Coave Therapeutics SA (“Coave Tx”) is committed to the protection of personal data and privacy of the users of its website www.coavetx.com (the “Website”).

To this end, Coave Tx undertakes to process such personal data in accordance with the applicable laws and regulations, in particular the European General Data Protection Regulation n° 2016/679 of April 27, 2016 (known as the “GDPR”), and the French Data Protection and Freedom of Information Law n°78-17of January 6, 1978 (as amended) called “Loi Informatique et Libertés”.

This Privacy Policy sets out how Coave Tx, acting as “Data Controller” in the meaning of the aforementioned texts, collects and processes your information in connection with your use of the Website. We intend to inform you of the legal basis and purposes of the processing, your rights and our relating obligations.

If you have any questions about this policy or about how Coave Tx processes your personal data, you can contact our Data Protection Officer (DPO) at: dpo@coavetx.com.

1. What is personal data? 

Personal data refers to any information relating to an identified or identifiable natural person (referred to as a “Data Subject”). In the context of the access, consultation, navigation and use of the Website, the Data Subjects are the users visiting this Website (the “Users”). The personal data concerned by this Privacy Policy are therefore all data relating to the Users, insofar as they are identified or identifiable, for example by means of the IP address of their terminal.

2. How are your personal data processed? 

Coave Tx collects personal data when you use the contact emails: contact@coavetx.com and bd@coavetx.com.

2.1 Categories of data collected

When you use the contact email, we collect the following data which can include personal data:

• • your email address, last name, first name ;
  • the subject of your e-mail ;
  • your message ;
  • if applicable, the attachments to support your request.

2.2 Legal basis

This data processing can be based on the legitimate interest pursued by Coave Tx.

When you choose to share sensitive data with Coave Tx, an explicit consent will be required.

2.3 Purpose

These data are collected and processed for the following purposes:
– managing the response to your applications for a job with Coave Tx,
– answering any question concerning our activity.

3. How is the security of your personal data ensured? 

Coave Tx takes the appropriate technical and organizational measures to preserve the security of the User’s personal data, in particular, with respect to its confidentiality, integrity and availability, especially with respect to sensitive data that may be collected.

In case of personal data breach, we will inform you, as well as the relevant national data protection authority, in accordance with the applicable regulation.

4. With whom is your personal data shared? 

The personal data collected and processed as set forth in Article 2 above may be used by Coave Tx’s authorized employees.

They may also be shared with third parties, in particular with Coave Tx’s service providers (e.g. IT service providers, hosting providers, consultants, etc.) or business partners, court officials, financial auditors, etc., being stated that each of these third parties are bound by data protection and confidentiality obligations in order to protect your personal data.

5. Do we transfer your personal data outside the European Union? 

Your personal data may be transferred to countries outside the European Union. In the event that the recipient country does not ensure a level of data protection equivalent to that of the European Union, Coave Tx undertakes to take all appropriate guarantees such as, as the case may be, either on the basis of an adequacy decision or on the basis of binding corporate rules or standard contractual clauses.

6. For how long is your personal data kept? 

Your personal data will be stored only for the time strictly necessary to achieve the purposes for which they were collected or to comply with legal or regulatory requirements.

The retention periods for your personal data include the following:

As far as our contact emails are concerned, we keep your personal data for at maximum five (5) years from our last contact with you:

• two (2) years if you contact Coave Tx as an individual;
• five (5) years if you contact Coave Tx on behalf of your professional organization.

7. What are your rights concerning your personal data ?

In accordance with applicable laws and regulations, Users have the rights listed below with respect to the processing of their personal data:

• Right of access: you may request access to your personal data processed by Coave Tx, which will provide you with a copy of the same;
• Right to portability: you may request that your personal data be transmitted in a reusable format that allows them to be used in another database;
• Right of rectification: you may request the rectification of your personal data if they prove to be inaccurate, incomplete or obsolete;
• Right to erasure (“right to be forgotten”): you may request, under certain conditions, to have your personal data erased or deleted, unless Coave Tx has a legitimate interest in keeping them;
• Right of opposition: you may oppose any processing of your personal data;
• Right of limitation of treatment: you may request the right to that the processing of your personal data be temporarily suspended.
• Right to withdraw consent: if you give your consent to process your personal data, you have the right to withdraw such consent to the future processing of your personal data;
• Right to define post-mortem instructions: you may request to leave instructions regarding the fate of your personal data after death;
• Right to lodge a complaint with a supervisory authority: You have the right to file a complaint regarding the treatments implemented by Coave Tx with the competent national data protection authority. For France, this authority is the ‘Commission Nationale de l’Informatique et des Libertés’. For more information on the latter and how to contact it, you can visit www.cnil.fr.

You may exercise your above rights at any time by contacting our Data Protection Officer at the following address: dpo@coavetx.com as well as by regular mail at Coave Therapeutics, Data Protection Officer (DPO), 63 bis Avenue Ledru Rollin – 75012 Paris, France.

8. Changes to this Privacy Policy  

Coave Tx may amend the terms of this Privacy Policy at any time and all such changes will take effect once they have been posted on this page of the Website. Therefore, we advise you to periodically revisit this page for updates.

Updated August 31, 2023