PRIVACY NOTICE
Privacy Notice
Last update: May 2022
Mérieux NutriSciences is fully committed to respecting privacy and protecting personal information.
The purpose of this Privacy Notice is to explain how Mérieux NutriSciences (MXNS) entities collect, use, protect, disclose and store your Personal Data. This Privacy Notice also provides information about your rights and how to exercise them.
1. DEFINITIONS
Cookie: means a small piece of data (text file) that a website, when visited by a user, asks your browser to store on your device. Such text files may be necessary to allow you to navigate on the website, or may be used to set up your preferences, perform statistics or marketing activities.
Data controller: means the person or body which determines the purpose and means of the data processing.
Personal Data collected through this Site is processed by Mérieux NutriSciences Corporation, acting as MXNS Data Controller.
Contact details for Mérieux NutriSciences Corporation:
401 N. Michigan Ave. Ste. 1400
Chicago, IL 60611, United States
dpo@mxns.com
Data Protection Legislation: means any national legislation relating to the protection of Personal Data applicable to this Privacy Notice or regional one as the California Consumer Privacy Act of 2018 (CCPA) or European Regulation (EU) 2016/679 on the protection of Personal Data (GDPR).
Data processor: means the person or body which processes data on behalf of, on instructions from and under the authority of a Data Controller.
Mérieux NutriSciences: means Mérieux NutriSciences Corporation with all its affiliated companies.
Personal Data: means data that identifies either directly or indirectly an individual. Some of these Personal Data may be considered as Sensitive Personal Data meaning that they may reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership and genetic data, biometric data processed for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
Site: means the website merieuxnutrisciences.com and all of its subdomains.
2. CATEGORIES OF PERSONAL DATA COLLECTED AND PURPOSES OF THE DATA COLLECTION
Personal Data collected by MXNS Data Controller depends on how you use this Site and related functionalities and which information you provide to Mérieux NutriSciences:
Device information – Through each connection to the Site, MXNS Data Controller, or third parties on its behalf, may collect and store information about your device and your activities on the Site (through Cookies for instance). This information will be treated as “Personal Data” when it may be associated with an identified or identifiable individual (see the tab “Cookies Management” for more information).
Contact us, online surveys and subscriptions – Through your participation to online surveys and polls, your request for further information on MXNS Data Controller including marketing and advertising materials, further information application forms, your subscription to newsletters or to any application form or similar inquiries, MXNS Data Controller may collect Personal Data that you have agreed to provide or that is needed to provide or improve its services, i.e.:
- Your Identity information (first name, last name, email address, gender, postal address, or phone number) used to identify you and provide the services you requested,
- Your Location information: used to adapt information depending on where you are located,
- Or any other information you agree to submit.
Sensory studies – If you apply for participating in sensory studies performed by Mérieux NutriSciences, MXNS Data Controller may also collect some of your Sensitive Personal Data to achieve the sensory studies you are interested in participating in. MXNS Data Controller will only process Sensitive Personal Data with your explicit consent to the processing of those Sensitive Personal Data for the disclosed specified purposes or, if necessary for carrying out obligations and exercising specific rights for you or MXNS Data Controller in the field of employment and social security and social protection law.
3. LEGAL BASIS OF THE PROCESSING
The legal basis for the processing of your Personal Data is either:
Your consent: When you provide MXNS Data Controller with your Personal Data, you consent to it using your Personal Data to carry out the purposes identified to you on its Site. With your consent, you give MXNS Data Controller permission to process your Personal Data in a particular manner. For example, using your email address to send you newsletters.
Performance of a contract: MXNS Data Controller may process your Personal Data to fulfill its contractual obligations. Legal requirement: MXNS Data Controller may process your Personal Data to comply with legal and compliance obligations.
4. DISCLOSURE OF PERSONAL DATA
4.1. MXNS Data Controller may share your Personal Data with any service providers, subcontractors and agents that it may appoint to perform functions on its behalf and in accordance with its instructions, including payment providers, IT service providers, accountants, auditors and lawyers to achieve the purpose for which you have provided us with your Personal Data.
4.2. Under certain circumstances, MXNS Data Controller may have to disclose your Personal Data to authorities to respond to any legal requirements under applicable laws, for example, as part of anti-money laundering, processes or protect a third party’s rights, property, or safety or to enforce its Terms and Conditions.
4.3. MXNS Data Controller may also share your Personal Data in connection with, or during negotiations of, any merger, sale of assets, consolidation or restructuring, financing, or acquisition of all or a portion of its business by or into another company after the signing of a non-disclosure agreement with such other company.
5. INTERNATIONAL DATA TRANSFERS
Mérieux NutriSciences will always protect your Personal Data in accordance with this Privacy Notice, wherever it is processed.
Information for users located in the European Economic Area (EEA)
MXNS Data Controller being part of the worldwide Mérieux NutriSciences Corporation group, your Personal Data may be disclosed to all its affiliates or Data Processors located or not within the EEA, including the United States, to provide its best services.
MXNS Data Controller may transfer your Personal Data to stakeholders based in countries outside the (EEA) that have different levels of data protection laws. If Personal Data is transferred outside the EEA, the transfer is done through standard data protection clauses adopted by the European Commission or based on adequacy decisions as adopted by European Commission to provide safeguards for Personal Data transferred.
6. HYPERLINKS
The Site may contain hyperlinks to other websites of interest. Once you have used these hyperlinks to leave the Site, you should note that Mérieux NutriSciences does not have any control over that other website.
Therefore, Mérieux NutriSciences cannot be responsible for the protection and privacy of any information that you provide whilst visiting such websites and such websites are not governed by this Privacy Notice. You should exercise caution and look at the Privacy Notice applicable to the website in question.
7. YOUR RIGHTS
Under the relevant Data Protection Legislation, you may have the following rights to your Personal Data:
Right of access: You may request access to your Personal Data.
Right to rectification: You may request the rectification of inaccurate or incomplete Personal Data.
Right to erasure (“Right to be forgotten”): You may request the deletion of your Personal Data if certain grounds stated in the Data Protection Legislation are met. However, please note that in order to comply with certain legal obligations, MXNS Data Controller may decline your request or keep certain information.
Right to restrict the processing of Personal Data: You may request the restriction of how MXNS Data Controller uses and processes your Personal Data. However, please note that in order to comply with certain legal obligations, MXNS Data Controller may decline your request or still keep certain information.
Right to data portability: You may request a copy of your Personal Data in a commonly used format to transmit those Personal Data to another company only where the processing of your Personal Data is based on your consent or on the performance of a contract and is carried out by automated means.
You may exercise these rights by sending your request by email to dpo@mxns.com and MXNS Data Controller will make its best efforts to deal with the request as soon as practicable. According to Data Protection Legislation, MXNS Data Controller reserves the right to not comply with your request and will always state the reason why.
Right to lodge a complaint with a supervisory authority: If you are not satisfied with the way we handle your rights, you have the right to lodge a complaint with a supervisory authority in the country you are located in or in the country of the alleged breach if you consider that the processing of Personal Data infringes the Data Protection Legislation.
For information, any subscription to a newsletter may be canceled, at any time, by sending an e-mail to dpo@mxns.com.
8. RETENTION OF YOUR PERSONAL DATA
MXNS Data Controller will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Notice or to comply with legal obligations. Upon the expiry of said period, your Personal Data will be deleted, as required by the applicable regulation.
9. DATA PROTECTION OFFICER
If you have any question, concern or complaint about this Privacy Notice, please contact MXNS Data Protection Officer at:
Email address: dpo@mxns.com
Postal address: Mérieux NutriSciences Corporation
Attn: DPO
401 N. Michigan Ave. Ste. 1400
Chicago, IL 60611, United States
10. SECURITY
MXNS Data Controller has put in place reasonable technical, organizational and structural measures to ensure an adequate level of protection of your Personal Data against unauthorized or unlawful processing and against accidental loss, destruction or damage. If your Personal Data is transferred to third parties, MXNS Data Controller will ensure that your Personal Data is processed only as instructed by it and will ensure that a data processor agreement with such third parties is signed providing the same standards each time it will be necessary.
Where MXNS Data Controller has given, or you have chosen a password which enables you to access parts of the Site, you are responsible for keeping this password confidential.
11. PROTECTION OF CHILDREN’S PRIVACY
Except for sensory studies and based on your express consent, Mérieux NutriSciences do not knowingly collect or maintain Personal Data from anyone under the age of 16. If you are under 16, please do not attempt to register for the Services or send any Personal Data to us.
12. PRIVACY NOTICE UPDATES
MXNS Data Controller may update this Privacy Notice and any updates will be posted here. The updated Privacy Notice will apply as from that date of revision. Therefore, you are advised to check back regularly to stay informed about our Privacy Notice.