1. Data controller

2. Introduction

Protherium attaches great importance to the protection of your personal data. This privacy policy aims to inform you clearly and transparently about:

• the personal data we collect;
• the purposes for which it is processed;
• your rights regarding your data;
• the security measures in place.

This policy applies to all users of the website https://protherium.fr.

3. Personal data collected

3.1 Data collected directly

Contact form: name, email address, message.

Spontaneous application (Careers page): name, email address, message and, where applicable, CV and attached documents.

3.2 Data collected automatically

Browsing data: IP address, browser type, operating system, pages viewed and visit duration, referring site, date and time of connection.

Cookies and trackers: in accordance with the regulations, some cookies are only set with your consent. For more information, see section 11 below.

4. Purposes of processing

We use Google Analytics (via Google Tag Manager / Site Kit) to understand how visitors use the site. These measurements are only enabled with your consent.

5. Recipients of the data

5.1 Internal recipients

• Protherium staff authorised to handle the requests received
• Management (for applications)

5.2 External service providers

• Website host: OVH SAS
• Google: audience measurement (Google Analytics, Google Tag Manager) and maps (Google Maps)
• Email delivery service used by the site: Microsoft 365 (Microsoft Outlook / Exchange Online mail service), which delivers the messages sent via the contact form
• Cookie consent management solution: Complianz (WordPress plugin)

5.3 Third parties

• Competent authorities where required by law
• Scientific, medical or industrial partners (only with your agreement)

Important: we do not sell, rent or exchange your personal data with third parties for commercial purposes.

6. Transfers outside the European Union

Some of our service providers (in particular Google and Microsoft) may process data outside the European Union. In that case:

• we ensure that appropriate safeguards are in place (adequacy decision, standard contractual clauses, Data Privacy Framework, etc.);
• the transfer is carried out in compliance with the GDPR;
• you can obtain a copy of these safeguards by contacting us.

7. Retention period

We keep your personal data only for as long as necessary for the purposes pursued:

At the end of these periods, your data is deleted or irreversibly anonymised.

8. Data security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, damage and unauthorised disclosure, including:

• encryption of exchanges (SSL/TLS);
• secure authentication and restricted access to data (least-privilege principle);
• regular backups;
• procedures in the event of a data breach.

9. Your rights

Under the GDPR, you have the following rights:

• Right of access: obtain confirmation that data concerning you is being processed and receive a copy of it.
• Right to rectification: request the correction of inaccurate or incomplete data.
• Right to erasure: request the deletion of your data when it is no longer necessary, when you withdraw your consent, when you object to the processing, when it has been processed unlawfully or when the law requires it. You may also request its deletion at any time once you no longer have an ongoing exchange with us.
• Right to restriction of processing: request a temporary freeze on the processing of your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object at any time to processing on legitimate grounds, or to direct marketing.
• Withdrawal of consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Post-mortem directives: define what happens to your data after your death.

Exercising your rights: write to us by email at contact@protherium.fr or by post at: 2 allée d’Evry, 54600 Villers-lès-Nancy. We undertake to reply within one month of receiving your request. For security reasons, a copy of an identity document may be requested.

10. Right to lodge a complaint

If you believe that the processing of your personal data infringes the regulations, you may lodge a complaint with the CNIL, the French data protection authority:

11. Cookies and trackers

11.1 What is a cookie?

A cookie is a small text file placed on your device (computer, smartphone, tablet) when you visit a website.

11.2 Types of cookies used

Strictly necessary cookies (exempt from consent): session and security cookies, and cookies that remember your consent choices.

Cookies requiring your consent:

• audience measurement cookies: Google Analytics (page views, visit duration).

11.3 Managing your preferences

You can change your cookie choices at any time:

• via the consent banner, shown on your first visit, then via the “Cookies” button at the bottom of the screen, which lets you change or withdraw your choice at any time (Complianz tool);
• via your browser settings.

Refusing cookies may limit some features of the site.

11.4 Cookie retention period

11.5 Third-party cookies

Our site may include third-party services (maps, fonts, videos, social networks) that set their own cookies. We have no control over these cookies: please consult these third parties’ privacy policies.

12. External links

Our site may contain links to external websites. We are not responsible for their privacy practices and encourage you to read their policies.

13. Minors’ data

Our site is aimed at a professional audience and is not intended for persons under 16. If we discover that a minor has provided us with personal data without parental consent, we will delete it without delay.

14. Changes to this policy

We reserve the right to modify this privacy policy at any time. Changes take effect as soon as they are published on this page. In the event of a substantial change, we will inform you by a visible notice on the site.

15. Contact

For any question about this policy or the processing of your personal data:
Email: contact@protherium.fr
Address: 2 allée d’Evry, 54600 Villers-lès-Nancy

16. Glossary

• Personal data: any information relating to an identified or identifiable natural person.
• Processing: any operation performed on personal data (collection, recording, storage, use, transmission, deletion, etc.).
• GDPR: General Data Protection Regulation (EU) 2016/679.
• Data controller: the person who determines the purposes and means of the processing of personal data.
• Legal basis: the legal ground permitting the processing (consent, contract, legal obligation, legitimate interest, etc.).

Last updated: 14 October 2026