Your data and your browser
Privacy policy
This page describes the currently observed operation of SOS Allergo’s public questionnaires. Legal information that must be confirmed by the project owner is clearly marked without assumptions.
Pre-publication document: every “TO BE COMPLETED” field must be completed and validated before production use.
Data controller
[TO BE COMPLETED — DATA CONTROLLER]
Purposes of processing
- Preparing for an allergy consultation.
- Helping the user collect and structure useful information.
- Generating a PDF summary locally at the user’s request.
Legal bases
[TO BE COMPLETED — LEGAL BASIS FOR EACH PURPOSE]
Data processed in the browser
Depending on the questionnaire and the user’s choices, the browser may process:
- identity information entered in the questionnaire;
- health data and information about symptoms, treatments or medical history;
- contextual information used to prepare for the consultation;
- files selected by the user and kept locally in the tab;
- the PDF generated locally from the information entered.
Local operation
- Answers to public questionnaires are processed in the browser and are not automatically sent to SOS Allergo.
- The content of selected files remains in the browser; where the questionnaire provides for it, only their names may appear in the summary.
- The PDF is created in the browser and downloaded only when requested by the user.
- As with any website, the web host may still receive technical connection data. Its configuration and retention must be confirmed with the host.
Browser storage
- Tab memory: answers, selected files and the PDF while it is being generated.
- sessionStorage: a temporary, single-use copy of answers during a language change, designed to expire after one minute.
- localStorage: interface preferences only, including easy display and the Yumi launcher appearance.
- No advertising tracker was identified on the audited public pages.
Retention periods
[TO BE COMPLETED — RETENTION PERIODS, INCLUDING TECHNICAL LOGS]
Recipients
[TO BE COMPLETED — RECIPIENTS OF TECHNICAL DATA AND ANY PROCESSORS]
Transfers outside the European Union
[TO BE COMPLETED — WHETHER DATA IS TRANSFERRED OUTSIDE THE EU AND APPLICABLE SAFEGUARDS]
Your rights
[TO BE COMPLETED — APPLICABLE RIGHTS AND HOW TO EXERCISE THEM]
Contact for exercising your rights
[TO BE COMPLETED — DATA RIGHTS CONTACT]
[TO BE COMPLETED — DATA PROTECTION OFFICER, IF APPLICABLE]
Complaint to the CNIL
After contacting the data controller, you may lodge a complaint with the French data protection authority (CNIL).
Lodge a complaint with the CNIL