Privacy policy

CARMAT is committed to ensuring the protection, confidentiality and security of the personal data of its users, existing and potential customers, suppliers and applicants, and is equally committed to respecting their privacy. Our website is not intended for minors.

The information that CARMAT presents on its website cannot be considered medical information, as only healthcare professionals are authorized to provide such information. Therefore, under no circumstances may CARMAT receive health data directly from patients or their relatives who wish to communicate their personal information. Should such information be sent, it will be destroyed immediately upon receipt and a response reminding you of this obligation will be transmitted.

Objectives of the personal data protection policy

The objectives of this personal data protection policy are to:

– Describe how your data is processed when you use the CARMAT website: carmatsas.com

– Explain the measures implemented to comply with applicable regulations on the protection of personal data (General Data Protection Regulation (EU) (GDPR) and the French Data Protection Act of January 6, 1978, as amended);

– Inform you of your rights regarding your personal data and how to exercise them.

Data Controller

The data controller is CARMAT, with a head office at: 6, Avenue de l’Europe – 78140 Vélizy-Villacoublay – France.
The data controller is the legal person who determines the purposes for which and the means by which personal data is processed.

Data Protection Officer

Should you have any questions pertaining to data protection or the exercise of your rights, please contact our data protection officer, by emailing dpo@carmatsas.com or writing to: CARMAT – Service DPO – 6, Avenue de l’Europe – 78140 Vélizy-Villacoublay – France.

Means used to collect your personal data

Purposes	Means	Legal basis	Data collected
General information request	Email transmission	Legitimate interest of CARMAT	Email address Identity of the person (if indicated)
Investor information request	Email transmission	Legitimate interest of CARMAT	Email address Identity of the person (if indicated)
Media information request	Email transmission	Legitimate interest of CARMAT	Email address Identity of the person (if indicated)
Complaints and requests to exercise a right	Email transmission	Legal obligation	Identity (Surname, First name) Email address Identity document (if necessary)
Submitting your application	Email transmission	Legitimate interest of CARMAT	Identity (Surname, First name) Email address Professional experience Training
Cookie management	Placement on your computer	Legitimate interest Consent	IP adress

Recipient of collected data

The recipients of collected data are the employees responsible for processing your data in response to your request (marketing department, HR department or any other relevant department) or subcontractors of the data controller:
– Investor Information: Newcap
– Media Information: Alize RP

Transfer of data to countries outside the European Union

No personal data is transferred to countries outside the European Union or to international organizations.

Collected data retention period

General information requests: 1 year from the date of response
Investor information requests: 1 year from the date of response
Media information requests: 1 year from the date of response
Cookie management: 1 year from the date of your consent
Job application submissions: 2 years from the date of receipt. This period will be extended by two years in the event of your response to one of our requests.
Exercise of a right: 3 years from the date of response, with the exception of your identity document which will be deleted after verification of your identity (if necessary).

Your rights

In accordance with the legal and regulatory provisions in force, you have the following rights with respect to your personal data:

Right to access (Article 15 GDPR) and rectify (Article 16 GDPR) : you have the right to request access to your personal data held by CARMAT and to ask for such data to be rectified or updated.
Right to erasure (Article 17 GDPR): you have the right to have your data erased, without undue delay, by CARMAT where such data is no longer required for processing.
Right to restrict processing (Article 18 GDPR): you have the right to ask CARMAT to restrict the processing of your personal data for the time necessary to modify inaccurate data or, if you have objected to the processing of said data, for the time it takes the data controller to carry out the necessary checks.
Right to portability (Article 20 GDPR): you have the right to receive the data you have provided in the context of processing based on your consent.
Right to object to processing (Article 21 GDPR): you have the right to object, on grounds relating to your particular situation, to data processing where such processing is based on legitimate interest.
Right to decide what happens to your data after your death (Article 85 of the French Data Protection Act): you have the right to choose whether or not to allow CARMAT to communicate your personal data to a previously designated third party. As soon as CARMAT becomes aware of your death and in the absence of instructions from you, CARMAT undertakes to destroy your personal data, unless it must be retained for evidentiary purposes or to meet a legal obligation.

To exercise your rights, you may contact the Data Protection Officer whose contact details are provided above.

CARMAT has one month to respond to your request after its receipt, and a further two months to process it if it is complex. In some cases, you may be asked to provide proof of your identity by submitting a copy of a valid identity document.

If you do not receive a reply within one month, or after CARMAT has replied to your request to exercise your rights, you may submit a complaint to CNIL (French Data Protection Authority) at the following address: https://www.cnil.fr/fr/adresser-une-plainte.

Information on cookie management

For details on the management of cookies by our website, please refer to our cookie management policy.

A cookie is a small file stored on your computer allowing you to move from one web page to another while retaining your browser settings.

When browsing the carmatsa.com website, you can decide whether or not to allow statistical and advertising cookies to be placed on your computer via a banner displayed when you log in for the first time. If you choose not to accept cookies, your visit to our website will not be affected.

Links to third-party website

The carmatsa.com website may contain links to social media platforms operated by persons or organizations over which the company has no control.

As such, CARMAT shall not under any circumstances be held liable for the manner in which your data is stored or used on these third-party servers. We advise you to read the applicable personal data protection policy of each third-party website you access through our website to understand how your personal data will be used.

CARMAT is likely to modify this personal data protection policy if necessary. It has been previously validated by our DPO before its distribution.

Possible changes to the personal data protection policy

This Personal data protection policy may change at any time, in particular to adapt to current legislation or for the purposes of new data processing operations carried out by CARMAT. Any changes or updates will be posted on this page so that users may be kept informed. It is advisable to regularly review the current version available.

Published on 03/20/2023