Privacy Policy

1. PERSONAL DATA

Sebia places great importance on transparency, respect for privacy, and the protection of personal data. That is why Sebia wants: 

• Ensure that you understand how it uses your Personal Data.
• Ensure that you are aware of your rights in this regard.
• Inform you of the procedures by which you can exercise those rights.

 

Definitions

For the purposes of this document, the terms “Recipients,” “Personal Data,” “Data Controller,” “Processor,” and “Processing” have the meanings given to these terms in Article 4 of European Regulation 2016/679 of April 27, 2016 (hereinafter “GDPR”). More specifically: 

« Recipient(s) » : means any natural or legal person, public authority, agency, or any other body to which Personal Data is disclosed. 

« Personal Data » : means any information relating to an identified or identifiable natural person;

« Data Controller » : refers to Sebia SA, RCS 672 041 902, with its registered office at 27 rue Léonard de Vinci, 91090 Lisses, (hereinafter “Sebia”) which, alone or jointly with others, determines the purposes and means of the processing of Personal Data;

« Processor » : means the natural or legal person, public authority, agency, or other body that processes Personal Data on behalf of Sebia;

« Processing » : means any operation or set of operations, whether or not performed by automated means, applied to Personal Data or sets of Personal Data;

 

Scope of This Privacy Policy – Update

This Privacy Policy (hereinafter the “Privacy Policy”) covers the personal information that Sebia collects through the website www.sebia.com and its subdomains: atlas.Sebia.com et serviceportal.sebia.com (collectively referred to as the “Website”). 

This Privacy Policy does not cover personal information obtained by Sebia through its recruitment website, which is subject to the specific privacy policy for candidates available on the Sebia recruitment platform, or to products and services that expressly refer to one or more different privacy policies. 

Sebia reserves the right to update this Privacy Policy at any time to comply with mandatory provisions of applicable law and in response to changes to its Site. It is therefore essential to review the current Privacy Policy regularly to stay informed of any new information that may be added. 

 

Personal Data Processed

Sebia reminds you that the disclosure of your Personal Data is entirely your decision and remains at your sole discretion. However, since certain Personal Data is essential for accessing certain services or receiving certain benefits, Sebia cannot be held liable if it is forced to deny or restrict access to these services or is unable to provide the services for which it is responsible in the absence of such Personal Data. You will be informed—by the presence of an asterisk when Personal Data is collected—whether the Personal Data is required or optional. 

The Personal Data that Sebia may collect through its Website includes the following: 

Method of Collection	Personal Data Collected
Account creation and management	Username (*), password (*), laboratory/company (*), email address (*), title, last name, first name, job title, industry, address, city, ZIP code, country, state (U.S. citizens), phone number, cell phone number
Newsletter subscription	Your Communication Preferences
“Contact” section	Title (*), last name (*), first name (*), laboratory/company (*), email address (*), country, state (U.S. citizens), your request
Your browsing activity on the Site	Technical data (IP address of the device you use to connect, device type, operating system, browser type and version, browser identifier, connection logs, referring URL, browsing data, as well as performance and traffic data such as pages viewed, number of visits, and usage statistics)
Your request to exercise your rights	Last name, first name, email address, and any other information you share with us when exercising your rights
Registration and participation in an event	Identification data (title, last name, first name), contact information (email address, phone number, company, job title, city, state, country), information regarding registration and participation, communication preferences, and any information provided via the form (interest in tests, medical conditions, instruments)

*Required fields

 

Sebia is committed to limiting the collection of Personal Data to what is strictly necessary in accordance with the principle of data minimization set forth in the GDPR.

Sebia strongly recommends avoiding the disclosure of Personal Data via text fields or within uploaded documents.

Sebia reminds you that it is prohibited to collect and process sensitive Personal Data as defined by the GDPR (data relating to an individual’s health, racial or ethnic origin, political opinions, trade union membership, etc.) and that, as such, it systematically deletes any sensitive Personal Data that may nevertheless be provided to it.

Furthermore, in the event that you are required to provide us with Personal Data belonging to third parties, you agree to ensure that these individuals have been duly informed of the processing of their Personal Data in accordance with this Privacy Policy and, if required, have consented to the processing of their Personal Data.

 

Purposes/Legal Bases/Retention Period

The Personal Data collected by Sebia is processed for the purposes described in the table below. This Personal Data is retained for a period consistent with legal provisions or proportionate to the purposes for which it was collected. In addition, Sebia must be able to demonstrate a legal basis for the processing it carries out. In accordance with the GDPR, the legal bases on which Sebia may rely are as follows: 

• the performance of a contract to which the data subject is a party or the implementation of pre-contractual measures at the data subject’s request, such as a request for pre-registration for a service or the provision of a service; 
• compliance with a legal obligation, particularly accounting obligations through the retention of invoices; 
• the data subject’s prior consent; 
• the legitimate interests of the Data Controller, while respecting users’ rights and freedoms (e.g., improving the customer experience, preventing fraud, etc.). 

Methods of Collection	Personal Data Collected	Purpose	Legal Basis	Retention Period
Creating and managing your account	Username (*), password (*), laboratory/company (*), email address (*), title, last name, first name, job title, industry, address, city, ZIP code, country, state (U.S. citizens), phone number, cell phone number	Customizing your viewing experience	Agreement	Data is retained for the entire duration of the user account. In the event of account inactivity, data is retained for a period of three (3) years from the last activity or the last contact with the user.
		Create bookmarks and keep all your resources in one place	Agreement
		Access exclusive events near you	Legitimate interest
		Subscribe to newsletters and specific content	Consent	Until consent is withdrawn. If the account is inactive, the data is retained for a maximum of three (3) years.
Newsletter Subscription	Your communication preferences	To provide you with specific and personalized content	Consent
“Contact” section	Title (*), last name (*), first name (*), laboratory/company (*), email address (*), country, state (U.S. citizens), your request	To respond to your request and connect you with the appropriate department if necessary	Legitimate interest	The time required to process the request plus a maximum of 12 months from the conclusion of the exchange, except in the case of a commercial request (a maximum of 3 years from the last contact with the user).
Your browsing activity on the Site	Technical data (IP address of the device you use to connect, device type, operating system, browser type and version, browser ID, connection logs, referring URL, browsing data, as well as performance and traffic data such as pages viewed, number of visits, usage statistics)	To enable you to browse our Site and ensure its proper functioning, protection, and security.   To create and store your login credentials.	Legitimate interest	Connection logs, IP address : up to 12 months   Device details, OS, browser: up to 6 months  Audience measurement cookies: up to 13 months  Raw browsing statistics: up to 25 months
Your request to exercise your rights	Last name, first name, email address, and any other information you share with us when you exercise your rights	Processing of requests to exercise your rights	Legal obligation	The time strictly necessary to process the request. Evidence related to the request may be retained for up to 6 years.
Registration and participation in an event	Identification data (title, last name, first name), contact information (email address, phone number, company, job title, city, state, country), information regarding registration and participation, communication preferences, and any information provided via the form (interest in tests, medical conditions, instruments).	To manage registrations and participation in events, communicate with participants before, during, and after the event, handle logistical arrangements, and send communications regarding our products or future events.	Legitimate interest in organizing and following up on our events, and consent to receive marketing communications.	Data is retained for as long as necessary to organize and follow up on the event.    Data used for marketing purposes is retained until you withdraw your consent or for a maximum of 3 years from the last contact with you.

*Required fields

Sebia does not retain Personal Data beyond the period strictly necessary for the purposes set forth above, in accordance with the GDPR, or in the event that the data subject exercises their right to rectification or erasure.

Personal Data is either anonymized or erased when the retention periods expire. However, Personal Data may be archived beyond the specified retention periods for the purposes of investigation, detection, and prosecution of criminal offenses, solely to enable, as necessary, the provision of such data to judicial authorities or to comply with one or more legal retention obligations. 

 

Recipients of Personal Data

Sebia grants access to Personal Data only in the cases listed below:

• Access to Sebia teams who need to know such information to perform their duties in connection with the purposes described in this Privacy Policy; 
• Access to subcontractors or technical service providers selected by Sebia to perform all or part of the services on behalf of Sebia (development of Website content, maintenance, hosting, support, data analysis, etc.); 
• Access by business partners to respond to inquiries regarding products; 
• Access by public authorities and/or agencies in accordance with applicable law or pursuant to a decision by a competent regulatory or judicial authority; 
• Disclosure to third parties in the event of a potential or definitive sale or transfer of all or part of Sebia’s business or assets (including in the event of a merger, acquisition, joint venture, reorganization, transfer, dissolution, or liquidation) or any other business combination, provided that the third parties in question guarantee levels of protection comparable to those of Sebia with respect to the shared Personal Data.

Regardless of the recipient in question, we will only disclose your Personal Data to them if they have a legitimate need to know, to the extent necessary to achieve the purposes identified in this Privacy Policy. 

 

Transfer of Personal Data Outside the European Union Outside the European Union

Sebia may transfer Personal Data to third countries.

When the processing of Personal Data involves transfers outside the European Union, we prioritize transfers to countries that ensure an adequate level of data protection in accordance with the requirements of the European Commission.When the processing of Personal Data involves transfers outside the European Union, we prioritize transfers to countries that ensure an adequate level of data protection in accordance with the requirements of the European Commission.

Otherwise, transfers are governed by appropriate safeguards to ensure the security of Personal Data and to enable you to exercise your rights and have access to effective remedies. Thus, in the absence of an adequacy decision, transfers are governed by compliance with the European Commission’s standard contractual clauses for data protection.

 

Security Measures Applied to Personal Data

Sebia, in its capacity as Data Controller, ensures that it implements—and that its Data Processors implement—appropriate technical and organizational measures in accordance with applicable legal provisions to protect Personal Data against alteration, accidental or unlawful loss, unauthorized use, disclosure, or access, including: 

• Securing access to its premises and IT platforms; 
• Raising awareness among its employees who have access to Personal Data regarding confidentiality requirements; 
• Applying standards consistent with the GDPR regarding data protection when selecting its processors. 

 

Rights and Exercise of Rights by Data Subjects 

In accordance with the GDPR, any individual whose Personal Data is collected and processed has the following rights, depending on the legal basis for the relevant Processing: 

• A right of access and to obtain a copy: Sebia may require payment of reasonable fees based on administrative costs for any additional copies you request; 
• A right to modification and rectification: You may, free of charge, as soon as possible, and no later than one month, obtain the rectification of your Personal Data that is inaccurate, incomplete, or irrelevant, as well as have it completed if it proves to be incomplete; 
• A right to erasure (right to be forgotten) and to have your Personal Data deleted when: (i) the Data is no longer necessary for the purposes of the Processing; (ii) you have withdrawn your consent to the processing of your data and there is no other legal basis for the processing; (ii) you object to the processing and there is no overriding legitimate ground for the processing and/or you exercise your specific right to object to direct marketing (including profiling); (iii) the Personal Data has been processed unlawfully; (iv) the Personal Data must be erased to comply with a legal obligation (under Union law or the law of a Member State) to which Sebia is subject; (v) the Personal Data was collected in connection with the provision of information society services directed at children; 
• The right to restriction of processing applies when: (i) you contest the accuracy of a piece of data, and only for as long as Sebia needs to verify it; (ii) the processing is unlawful and you prefer restriction of processing to erasure, iii) although the data is no longer necessary for the purposes of the processing, you need it to establish, exercise, or defend your legal rights, and iv) for the time necessary to assess the validity of an objection filed by the user; 
• With regard to the right to object to the processing of Personal Data concerning you, Sebia notes that it may refuse to comply with the right to object if it establishes the existence of compelling and legitimate grounds justifying the processing, which override the user’s interests, rights, and freedoms, or for the establishment, exercise, or defense of a legal claim. In the event of a dispute, you may file a complaint with the supervisory authority in your country of residence; 
• The right to withdraw consent for all processing based on consent. Sebia notes that the right to withdraw consent applies at any time; 
• A right to data portability, when the processing of Personal Data is carried out using automated means; and when the processing is based on the user’s consent or on a contract between the user and Sebia; 
• The right to determine the fate of Personal Data in the event of death (retention, erasure, or disclosure to a designated person). 

These rights may be exercised by contacting Sebia at the following address: dpo@sebia.com specifying the purpose of the request and including, as required, proof of identity along with any information necessary to process the request. Sebia will process requests regarding the exercise of the rights listed above as soon as possible and no later than one month from receipt of the request, provided it includes all the documents requested above. 

Finally, Sebia reminds you that if you believe your rights have not been respected, you have the right to file a complaint with the data protection authority in your country of residence; in France, this is the CNIL: www.cnil.fr.

 

Third-Party Websites 

Our Website may contain links to third-party websites that we do not control and that are governed by their own privacy and data protection policies.

This Privacy Policy does not apply to these third-party websites. We encourage you to review the privacy notices of these third-party websites to understand how they process your Personal Data. We assume no responsibility for the use of your Personal Data by these third parties.

 

Applicable Law/Competent Jurisdiction 

This Privacy Policy is governed by French law, regardless of the language in which the data subject accessed it; the French version shall be the sole authoritative version. Any dispute regarding its interpretation or enforcement shall be submitted to the competent French courts.

 

2. COOKIES AND OTHER TRACKERS

2.1. Cookies

Definition

A cookie is a small text file placed and stored on your device (computer, smartphone, tablet, etc.) when you access a service using a web browser via the website in question. It allows the issuer, during the cookie’s validity period, to recognize the device in question each time that device accesses digital content containing cookies from the same issuer and, depending on the cookie, to collect additional information about the user’s behavior while using the services. 

Users are informed that, when they connect to the Sebia Website, cookies are installed on their device to ensure the proper functioning of the services, or in their browser, subject to the user’s stated preferences regarding cookies; these preferences may be modified at any time. 

These may include:

• First-party cookies: these are issued and stored by Sebia from its servers and domains; 
• Third-party cookies: these are issued by Sebia’s partners from that partner’s server or domain. 

Depending on how long cookies are stored on the user’s device, there are:

• Session cookies: activated while the user is browsing the relevant Site or to provide a service requested by the user; 
• Persistent cookies: stored for a specified period on the user’s device; the operator of the relevant website has access to them whenever the user connects to that website. The validity period of these cookies may not exceed 13 months from the day the cookie is placed on your device.  

Depending on the function of the cookies and the purpose of the data collected, Sebia distinguishes between: 

• Security cookies: technically essential for browsing the Site (to navigate the Site, use its basic features, and secure your connection) and for the provision of the service. These cookies do not require your consent since they enable you, in particular, to access the website; 
• Functional (or personalization) cookies: improve your browsing experience on the Site by offering personalized features, such as a personalized welcome and the saving of your preferences (language or region where you are located). Like technical cookies, these cookies are used to improve your browsing experience and do not require your consent; 
• Analytics (or performance) cookies: enable the tracking and statistical analysis of users of the Site to which they are linked (most-viewed pages, error messages, overview of Site traffic, the source of that traffic, and pages visited, etc.). The goal is to improve your user experience and refine how our Site works so that you can intuitively find what you’re looking for; 
• Advertising cookies: These cookies enable the management of advertising spaces on the Site you are visiting. These cookies require your consent; 
• Behavioral or targeting cookies: These cookies store information about user behavior based on their browsing habits, which allows us to show them ads that are relevant to their interests. They are also used to limit the number of times the same ad is displayed and to help measure the effectiveness of advertising campaigns. Deleting these cookies will not prevent ads from appearing. Your consent is required for these cookies, and we request it when you access our website; 
• Social media cookies: These allow you to share content from our Site with others or to let them know that you have viewed or expressed an opinion about content on the Site in question. When you use these buttons, a third-party cookie is installed on your device, and if you are logged into the social media platform, this information will be added to your profile. 

Sebia also uses third-party web analytics services in connection with its Site, such as Google Analytics, which may use cookies to collect data (such as IP addresses) in order to evaluate usage of and interaction with the Site.

 

Cookie Management by Site Users 

Consent

The installation of certain cookies is subject to your consent when their sole purpose is not to enable or facilitate navigation, or when they are not strictly necessary for the provision of services or the management of features. Therefore, during your first visit to the Site, you will be asked whether or not to consent to the installation of these non-essential cookies on your device. A cookie will be installed to remember your choice. If you delete this cookie, your consent will be requested again. You may change your choice at any time by accessing the cookie settings available at the bottom of the page.  

Cookies that process Personal Data are subject to data protection regulations. In this context, you have certain rights (the right of access, the right to rectification, the right to object, the right to withdraw consent, etc.). We invite you to review the first section of this privacy policy, which details your rights and the conditions under which they apply.

If the user refuses to allow cookies to be stored on their device or browser, or if they delete those that are stored there, Sebia notes that their browsing and use of the Site may be limited. As such, Sebia disclaims all liability for any consequences resulting from the impaired functioning of the Site or its services arising from (i) the User’s refusal of cookies or (ii) Sebia’s inability to store or access the cookies necessary for the Site’s operation due to the User’s choice.

 

Types of Cookies Used by Sebia 
  

Third-party cookies	Type	If you browse...
Google Analytics (_ga _gat _gid)	Analysis and performance	The covered websites
Linkedin (BizoID; UserMatchHistory; Bcookie; Lang; Lidc)	Social networks	The covered websites
Hubspot (__hstc ; hubspotutk; __hssrc ; __hssc)	Analysis and performance	The covered websites
youtube.com	Social networks	The covered websites

 

2.2. Tracking Pixels

We also use trackers (tracking pixels) embedded in our emails. These pixels allow us to know if you opened the email, at what time and date, and if you interacted with the links it contains. The pixels are used to: 

• Personalize our communications based on your interactions with our emails,
• Adjust the frequency of our emails to limit the number of messages you receive, 
• Measure the effectiveness of our communications and improve the quality of our content.

Sebia’s sending of personalized email communications is based on your consent, which was obtained when you subscribed to our newsletter. You may withdraw this consent at any time by simply unsubscribing from the newsletter via the unsubscribe link at the bottom of all our emails or through your account.  

Categories of data processed: your identification data (e.g., last name, first name, email address…), your login data (date of last login), and your email viewing data (date and time of opening).