As part of its missions, the service of health A student at the University of Grenoble Alpes processes your personal data. This notice informs you about the conditions for the collection, use, storage, and protection of your data, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR).
The service of health student operates within a shared framework accessible to students from several higher education institutions. The University of Grenoble Alpes, Grenoble INP-UGA, Sciences Po Grenoble -UGA and ENSAG-UGA are qualified as
joint controllers within the meaning of Article 26 of the General Data Protection Regulation (GDPR). Together they determine the purposes and methods of processing.
Purposes of processing
The service of health student processes your personal data in the context of the following missions:
- Main purpose:
- Prevention, care, consultations and medical monitoring of students.
- Sub-purposes:
- Appointment management.
- Medical and administrative monitoring (consultations, prescriptions, care).
- Psychological support.
- Marital, family and sexual support.
- Nutritional and sophrology support.
- Screening for sexually transmitted infections (STIs).
- Billing of care acts and electronic transmission to Health Insurance and supplementary insurance health .
- Transmission of the medical file to the student for delivery to the attending physician.
- Cooperation with the judicial authority in the context of a requisition of medical records.
- Prevention and promotion actions health with students.
- Health monitoring, studies and research relating to the health student.
Legal bases for processing
Your data is processed to enable the service to health student to fulfill its public interest mission, in accordance with Article 6.1(e) of the GDPR.
Origin of the data
Data is collected:
- Directly with you during your procedures and consultations at the service of health student.
- Indirectly via extractions from the school information system (Apogée).
Categories of data processed
- Identity, marital status, contact details.
- Information related to education and professional life.
- Financial information (if applicable, for certain aid or care).
- Data from health .
- Data relating to sexual life or sexual orientation.
- National Identification Number (NIR).
Some of this data is optional, but its absence may prevent access to certain services or care.
Data recipients
Your data is only accessed by authorized persons bound by professional or medical confidentiality (article L1110-4 CSP). Access to data health is strictly limited to the missions of each (article R1110-1 CSP).
Recipients may include:
- The professionals of health of the service of health student.
- The administrative staff of the service of health student.
- The shared IT service (hosting and maintenance of medical records software).
- The subcontractor Aatlantide (appointment scheduling and remote transmission software).
- The organizations of health : CPAM, mutual insurance companies, laboratories, treating physicians.
- Judicial authorities (within the strict legal framework).
Transfer of data outside the European Union
No transfer of your personal data is made outside the European Union.
In the event of a change of service provider involving such a transfer, appropriate guarantees (Standard Contractual Clauses, Binding Corporate Rules, impact analysis) will be put in place in accordance with the GDPR.
Data retention period
Your data is kept
for a period of 20 years from your last registration, in application of article R1112-7 of the Code of health public.
The data is only kept for a period strictly proportionate to the purposes for which it was collected.
Your rights
In accordance with the GDPR, you have the following rights:
- Access : any person may view all information concerning them and its origin and obtain a copy. This right includes the right of access to your medical file , in accordance with the provisions of the Code of health public.
- Of rectification : possibility to require that the data be rectified, completed, updated or deleted.
- Limitation : You can ask the organization to temporarily freeze the use of some of your data. This right can be used in particular during the processing of your request to exercise another right.
- Of opposition : You have the right to object to your data being used by an organization for a specific purpose, highlighting a particular situation.
Exercising your rights
For any questions or to exercise your rights, you can contact the Data Protection Officer (DPO) at the following address:
dpo@univ-grenoble-alpes.fr
Complaint to the CNIL
If you believe that your rights are not being respected, you can file a complaint with the CNIL:
National Commission for Information Technology and Civil Liberties
3 Place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07
www.cnil.fr
