LEGAL NOTICE AND DATA PROTECTION POLICY YEB ATLAS WEB

You are currently connected to the site https://yeb-cenir.icm- of the Brain and Spinal Cord Institute ("Brain Institute"). Use of this site is subject to compliance with applicable laws and the general conditions of use which can be found on the home page.

Article 1 - LOGO

The logo of the Brain Institute - ICM has been registered with the National Institute of Industrial Property (INPI). This mark cannot therefore be reproduced without the authorization of the communications manager of the Brain and Spinal Cord Institute. Any use of the Brain Institute - ICM name or logo without authorization constitutes an infringement, henceforth punishable by penalties of up to three years' imprisonment and a fine of 300,000 euros in the event of prosecution.

Article 2 - COPYRIGHT

In application of the French Code of Intellectual Property and, more generally, of international treaties and agreements containing provisions relating to the protection of copyright, it is prohibited for any use other than private to reproduce, sell, distribute, broadcast, disseminate, adapt, modify, publish, communicate in whole or in part, in any form whatsoever, the data, presentation or organization of the Atlas WEB platform of the Institute of the Brain and Spinal Cord, or the protected works by copyright that appear on the said platform without the prior written permission of the Communication Manager of the Brain and Spinal Cord Institute.

Article 3 - PHOTOGRAPHIC CREDITS AND ILLUSTRATION RIGHTS

The photographs and illustrations visible on our platform are not free of rights. For any information, please contact us

Article 4 - SITE EDITOR

The site https://yeb-cenir.icm- is published by the Institut du Cerveau et de la Moelle épinière - Private foundation recognized as being of public utility by decree dated September 13, 2006, whose head office is located at 47 boulevard de l'Hôpital, 75013, Paris, France, represented by its Managing Director, Professor Alexis BRICE.

Director of publication: Jean-Louis DA COSTA - Communication and Development Director.

Article 5 - SITE HOST

The site is hosted in Dublin by the company Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg

Article 6 - PROTECTION OF PERSONAL DATA

  1. Personal data of the User: the data controller is the ICM. There is no subcontracting.
    • Responsibility for processing: he ICM ensures respect for the User's personal data by collecting only those strictly necessary for the purposes for which they are processed. This policy applies to data collected and processed as part of the Atlas Yeb application. The ICM undertakes to comply, as data controller, with the provisions of Law n ° 78-17 of 6 January 1978 as amended and the General Data Protection Regulation published in the official journal on 27 April 2016 and in in force since May 25, 2018.
      The ICM is represented by Alexis Brice, Managing Director.
      The ICM has appointed a Data Protection Officer.
    • Purpose of processing:all processing of personal data carried out by the ICM has specific, explicit and legitimate purposes.
      The personal data collected by the ICM allows connection actions and management of access rights.
    • Legal basis of processing: the processing of data collected on the site is based on the legal basis of consent.
      The User can withdraw his consent at any time.
    • Category of people who use the Services: researchers
    • Categories of data collected: all User data collected is as follows: Email, Log in / password.
    • The duration of the conservation :
      • Image data is kept for a period of 7 days before deletion.
      • Users' personal data is kept for a period of 1 year after deactivation of the account. Data relating to active accounts is kept.
    • Sharing of personal data with other organizations: The ICM only communicates the data it collects to its internal departments as well as, where applicable, to its service providers and their staff with regard to the execution. services which are entrusted to them and which they must carry out on behalf of the Brain Institute. All persons with access to User data are authorized and bound by an obligation of confidentiality.
    • Security and Data Processing: ICM attaches great importance to the security and integrity ofpersonal data. Thus, and in accordance with the GDPR, the ICM undertakes to take all the necessary precautions to preserve the security, integrity and confidentiality of data, and in particular to protect them against any alteration, destruction, loss, dissemination or unauthorized access, as well as against any other form of illicit processing or communication to unauthorized persons. Personal data will be processed by the ICM in a secure environment. They will only be used for the purposes for which the Use has entrusted them.
    • Transfer of data outside the European Union: personal data is hosted on computer servers located in Dublin by AWS. They will not be transferred outside the European Union. Rules ensuring the protection and security of this data have been put in place. They are available on request to the ICM.
    • Exercise of rights: In accordance with the European Regulation of April 27, 2016 (RGPD) and the Data Protection Act of January 6, 1978 as amended, the User can exercise his right of access, rectification, erasure and opposition on the data collected at any time. The User can exercise his right of limitation and portability. In addition, the User can also define directives relating to the retention, erasure and communication of his personal data after his death.
      To exercise their rights or for any question concerning the ICM's personal data protection policy, the User can send a request accompanied by a valid proof of identity to the attention of the Data Protection Officer :
      • through the rights request form, available by clicking here: https://icm-institute.org/fr/gerer-mes-donnees-personnelles/
      • by post: Institut du Cerveau, Data Protection Officer, Pitié-Salpêtrière Hospital, 47 boulevard deHôpital, 75013 Paris
      • by email: dpo@icm-institute.org
      • by phone on 01 57 27 47 56
      The ICM undertakes to respond within 30 days to all requests sent only on these 4 channels. The User also has the option of contacting the supervisory authority (the CNIL) if he is not satisfied with the follow-up that the ICM has reserved for his requests and / or the processing of his data:
      by post: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.
      by phone: 01 53 73 22 22.
    • Modification of the privacy policy: ICM reserves the right to change this Privacy Policy at any time to take into account changes in its practices as well as new regulations on the protection of personal data.
  2. IRM data of persons used and integrated by the User on the Application: The data controller is the User and the subcontractor is the ICM.
    • Responsibility for processing: the User ensures compliance with the data of the person from whom the IRM data originated by collecting only those strictly necessary with regard to the purposes for which they are processed. This policy applies to data collected and processed as part of the Atlas Yeb application. The User undertakes to respect, as data controller, the provisions of Law n ° 78-17 of January 6, 1978 as amended and the General Data Protection Regulation published in the official journal on April 27, 2016 and in in force since May 25, 2018.
    • Purpose of processing: all processing of personal data carried out by the User has specific, explicit and legitimate purposes.
      The data collected by the User allows the User to bring a 3D atlas of the basal ganglia (Atlas Yeb) on the data received, and alculate from this atlas of the masks of certain regions of brain nuclei
    • Legal basis of the processing: the processing of data collected on the site is based on the legal basis of the consent of the person from whom the IRM data originated and from which the User by guaranteeing that it has been collected for the purposes of the above described treatment:
      When importing their data into the solution, the user guarantees by checking a check box that they have collected the necessary consents for the processing of said data.
    • Category of people: People from clinical studies
    • Categories of data collected: all the data of the people collected are as follows: IRM data | Connection data
    • The duration of the conservation:
      • Image data is kept for a period of 7 days before deletion.
      • Users' personal login data are kept for a period of 1 year afterafter deactivation of the account. Data relating to active accounts is kept
    • Sharing of collected data with other organizations: None.
    • Security and Data Processing:
      The solution is hosted on the team's AWS account, and managed by the ICM CIO. The solution has an encrypted EFS as well as an SSL certificate deployed and maintained by the ICM CIO.
      The database is fully encrypted.
      Furthermore, the data processed is limited to the perimeter of the user who performed the processing and cannot be accessed from a third party account.
    • Data transfer outside the European Union: not applicable
    • Exercise of rights: In accordance with the European Regulation of April 27, 2016 (RGPD) and the Data Protection Act of January 6, 1978, as amended, the person from whom the IRM data originated may exercise their right of access, rectification, deletion and opposition on the data collected at any time. The person can exercise his right of limitation and portability. In addition, the User can also define directives relating to the retention, erasure and communication of his personal data after his death.
      To exercise their rights or for any questions concerning the ICM's personal data protection policy, the person from whom the IRM data originated can send a request accompanied by a valid proof of identity to the attention of the Delegate. to Data Protection:
      • through the rights request form, available by clicking here:
        https://icm-institute.org/fr/gerer-mes-donnees-personnelles
      • by post: Institut du Cerveau, Data Protection Officer, Pitié-Salpêtrière Hospital, 47 boulevard deHôpital, 75013 Paris
      • by email: dpo@icm-institute.org
      • by phone on 01 57 27 47 56
      The User agrees to respond within 30 days to all requests sent only on these 4 channels. The person from whom the IRM data are obtained also has the possibility to contact the supervisory authority (the CNIL) if he is not satisfied with the follow-up that the ICM has reserved for his requests and / or the processing of his data. :
      by post: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.
      by phone: 01 53 73 22 22.
  3. Management of cookies
    Use of cookies:
    A cookie is a small text file that a site sends to the browser cookie file on your computer's hard drive so that it can remember who you are. Typically, a cookie contains the name of the Internet domain it came from, its lifetime and a value, usually a unique random number. On this site, we use cookies of the type:
    • Session ID: A cookie allowing the management of connection actions integrated directly into the framework used (Django)
    • CSRF: Protection against attacks integrated directly into the framework used (Django)