Statement on the processing of your personal data

Last modified/updated: 27 December 2021

When you visit our "Before SMA" website, we process certain personal data about you.

As the person responsible for the site, the Centre Hospitalier Universitaire of Liège (CHU) is committed to ensuring that the processing of personal data carried out on https://www.beforesma.com complies with the General Data Protection Regulation (GDPR).

This statement describes our practices regarding the collection, use, maintenance, protection and disclosure of personal data that we may collect from you or that you may provide when visiting our website or communicating with us, including via online forms. This statement applies to personal data collected through our website, e-mail or electronic communications related to the website, and offline activities and communications, regardless of the country in which you are located.

Purpose of the treatment

Aims

The "Before SMA" website is an informative and collaborative website for child-neurologists concerned with the treatment of spinal muscular atrophy (SMA).

The purposes for which the "Before SMA" website processes personal data are as follows:

• The preparation and provision of information brochures on SMA;
• The preparation and provision of scientific articles on the SMA;
• The publication of contact forms (webforms) and calls for contributions (consultations);
• Use of your contact data to identify you and answer your question or request;
• Technical administration in conjunction with service providers (third-party application maintenance, hosting);
• Management of the site's security (equipment and security logs);
• The production of statistics on the audience and use of the site.

Legal basis

The legal basis for processing personal data depends on the purpose of the processing of your data.

Types of data processed

Depending on the purpose of the processing, the categories of data collected and processed are the following:

• Identification data (surname, first name);
• Data relating to professional life (profession, specialities, place(s) of practice, other);
• Contact data (professional and/or private e-mail address, other);
• Data relating to the purpose of the request and its follow-up;
• Data included in the online form;
• Data relating to the management of publications;

These data are provided by website users and contributors to publications.

The data collected (in particular via cookies) during browsing for the purpose of measuring the audience of the websites and the use of the online services is optional (see Cookies Policy).

Data collected for other purposes are collected on a mandatory basis, unless - in the case of direct collection - otherwise stated in the relevant form or on the relevant digital platform.

The processing does not involve automated decision-making.

People involved

The data processing concerns :

• The staff in charge of publishing content (belonging to the CRMN - CHU de Liège team);
• The staff in charge of the technical administration of the website (the company Expansion);
• The users of the website, as well as third parties, identified in the publications.

Recipients of the data

Depending on their respective needs, the following are recipients of all or part of the data

• The staff in charge of publishing content (belonging to the CRMN - CHU de Liège team);
• The staff in charge of processing requests received via the contact forms;
• Users of the website.

The publications are likely to be accessible, due to their presence on the Internet, outside the European Union.

Retention period

Identification data, contact details and any other data communicated to us via the login form or an exchange of e-mails are kept for 3 years.

Log data is kept for 6 months.

The data necessary for the production of statistics on the audience and use of online services are kept for 25 months in a format that does not allow people to be identified by their IP address, and include an identifier (relating to the cookie) kept for a maximum of 6 months unless the person concerned objects.

Security

Technical and organisational measures are taken to ensure an adequate level of security and protection and to protect personal data against accidental, unauthorised or unlawful access, disclosure, modification, loss or destruction.

Your rights regarding your data

If you have a complaint, question or concern about how we use your personal data, contact our DPO.

Ghislaine DUMONT

Déléguée à la protection des données

Service Juridique du CHU de Liège, Avenue de l’Hôpital 1, CHU de Liège, Sart-Tilman, 4000 Liège

Tel: +32 4 366 78 29, Fax: +32 4 366 70 07, dpo@chuliege.be 

You can also contact the person directly involved in managing the content of the site:

Tamara DANGOULOFF

CRMN Liège, Boulevard du XII de Ligne 1, CHR la Citadelle, 4000 Liège,tamara.dangouloff@uliege.be

If you contact us in order to exercise your rights, we will reply within 1 month. In exceptional cases, this period may be extended (up to a maximum of 3 months), but we will give you the reason for this within 1 month. Whether or not you can exercise your rights depends on the processing and the legal basis.

Always make sure that you clearly state which right you wish to exercise and how you wish to receive the information (e.g. by e-mail, by post, verbally, ...). Bear in mind that in some cases we need additional information. We want to make sure that we are helping the right person.

Access rights

You have the right to ask us about the personal data we hold about you. We can provide you with a copy free of charge, but this is not possible for all documents. We also want to respect the rights and freedoms of others.

Right of rectification

Do you think that your data is not accurate or up-to-date? You have the right to ask us to correct it.

Right to object

You have the right to ask us to stop processing your personal data.

Right to restrict processing

You can ask us to restrict the processing of your personal data, for example when we are checking the accuracy of your personal data.

Right to deletion

You have the right to ask us to delete your personal data. If we are legally obliged to retain certain personal data, we cannot comply with this request.

Right to withdraw your consent

In case of processing of personal data based on your consent, this consent can be withdrawn.