This Privacy Policy explains how CURE51 collects, uses, shares, and protects personal data within the framework of its website dedicated to the history and engagement of patients and caregivers.
It distinguishes between two types of users:
Contributors: whose identity, image, voice, testimonials, and health data are processed by CURE51 for the exclusive purpose of co-creating, validating, and distributing editorial content;
Visitors: whose technical browsing data is processed by CURE51 to ensure the management and improvement of the website.
This information may be shared with trusted third parties (hosting providers, distribution platforms) and is protected by appropriate technical and organizational security measures.
In accordance with applicable regulations (GDPR), all data subjects have a right to access, rectify, and delete their personal data. Contributors also have the right to withdraw their consent at any time regarding the use of their content. For any questions or to exercise your rights, please contact CURE51 at dpo@cure51.com.
TABLE OF CONTENTS
DATA CONTROLLER AND DATA SUBJECTS
DATA PROCESSED
2.1 For Contributors
2.2 For Visitors (Technical Data)
HOW CURE51 USES DATA
3.1 Content Management and Publication (Contributors)
3.2 Website Management (Visitors)
LEGAL BASIS FOR PROCESSING
DATA SOURCES
DATA ACCESS
RETENTION PERIOD
EXERCISING YOUR GDPR RIGHTS
CONTACT AND COMPLAINTS
INTERNATIONAL TRANSFERS AND SECURITY
CURE51 takes your privacy very seriously and is committed to protecting the information you entrust to us. This Privacy Policy aims to inform you about how we collect, use, and protect your personal data when you browse our website dedicated to the history and engagement of patients and caregivers, as well as during the creation and consumption of the content hosted on it.
1. DATA CONTROLLER AND DATA SUBJECTS
CURE51 processes and protects collected personal data in compliance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi "Informatique et Libertés").
This Policy applies to two categories of individuals:
Contributors: any natural person (patient, caregiver, relative) voluntarily participating in the editorial co-creation of content (text, audio, video, photos) with the CURE51 team;
Visitors: any user browsing the website to view and consume multimedia content.
2. DATA PROCESSED
The personal data that CURE51 processes depends on your relationship with us:
2.1 For Contributors
As part of the co-creation process, CURE51 may process the following data:
Identity and contact data: last name, first name, email address, phone number, date of birth;
Audiovisual data (content): photographs, portraits, voice recordings, videos, quotes, and statements gathered during interviews;
Health data (sensitive data): any information relating to the healthcare journey, treatments, diagnosis, or emotional experience of the illness that the Contributor voluntarily chooses to share as part of their testimonial.
2.2 For Visitors (Technical Data)
When simply browsing the website, certain information is collected automatically:
Connection data: IP address, pages viewed, access times;
Technical information: browser type, operating system, type of device used;
Data from cookies and trackers.
3. HOW CURE51 USES DATA
3.1 Content Management and Publication (Contributors)
Contributors' data is used exclusively to:
Populate the website dedicated to the history and engagement of patients and caregivers;
Create and edit content under specific, jointly validated editorial angles (e.g., sports, scientific engagement);
Raise public awareness via distribution across multiple media channels (website, social networks such as YouTube, Facebook, Instagram, LinkedIn, etc.).
3.2 Website Management (Visitors)
Visitors' technical data is used to administer the website, improve its performance, analyze traffic, and personalize the user experience.
4. LEGAL BASIS FOR PROCESSING
The processing operations described above are based on the following legal grounds (Articles 6 and 9 of the GDPR):
Explicit consent: the processing and publication of Contributors' image, voice, and health data (sensitive data) are based on their explicit consent, formalized by signing the "Authorization relating to image rights and content exploitation";
Performance of a contract: the content co-creation process is governed by the agreement signed between CURE51 and the Contributor;
Legitimate interest: for website administration, audience analysis (Visitors), and protecting CURE51 against fraudulent activities;
Legal obligation: for managing requests from data subjects exercising their rights.
5. DATA SOURCES
Contributors' data is collected directly from them during discussions, interviews, and the sharing of documents necessary for content creation. Visitors' technical data is collected automatically during their browsing.
6. DATA ACCESS
Internal recipients: Access to Contributors' raw data is strictly limited to authorized CURE51 personnel (editorial team, communication/marketing team, DPO).
External recipients: * The general public: final content validated by the Contributor is made public on the website and social networks;
Subcontractors (Processors): CURE51 relies on GDPR-compliant technical service providers (website hosting, traffic analysis tools).
7. RETENTION PERIOD
Contributors' Data: Content (texts, videos, audios) used by CURE51 is retained and distributed for the duration specified in the collaboration agreement, which is ten (10) years from the date of signature.
Visitors' Data: Raw traffic data associated with an identifier is retained for thirteen (13) months. Information stored in user devices (cookies) is not retained beyond six (6) months.
Management of Legal Requests: Data relating to requests to exercise rights is retained for one (1) year.
8. EXERCISING YOUR GDPR RIGHTS
In accordance with applicable regulations, Contributors and Visitors have the following rights:
Right of access and rectification: they may request a copy of their data or require that it be updated;
Right to erasure and withdrawal of consent: Contributors may withdraw their consent at any time. This withdrawal does not affect the lawfulness of publications made prior to said withdrawal. CURE51 will make every effort, as far as technically possible, to delete content from platforms under its direct control;
Right to object and data portability.
To maintain the smooth progression of the co-creation project, requests for multiple or inconsistent modifications to content already validated by a Contributor may require a prior discussion to understand the underlying reason.
9. CONTACT AND COMPLAINTS
To exercise their rights, Contributors and Visitors can send a written request to the Data Protection Officer (DPO) by email at dpo@cure51.com or by postal mail to 81, rue des Archives, 75003, Paris, attaching a signed copy of an identity document. Requests will be processed within one month. In the event of a breach of their rights, they may file a complaint with the CNIL (http://www.cnil.fr).
10. INTERNATIONAL TRANSFERS AND SECURITY
If any subcontractors are located outside the European Union, CURE51 ensures that European Commission Standard Contractual Clauses (SCCs) or adequacy decisions are in place to guarantee a level of protection equivalent to the GDPR.
CURE51 deploys robust technical and organizational measures (encryption of transfers via HTTPS, access restrictions, secure hosting) to prevent the destruction, loss, or unauthorized disclosure of personal data.
