and Publication (Contributors)
3.2 Website Management (Visitors)
LEGAL BASIS FOR PROCESSING
DATA SOURCES
DATA ACCESS
RETENTION PERIOD
EXERCISING YOUR GDPR RIGHTS
CONTACT AND COMPLAINTS
INTERNATIONAL TRANSFERS AND SECURITY
——
Cure51 takes your privacy very seriously and is committed to protecting the information you entrust to us. The purpose of this Privacy Policy is to inform you about how we collect, use and protect your personal data when you browse our website dedicated to the stories and experiences of patients and carers, as well as when you create and view the content hosted on it.
DATA CONTROLLER AND DATA SUBJECTS
Cure51 processes and protects the personal data collected in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
This Policy applies to two categories of individuals:
Contributors: any natural person (patient, carer, relative) voluntarily participating in the co-creation of editorial content (text, audio, video, photos) with the Cure51 team;
Visitors: any user browsing the site to view and access multimedia content.
DATA PROCESSED
The personal data that Cure51 processes depends on your relationship with us:
For Contributors
As part of the co-creation process, Cure51 processes the following data:
Identity and contact details: surname, first name, email address, telephone number, date of birth;
Audiovisual data (content): photographs, portraits, voice recordings, videos, quotes and comments gathered during interviews;
Health data (sensitive data): any information relating to the course of care, treatments, diagnosis or emotional experience of the illness that the Contributor chooses to share voluntarily as part of their testimony.
For Visitors (Technical data)
When simply browsing the site, certain information is collected automatically:
Connection data: IP address, pages viewed, time spent on the site;
Technical information: browser type, operating system, type of device used;
Data from cookies and trackers.
USE OF DATA BY CURE51
Management and publication of Content (Contributors)
Contributors’ data is used exclusively to:
Populate the website dedicated to the stories and experiences of patients and carers;
Create and edit content from specific editorial angles (e.g. sport, scientific engagement) agreed upon jointly;
Raise public awareness through dissemination across multiple platforms (website, social media such as YouTube, Facebook, Instagram, LinkedIn, etc.).
Website Management (Visitors)
Visitors’ technical data is used to administer the website, improve its functioning, analyse traffic and personalise the user experience.
LEGAL BASES FOR DATA PROCESSING
The processing operations described above are based on the following legal bases (Articles 6 and 9 of the GDPR):
Explicit consent: the processing and publication of Contributors’ images, voices and health data (sensitive data) are based on their explicit consent, formalised by the signing of the “Authorisation regarding image rights and the use of content”;
Performance of a contract: the content co-creation process is governed by the agreement signed between Cure51 and the Contributor;
Legitimate interest: for the administration of the website, audience analysis (Visitors) and the protection of Cure51 against fraudulent activities;
Legal obligation: for the management of requests to exercise the rights of data subjects.
SOURCES OF DATA
Contributors’ data is collected directly from them during exchanges, interviews and the sharing of documents necessary for content creation. Visitors’ technical data is collected automatically whilst they are browsing.
ACCESS TO DATA
Internal recipients. Access to Contributors’ raw data is strictly limited to authorised Cure51 staff (editorial team, communications/marketing team, DPO).
External recipients.
The general public: final content approved by the Contributor is made public on the website and social media;
Subcontractors: Cure51 uses technical service providers that comply with the GDPR (website hosting, traffic analysis tools).
RETENTION PERIOD
Contributor data. Content (text, video, audio) used by Cure51 is retained and disseminated for the entire duration specified in the collaboration agreement, i.e. ten (10) years from the date of signature.
Audience measurement (Framer Analytics). The statistics tool used by Cure51 respects privacy and operates without any advertising or persistent cookies. Raw technical traffic data, used exclusively to count unique visitors, is anonymised and deleted within twenty-four (24) hours.
Preference management (trackers). Information relating to your cookie choices (via the consent banner) is stored locally in your browser. It is retained for a maximum of six (6) months, after which your consent will be requested again.
Handling of legal requests. Data relating to the exercise of your rights (requests for access, rectification, objection, etc.) is retained for one (1) year.
EXERCISING YOUR GDPR RIGHTS
In accordance with applicable regulations, Contributors and Visitors have the following rights:
Right of access and rectification: they may request a copy of their data or require it to be updated;
Right to erasure and withdrawal of consent: Contributors may withdraw their consent at any time. Such withdrawal does not affect the lawfulness of publications made prior to said withdrawal. Cure51 will endeavour, to the extent technically possible, to remove content from platforms under its direct control;
Right to object and right to data portability.
To ensure the smooth running of the co-creation project, requests for multiple or inconsistent changes to content already approved by a Contributor may be subject to prior discussion to understand the reason behind them.
CONTACT AND COMPLAINTS
To exercise their rights, Contributors and Visitors may send a written request to the Data Protection Officer (DPO) by email to dpo@cure51.com or by post to 81, rue des Archives, 75003, Paris, enclosing a copy of a signed identity document. Requests will be processed within one month. In the event of a breach of their rights, they may lodge a complaint with the CNIL (http://www.cnil.fr).
INTERNATIONAL TRANSFERS AND SECURITY
Where some of the processors are located outside the European Union, Cure51 ensures that the European Commission’s standard contractual clauses or adequacy decisions are in place to guarantee a level of protection equivalent to that provided by the GDPR. Cure51 implements robust technical and organisational measures (encryption of transfers via HTTPS, access restrictions, secure hosting) to prevent the destruction, loss or unauthorised disclosure of personal data.
