Cookie policy

Version of December 5th, 2023

During your visits to the Website: www.bioptimus.com, cookies may be stored on your terminal.

This Cookie Policy aims to inform you of i) the ways in which we use cookies on your terminal, ii) their purposes and iii) your rights regarding the use of these cookies.

This Cookie Policy is compliant with the requirements of the General Data Protection Regulation (EU) 2016/679 of April 27th, 2016 (“GDPR”) regarding the use of cookies.

This Cookie Policy is applicable by the sole fact of its publication on our website and does not replace our Privacy Policy.

What are cookies?

Cookies are small text files stored and/or read by your browser on your terminal when you are visiting the Website. These cookies allow us to store information and identify the terminal you are using.

Cookies are used on various platforms (website, e-mail, mobile applications, other).

They have two main purposes: enabling the proper functioning of the website through the study of technical statistics or of the identification of error messages; improving your experience by configuring the use of the environment according to your preferences.

Cookies allow us to process some of your personal data, such as, but not limited to your IP address or the date and time of your connection.

What cookies do we use?


Access to personal data that we collect through cookies is limited to both internal and external recipients: internally, personal data is only accessible to authorized departments of Bioptimus, if necessary; externally, personal data is only accessible to our technical service providers who can place cookies on your terminal and/or administer them and access the related personal data.

Retention period

We comply with the requirements set out by the French National Commission for Data Protection and Liberties (“CNIL”) regarding data retention periods. As such, we do not exceed a retention period of thirteen (13) months from the date you agree to let us store cookies on your terminal.


You have the right to consent to the use of any cookies studying your behavior (cookies linked to audience measurement operations). However, your consent is not required for cookies necessary for technical use.

The collection of your consent takes the form of an information banner with an acceptance button and the option to click on the link in order to read the policy.

Cookie settings

If you would like to change your consent to accept or refuse cookies on this website, hover your cursor over the bottom left-hand corner of the browser viewport. A button will appear titled ‘Manage consent’. Click this button to raise the cookie preferences banner and change your cookie settings.

You have the right to set the use of cookies on your terminal in order to accept or refuse all or part of the cookies that may be read or stored on your terminal, regardless of their nature and origin.

To ensure that you have full control over the cookies stored in your terminal, you can check your browser settings.

Most browsers allow you to choose or refuse all or part of the cookies, or even to select only those you wish to keep. To that end, each browser has their own specificities, and the settings remain relatively accessible via the « Help Menus » of each of them.

For example:

  1. Google Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=fr;
  2. Internet Explorer: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies;
  3. Mozilla Firefox: https://support.mozilla.org/fr/kb/activer-desactiver-cookies-preferences; https://support.mozilla.org/fr/kb/effacer-les-cookies-pour-supprimer-les-information;
  4. Opera: http://help.opera.com/Windows/10.20/fr/cookies.html

Bioptimus cannot guarantee the durability of these URLs, nor the quality of the information contained therein.

Third party cookies

Third party cookies may be stored by partners in order to identify your areas of interest through the products or services you are consulting on our website.

We do not control cookies that are stored on your device by third parties. Therefore, we invite you to read their own cookie policies for more information.

Either way, we reserve the right to audit these third parties to verify the correct application of the regulations applicable to third party cookies, but this right does not constitute an obligation or transfer of liability on our part.


In the event of regulatory changes or recommendations from the CNIL, we may modify this policy. You will be notified of any new policy before it takes effect.

Contact us

If you have any questions about this cookie policy, please do not hesitate to contact us via the contact form available at the following address: https://www.bioptimus.com/contact

Terms of use

Version of December 5th, 2023

This website (“Website”) is owned and controlled by Bioptimus (together, “Bioptimus” or “we”), a corporate company that develops foundation models, using new technologies and in particular artificial intelligence technologies, dedicated to medical and biological research.

Please read the Terms of Use carefully. Access to and use of the Website implies your knowledge and acceptance of such terms without reservation, limitation, or condition.

Legal notice

  • Website URL : www.bioptimus.com
  • Contact us: www.bioptimus.com/contact
  • Director of Publication: Mr. Jean-Philippe VERT, President
  • Publisher: Bioptimus, incorporated in France as a “société par actions simplifiée”, with an office located at 14/16 Bd Poissonnière, 75009 Paris, registered in the Paris commercial register under number 979 978 095
  • Website host: Webflow, Inc.

Access and service

Access to our Website is free of charge.

Some discrepancies might occur between the computer version of the Website and the mobile version of the Website.


We use our best efforts to ensure the reliability of our Website and to maintain access to the Website at all times. However, we may be required to momentarily suspend access to, or restrict the availability of all or parts of the Website for technical or business purposes. We do not guarantee permanent, full and uninterrupted access to the Website.

Telecommunication networks are not error-free. Therefore, we do not guarantee that the Website will be secure or free from errors, interruptions, dysfunctions, loss of data, saturation of the Internet network, failure of any material reception or communication lines, viruses or any other event impacting or resulting from the use of the Website.

We reserve the right to update or modify the Website in parts or in full, without any prior notice. Therefore, we cannot be held liable for any change made to the Website or its content.

The information and content published on the Website are intended to provide general information only. Your use of such information and content is done at your own risk.

You agree not to alter or disturb, in any way whatsoever, the normal functioning of the Website; and modify, reproduce, copy, distribute, disclose to third parties or derive commercial use or benefit from the materials on the Website without our prior written consent.

If you notice a malfunction or inappropriate content on the Website, please contact us immediately.

Personal data

To ensure the proper functioning of our Website and to get to know you better, we may collect personal data when you are using the Website.

When personal data is required, you are responsible for providing accurate and up-to-date information.

We particularly care about protecting your privacy and commit to ensuring the security and confidentiality of your personal data.

  • For further information on the processing of your personal data, please check reference our Privacy Policy here.


Cookies are small files that are left on your device while you browse the Website (such as the pages looked up, the date and time of access, etc.), which may be read whenever you access the same Website.

  • We use cookies for various purposes. Some cookies are necessary for technical reasons, while some enable a personalized experience for visitors. For further information on our use of cookies, please check out our Cookie Policy here.

Intellectual property

This Website is our exclusive property.

Visiting our Website does not constitute an assignment of rights of any kind. However, you have a right to personal use and a right to copy our content for private use only.

Any extraction or use of all or part of the information and content of the Website by permanent or temporary transfer or by any means or in any form whatsoever is illegal. All elements (texts, comments, books, illustrations, logos, trademarks, videos and images, without this list being exhaustive) displayed or cited on this Website are the exclusive property of their respective owners. In accordance with the French Intellectual Property Code, any use of all or part of said elements made from this Website without our express written consent is prohibited.


Please view our Credits page here.

Hypertext links

Certain parts of the Website link to external internet sites, and other external internet sites may link to the Website.

The hypertext links to external internet sites were included on the Website for the sole purpose of facilitating your browsing experience. Therefore, looking up any third-party websites remains your own decision and your sole liability. We are not responsible for the content of any external internet sites.

Third party services

We use third party applications on our website to help us with in-depth campaign reporting and insights about our website visitors. They can also be used to track conversions, retarget website visitors, and unlock additional insights about members interacting with our ads on social networks. These tags enable the collection of data regarding members’ visits to our Website, including the URL, referrer, IP address, device and browser characteristics, and timestamp. This data is encrypted, the IP addresses are truncated, and members’ direct identifiers are removed within seven days in order to make the data pseudonymous. This remaining, pseudonymized data is then deleted within 90 days. The social networks do not share personal data with us.

  • You can control the use of your personal data for advertising purposes through your account settings on these social networks and websites in accordance with their terms and privacy policies (please find here: LinkedIn privacy policy and X terms of services and privacy policy). We are not responsible for the information collection, use, disclosure or security policies or practices of other organizations, such as LinkedIn, X, Google, or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including with respect to any personal information you disclose to other organizations through or in connection with the service provided by Bioptimus.


We may amend the contents and information included on the Website as well these Terms of Use, particularly for purposes of compliance with any new applicable legislation and/or regulations and/or to improve the Website.

Any amendment shall be notified to you via the Website before becoming effective under these Terms of Use.  Unless the amendment requires your express approval, your continued use of the Website shall be deemed as your acceptance of the new Terms of Use.  

Case studies

You can subscribe to receive information about our case studies. Such a subscription is not considered as a commitment on our part.

Governing law

These Terms of Use are subject to French law.

Privacy policy

Version of December 5th, 2023

1. Recitals

The protection of individuals with regards to the processing of their Personal Data (as defined below) is a fundamental right that Bioptimus, takes very seriously.

Bioptimus processes Personal Data as part of its relations with its visitors, its prospects, partners, clients, employees, job applicants, contacts, investors, services providers, patients, contractors and any users of its website: www.bioptimus.com (the “Website”) (all together the “Individuals”).

Bioptimus is firmly committed to conducting its business in accordance with the applicable data protection regulations and, in particular, the General Data Protection Regulation (EU) 2016/679 of April 27th, 2016 (“GDPR”), which aims to protect individuals’ rights with regards to the collection, use, retention, transfer, disclosure and destruction of their Personal Data.

The purpose of this privacy policy (“Privacy Policy”) is to set forth the types of Personal Data Bioptimus may receive from Individuals’ interactions with Bioptimus notably through its media platforms. 

Bioptimus strives to ensure adequate protection of Individuals’ Personal Data and to preserve the protection and security of Individuals’ Personal Data, as well as inform and uphold Individuals on their rights.

What Personal Data Bioptimus is collecting and processing about Individuals? Why is Bioptimus processing Individuals’ Personal Data? What are the legal basis that entitled Bioptimus to do so? From what sources does Bioptimus collect Individuals’ Personal Data? Who are the authorized parties allowed to process Individuals’ Personal Data by Bioptimus? How does Bioptimus ensure the security and the protection of Individuals’ Personal Data? How long will Bioptimus keep Individuals’ Personal Data? What are Individuals’ rights regarding the processing made by Bioptimus on Individuals’ Personal Data? How can Individuals exercise their rights? 

Please read the following Privacy Policy carefully and note that the following definitions will apply to this Privacy Policy: 

  • Data Controller(s): Bioptimus.
  • Data Processor(s): natural person or legal entity who processes Personal Data on behalf of Bioptimus. 
  • Data Recipient(s): individual or legal entity who receives Personal Data from Bioptimus. Data Recipients may therefore also be employees of Bioptimus or of external entities (e.g. partners such as healthcare organizations or healthcare professionals, suppliers, services providers, clients, exhibitors, banks, agents etc.).
  • Data Subject(s): the Individuals.
  • Personal Data: refers to any information or pieces of information that can directly or indirectly identify a Data Subject, such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.

2. Objective

The purpose of this Privacy Policy is to meet the information obligation of Bioptimus under the GDPR (Article 12 to 14) and to document the rights of the Individuals regarding the processing of their Personal Data.

3. Scope

This Privacy Policy applies to all processing of Individuals’ Personal Data. 

Bioptimus makes every effort to ensure that Personal Data is processed within the framework of strict internal governance. That being said, this Privacy Policy only covers Personal Data of which Bioptimus is the Data Controller and therefore not any processing that may be established or performed outside the scope of governance specified by Bioptimus.

The processing of Personal Data may be managed directly by Bioptumus or via Data Processors specifically designated by Bioptimus.

This Privacy Policy is independent of any other document that may apply in the context of the contractual relationship between Bioptimus and the Individuals. Specific privacy and data protection information’s notices and/or consent or non-opposition form, will be communicated to the concerned Individuals if necessary, regarding specific situations where Bioptimus may process Personal Data.

4. Purposes

Bioptimus does not process any Personal Data of Data Subjects if not relating to the Personal Data collected by or for its departments or processed in association with its departments and if it does not comply with the general principles of the GDPR. 

Bioptimus may process Personal Data for the following purposes:

Bioptimus’ business and contractual relationship purposes

  • Management of contractual relationship, management of contact relationship, and business development, including without limiting the foregoing for identifying potential contractors, partners, service providers, clients.
  • Execution and management of the agreements concluded with Bioptimus’ academic partners (e.g. healthcare organizations such as hospitals, universities, research centers, healthcare professionals), Bioptimus’ non-academic partners (e.g. tech companies, pharma companies, biotech companies or other corporate partners), Bioptimus’ service providers and/or Bioptimus’ suppliers. 
  • Implementation and management of invoicing and accounting purposes.
Research and developments activities
  • Implementation and management of research and developments activities, including carrying out market research, scientific studies, whether clinical studies, observational studies, post-market studies, or any other kind of scientific research projects (including projects using data already available at Bioptimus or at Bioptimus’ partners for research purposes, and projects where additional data is derived from available human biological samples available at Bioptimus’ partners).
Compliance with legal, regulatory, industrial best practices and ethical obligations applicable to Bioptimus
  • Design, development, manufacturing & sales of software as medical devices in support of diagnosis, prognosis, screening in pathology (including activities of vigilance, post-market surveillance, ...). 
  • Administrative formalities, registration, declarations, or audits, including but not limited to those applicable:
    - to the management of the recruitment;
    - in the frame of the relationship between Bioptimus and health care professionals and/or health care organizations and/or academic institutions and/or hospitals in the countries where Bioptimus operates. 
  • Compliance with the requirements of the industry standards applicable to Bioptimus and with any applicable Bioptimus’ policies. 
  • Ensuring the security of Personal Data collected and processed by Bioptimus. 

Marketing purposes

  • Implementation and management of marketing campaigns, generally via email, SMS, phone, etc. and media advertising.
  • Implementation, communication and management of its newsletter. 
  • Implementation and management of targeted advertising and segmentation. 
  • Organization and management of events, in which Bioptimus participates or which Bioptimus is a sponsor. 
  • Implementation and management of social selling campaigns (including the collection of data relating to registrations, posts, likes, replies, forwards, comments, opinions, etc.).
  • Implementation and management of surveys and statistics.

Management of the recruitments

  • Management of the job advertisement and the job application, including the management of the pre-contractual relationship between Bioptimus and the job applicant.

Management of the Website purposes

  • Implementation and management of the Website (case studies, contact forms, etc.).

Protect Bioptimus’ rights and interest

  • Management of the investigation, pre-litigation, and litigation.
  • Protection of Bioptimus’ rights or those of third parties, including intellectual property rights, privacy, safety, and property.
  • Protect Bioptimus against any actions or omissions which are likely to cause harm to Bioptimus, including fraudulent actions or omissions.

Although the list is intended to be as exhaustive as possible, any new use or modification or withdrawal of any existing processing will be notified to the concerned Data Subjects by the publication of new versions of this Privacy Policy on the Website. Bioptimus invites the Data Subjects to check online this Privacy Policy on a regular basis to be aware of this new use, modification, or withdrawal of any existing processing.

Bioptimus is granted by the Individuals with a right to process their Personal Data for the aforementioned purposes. However, any data supplemented by the processing and analysis of Bioptimus, otherwise known as supplemented data, shall remain the exclusive property of Bioptimus (usage analysis, statistics, etc.).

5. Lawfulness of the processing conducted by Bioptimus

The purposes for which Bioptimus process Personal Data described above are based on the legal basis described below.

The processing is necessary for the purpose of the legitimate interest of Bioptimus or a third party in the meaning of the GDPR

When Bioptimus processes Personal Data for its legitimate interest, Bioptimus shall take into account Data Subject’s fundamental rights and interest to assess if the legitimate interests pursued by Bioptimus do not create an imbalance with Data Subject’s fundamental rights and interest. 

For example, the processing of Personal Data by Bioptimus is based on its legitimate interest for the following purposes:

  • Protect Bioptimus from fraudulent actions or omissions;
  • Implementation and management of research and developments activities;
  • Management of contact relationship, and business development;
  • Sending newsletters about Bioptimus to healthcare professionals and/or contractors with whom Bioptimus have pre-existing relationships in the framework of their professional activities.
The processing is necessary for the purpose of the compliance with the legislation applicable to Bioptimus

Bioptimus may process Personal Data in order to comply with legal obligations applicable to Bioptimus. 

For example, the processing of Personal Data by Bioptimus may be based on the compliance with legal obligation applicable to Bioptimus for the following purposes:

  • Monitoring the adverse event or devices deficiencies of marketed products;
  • Transparency regarding Bioptimus’ relationship with healthcare professionals and/or healthcare organizations or academic institutions or hospitals;
  • Financial and tax reporting. 

The Data Subject has given consent of the processing of its Personal Data for one or more specific purposes

Bioptimus may process Personal Data for one or more specific purposes for which the Data Subject concerned will have clearly expressed its consent for the processing of its Personal Data for these purposes. 
For example, the communication to Bioptimus’ newsletter to the Data Subject concerned is based on their consent.

The processing is necessary for the purpose of the performance of a contract

Bioptimus may process Personal Data for the execution of a contract between the Data Subjects (or their employers) and Bioptimus.

For example, the processing of Personal Data by Bioptimus may be necessary for the performance of a contract for the following purposes:

  • Negotiation of contracts with Bioptimus’ partners, suppliers, service providers, clients;
  • Follow-up of Bioptimus’ contractual relationship with its partners, suppliers, service providers, clients.

The processing is necessary for reasons of public interest

When the applicable law of the Data Subject’s country entitles Bioptimus to do so, notably in the case of public interest, Bioptimus may process Personal Data of concerned Data Subjects.
For example, if in Data Subject’s country the law provides that Bioptimus may process Data Subject’s Personal Data in the area of public health to ensure a high standards of quality and safety of healthcare and medicinal products or medical devices, Bioptimus could process Data Subject’s Personal Data in the frame of scientific research projects aiming to improve the products marketed by Bioptimus or third parties or to develop new medicine products or medical devices.

The Personal Data that Bioptimus is processing about Data Subjects, includes a wide range of Personal Data and depends on Bioptimus' relationship with the Data Subjects, as well as the third parties with which Bioptimus is working, and which may provide Bioptimus with the access to Personal Data.

For example, Bioptimus may process the following Personal Data:

Non-technical Personal Data (depending on the circumstances)

  • Identity and identification (such as surname, first name, date of birth, pseudonym, client number, username, and password). 
  • Contact details (such as e-mail, postal address, phone number), notably for sending newsletters. 
  • Professional data, if applicable (notably the company name, function, as well as all the Personal Data related to candidate for a job offer such as the data related to the professional experiences and the education for the job application).
  • Bank details, if required.
  • Data relating to current contracts.

Technical Personal Data (depending on the circumstances)

  • Data Subjects internet browsing history and activity data (access times, page views, forms completed on the website, URLs clicked on, IP address, etc.). 
  • Technical information such as the type of browser and operating system Data subject uses or Data Subject’s device information (unique device identifier, hardware model, operating system and version, mobile network information).

In some cases, notably for its research and development activities, Bioptimus may need to process sensitive Personal Data, as defined by the Article 9 of the GDPR. Bioptimus takes the protection of this sensitive Personal Data and more broadly the protection of all the Personal Data very seriously and takes all necessary measures, whether contractual, technical or organization to preserve the protection, integrity, and confidentiality of such Personal Data. 

As provided above, specific privacy and data protection information’s notices and/or consent or non-opposition form, will be communicated to the concerned Data Subjects if necessary, regarding specific situations where Bioptimus may process their Personal Data.

6. Personal data sources

Personal Data is generally collected from Data Subjects directly (direct collection). 

Collection may also be indirect via specialized partners, clients, service providers and suppliers of Bioptimus, which are authorized to do so in compliance with their applicable law and in application of their own privacy and data protection policies.

In such cases, Bioptimus takes the greatest of care to ensure the quality of data it receives. If Data Subjects have any question related to the initial collection of their Personal Data by the partner, client, services provider, or supplier of Bioptimus, where applicable Bioptimus could invite Data Subjects concerned to contact them directly and/or to refer to their data protection policies.

7. Children's personal data

Bioptimus’s Website is not intended for children under thirteen (13) years old. Bioptimus does not knowingly process Personal Data from children under the age of thirteen (13) years old through Bioptimus’ Website. 

If a parent or a guardian becomes aware that his or her children has provided Personal Data to Bioptimus through Bioptimus’ Website, he or she should contact Bioptimus’ Data Protection Officer without delay to require the deletion of the Personal Data concerned in accordance with the applicable data protection laws. 

For more information on how to contact Bioptimus’ Data Protection Officer, please see Article 15 (“Data Protection Officer”) of this Privacy Policy.

8. Personal data recipients

Taking into account the purpose(s) for which Individuals’ Personal Data are processed, Bioptimus will ensure that Personal Data can only be accessed by authorized internal and external Data Recipients which need to know them.

Bioptimus’ internal Data Recipients

Depending on the purpose(s) of the processing and the Personal Data processed, the authorized staff from Bioptimus may include:

  • Communications and Marketing Department;
  • Departments responsible for managing the partners relationship and sales development, such as: Business Department; R&D Department;
  • Finance Department;
  • IT Department;
  • Legal Department; 
  • People Department;
  • Product Department;
  • Authorized employees from departments responsible for control and audit functions (departments responsible for internal control procedures, etc.).

Bioptimus’ external Data Recipients

Depending on the purpose(s) of the processing and the Personal Data processed, the Bioptimus’ external Data Recipient may include:

  • Partners of Bioptimus (e.g. healthcare organizations such as hospitals, research centers, universities, healthcare professionals, services providers, suppliers, pharma companies, biotech companies or other corporate partners);
  • Legal or administrative authorities, as required by the applicable laws and regulations to which Bioptimus may be subject;
  • Potential acquirers and other stakeholders in the event of a corporate operation such as a change of control of Bioptimus, resulting from a capital increase, merger, demerger, or by the total or partial sale of the business activities.

Data Recipients of the Personal Data are bound by a confidentiality obligation. In any case, Bioptimus only provides them with the information strictly needed to process Personal Data in compliance with the purposes identified.

Bioptimus decides which Data Recipients may access to which Personal Data by means of a contract or internal policies. 

Personal Data may also be forwarded to any authority legally entitled to receive it. In such cases, Bioptimus is not liable for the manner in which said authorities access and process the Personal Data but will limit the Personal Data accessed by these authorities to the strict minimum required by such authorities.

Bioptimus will never sell Personal Data to any third parties.

9. Retention period

The retention period of Personal Data is defined by Bioptimus in accordance with its legal and contractual obligations and, failing this, depending on the specific needs, notably in accordance with the following principles:

ProcessingRetention period
Clients and partners’ Personal Data

For the duration of contractual relations with Bioptimus, which includes the duration of the contract, the terms of the warranties plus five (5) years for legal requirements, without prejudice to storage and retention obligations or the statute of limitations.

Job applicant’s Personal Data

Unless otherwise requested by the job applicant, their Personal Data are processed and stored during two (2) years from the collection of their Personal Data, Bioptimus may request the job applicant to extend this retention period of two (2) years every (2) years.

The retention period set forth above is without prejudice to the storage and retention obligations or the statute of limitations that may apply to Bioptimus.

Personal Data relating to contacts and potential clients

Three (3) years from collection of the Personal Data by Bioptimus or from the last contact made by the potential client or contact.

Information related to bank details (i.e. data related to bank or payment cards)
  • until full payment is made or;
  • until the goods are received or the service is provided. This period shall be extended by the withdrawal period for distance sales of goods and services.

For the management of the claim, the data related to payment cards may be kept within intermediate storage for evidence purposes in the event of a disputed payments transaction for thirteen (13) months' following the data of debit. This delay may be extended up to fifteen (15) months to take into account the possibility of using deferred payment cards.

After the specified periods, Personal Data is either deleted or retained after anonymization, notably for statistical purposes. It may be retained in the event of pre-litigation and litigation.

Data Subjects are reminded that deletion or anonymization are irreversible operations and Personal Data cannot be subsequently restored by Bioptimus. As such, it will no longer be possible to identify any Data Subjects, even indirectly, and any link between you and your data will be deleted. Once Personal Data has been anonymised, no one will be able to link the anonymised data and the initial Personal Data, and Bioptimus will no longer be able to comply with Data Subject’ requests to exercise their rights as described below.

10. Data subjects' rights

As Data Subjects and in accordance with applicable data protection laws, Individuals are entitled to exercise the following rights:

Confirmation and access right

Data Subjects are entitled to request Bioptimus to issue confirmation of whether or not their Personal Data is being processed and will benefit from access rights and a right to request a copy of their Personal Data. Any abuse of this right will be subject to costs that would be borne by the Data Subjects.

If Data Subjects request a copy of their Personal Data via electronic means, the requested information will be provided in a commonly used electronic format, unless specified otherwise.

Data Subjects are notified that this access right may not cover confidential information or data for which communication is prohibited by law.

The access right may not be exercised in an abusive manner, i.e. exercised legally with the sole objective of undermining the proper execution of the service in question.

Updating and rectification rights

Data Subjects are entitled to request Bioptimus to rectify their Personal Data, in the event that their Personal Data should be inaccurate, incomplete, or obsolete.

Right to oppose to the processing activities

Data Subjects are entitled to oppose the processing of their Personal Data, subject to the legal and/or regulatory restriction that may exist with respect to this opposition right.

For instance, with respect to the newsletter sent by Bioptimus to the Data Subjects, each of them can opt out at any time by clicking the “unsubscribe” link at the bottom of Bioptimus’ newsletters.

Right to deletion

The deletion right of Data Subject does not apply where processing is conducted in compliance with a legal obligation or if the processing is necessary for the establishment, exercise, or defense of legal claims. 

In other circumstances, Data Subjects may request deletion of their data if any of the following criteria are met:

  • the Personal Data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; 
  • if a Data Subject withdraws the consent on which the processing has been based and there exists no other legal basis; 
  • the Data Subject objects to processing required for Bioptimus to pursue its legitimate interests and there exists no other pressing and legitimate reason to continue processing; 
  • the Data Subject objects to the processing of its Personal Data for marketing purposes, including profiling;
  • the Personal Data has been processed unlawfully.

In accordance with legislation of Personal Data protection, Data Subjects are notified that this is an individual right that may only be exercised by the Data Subjects in relation to their own information.

Rights to restrict processing

Data Subjects are notified that the right to restrict processing is not intended to apply when the processing conducted by Bioptimus is made in order to comply with laws and regulations applicable to Bioptimus and/or when the processing of the Personal Data is necessary for performance of its services.

Personal Data Portability right

Bioptimus will accede to Personal Data portability requests in the specific circumstances of Personal Data communicated Data Subjects personally, via online services provided by Bioptimus itself and for purposes based solely on personal consent. 

In such cases, the Personal Data will be communicated in structured and commonly used format able to be read by a machine.

Automated individual decision-making

Bioptimus does not conduct automated individual decision-making.

Rights after death

Data Subjects are notified that they have the right to issue instructions concerning the retention, deletion, and communication of their data after their death. 

Any request related to the exercise of the rights described above shall be subject to a written request sent by e-mail at dpo@bioptimus.com or by post at Bioptimus – 14-16 Boulevard Poissonnière 75009 Paris - France, accompanied by a copy of a signed identity document. In accordance with data protection laws and regulations, Data Subjects are notified that the rights set forth above are individual rights that may only be exercised by the Data Subjects themselves in relation to their own information, so that for security reasons, Bioptimus must verify Data Subject’s identity before communicating any Personal Data to the concerned Data Subject. 

The response time for Data Subject’s request may vary depending on the complexity of the request or if the Data Subject submitted a large number of requests. 

11. Data processors

Bioptimus notifies Data Subjects that it may engage any Data Processor of its choice to process their Personal Data.

In any such case, Bioptimus ensures that the Data Processor complies with its obligations under applicable data privacy laws and regulations and in particular with the GDPR. 

Bioptimus undertakes to sign a contract with all Data Processor, imposing on the latter the same Personal Data protection obligations that apply to Bioptimus. Furthermore, Bioptimus reserves the right to perform an audit on the Data Processor to verify the latter's compliance with its obligations under the GDPR.

12. Security

Bioptimus has implemented technical and organizational measures to protect the integrity and confidentiality of Data Subjects’ Personal Data. These measures take into account the state of the art, the costs of implementation and the nature, scope, context, and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of the Data Subjects.

This measure includes for instance security techniques of a physical or logical nature which Bioptimusjudges to be appropriate to prevent the destruction, loss, degradation or unauthorized disclosure of Personal Data in an accidental or illegal manner. The main elements of these measures include notably and without limitation:

  • Management of Personal Data access rights;
  • Internal back-up;
  • Identification processes; 
  • Security audits;
  • Implementation of an IT system security policy;
  • Implementation of business continuity and disaster recovery plans;
  • Use of security protocols and/or solutions.

13. Personal data breach

In the event of any breach of Personal Data, Bioptimus undertakes to notify competent data supervisory authority (e.g. you can access to the list of the competent supervisory authority within the European Union by visiting the website of the European Data Protection Board) as set out in the GDPR. 

Should any such breach present a high level of risk for Data Subjects and the Personal Data has not been protected, Bioptimus shall: 

  • Notify the Data Subjects concerned; 
  • Issue the necessary information and recommendations to the Data Subjects concerned.

14. Data protection officer

Bioptimus has appointed a Data Protection Officer. The contact details of the Data Protection Officer are as follows:

Should Data Subjects wish to obtain any particular information or pose a specific question, they may contact the Data Protection Officer who will provide a response within a reasonable period in light of the question posed or information requested. 

In the event of encountering any problem with the processing of Personal Data, Data Subjects may contact the Data Protection Officer.

15. Processing record

As Data Controller, Bioptimus undertakes to maintain a record recording all completed processing activities. This record is a document or software that lists all processing conducted by Bioptimus in its capacity as Data Controller.

Bioptimus undertakes to provide any competent supervisory authority on request with all information enabling said authority to verify the compliance of processing with applicable Personal Data protection regulations.

16. Right to submit a complaint to a supervisory authority

Data Subjects concerned by the processing of their Personal Data have the right to submit a complaint to the competent supervisory authority (e.g. you can access to the list of the competent supervisory authority within European Union by visiting the website of the European Data Protection Board) should they believe that the processing of their Personal Data does not comply with the applicable data protection laws and regulations.

17. Admendment of this privacy policy

This Privacy Policy may be amended or supplemented at any time in the event of legal or judicial developments, or in response to new uses and any decisions or recommendations issued by the competent supervisory authority or in order to reflect the changes of Bioptimus’ practices.

Any new version of this Privacy Policy will be available on this page. Therefore, Bioptimus invites the Data Subjects to check this Privacy Policy on a regular basis.

18. For further information

For any further general information about Personal Data protection, please consult the website of the competent supervisory authority (e.g. you can access to the list of the competent supervisory authority within the European Union by visiting the website of the European Data Protection Board).

19. Information relating to this privacy policy

If Data Subjects need any further information or assistance, do not hesitate to contact Bioptimus at the following address:

  • By e-mail at: dpo@bioptimus.com
  • Or by post at the attention of Bioptimus – 14-16 Boulevard Poissonnière, 75009 Paris - France.


Texts and publications

The Bioptimus team

Website design and development

The Bioptimus team