1. Introduction

Gensensor (« we, » « our, » or « us ») is committed to protecting the privacy of visitors to our website. This Privacy Policy outlines how we collect, process, store, and protect personal data in compliance with the General Data Protection Regulation (Regulation (EU) 2016/679, « GDPR »).

By using our website, you consent to the collection and use of your personal data as described in this Privacy Policy.

2. Data Controller

The entity responsible for processing personal data collected through this website is:

Gensensor
Gensensor, Nantes Biotech 22 Bd Benoni Goullin 44200 Nantes
marketing@gensensor.com

3. Categories of Data Collected

We collect and process the following types of personal data:

• Information provided via contact forms (e.g., name, email address, company name, job title, phone number).
• Contact information may be collected through webinar registration forms,
• Data related to requests for information, event registrations, or webinar participation, including for access to video recordings.
• Technical and navigation data (e.g., IP address, browser type, pages visited), collected via cookies in accordance with our Cookie Policy.

We do not collect sensitive personal data unless expressly required for legal or regulatory purposes and with explicit consent.

4. Purpose and Legal Basis for Processing

Personal data collected through our website is processed for the following purposes:

• Responding to inquiries and providing requested information (Article 6(1)(b) GDPR – performance of a contract or pre-contractual measures).
• Registering and managing participation in webinars and events (Article 6(1)(b) GDPR).
• Business development and outreach communications, including sending marketing emails about our products, services, and industry events (Article 6(1)(a) GDPR – consent, or Article 6(1)(f) GDPR – legitimate interest in business development).
• Ensuring website security and functionality (Article 6(1)(f) GDPR – legitimate interest in maintaining website security).
• Compliance with legal and regulatory obligations (Article 6(1)(c) GDPR – legal obligation).

Users may withdraw their consent to marketing communications at any time by following the unsubscribe link in emails or contacting us directly.

5. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, subject to legal and regulatory retention requirements. Data will be securely deleted or anonymized when no longer needed.

6. Data Sharing and Third-Party Processing

We do not sell or share personal data with affiliated companies or business partners. However, personal data may be shared with:

• Service providers such as email marketing platforms and Customer Relationship Management (CRM) systems (e.g., HubSpot) to facilitate communication and manage customer interactions.
• Regulatory authorities or law enforcement agencies when required by law.
• IT and security service providers to ensure website functionality and security.

All third-party processors are contractually bound to process data in compliance with applicable data protection regulations.

7. International Data Transfers

Personal data may be transferred outside the European Economic Area (EEA), including to countries that do not provide an adequate level of data protection as recognized by the European Commission. In such cases, we ensure appropriate safeguards, such as:

• Standard Contractual Clauses approved by the European Commission.
• Transfers to entities certified under the EU-U.S. Data Privacy Framework (if applicable).
• Binding corporate rules or other legally recognized mechanisms ensuring adequate protection.

8. Data Subject Rights

Under the GDPR, users have the following rights regarding their personal data:

• Access: Request confirmation of whether we process personal data and obtain a copy of such data.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of personal data where legally permitted.
• Restriction: Request limitation of processing in certain circumstances.
• Objection: Object to processing based on legitimate interest, including direct marketing.
• Portability: Request transfer of personal data to another controller where technically feasible.
• Withdraw Consent: Withdraw previously given consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, users may contact us at marketing@gensensor.com . Users also have the right to lodge a complaint with a data protection authority if they believe their rights have been violated.

9. Security Measures

We implement technical and organizational measures to ensure the security and confidentiality of personal data, preventing unauthorized access, disclosure, alteration, or destruction.

10. Policy Updates

We may update this Privacy Policy periodically to reflect changes in legal requirements or business practices. Users will be notified of significant changes where required.

For further information or inquiries about this Privacy Policy, please contact us at marketing@gensensor.com