Privacy Policy

1. Data controller

The data controller is DOTs Healthcare, [PLACEHOLDER: registered address]. For any question about this policy or your personal data, contact us at contact@dots.you or our data protection officer at [PLACEHOLDER: DPO email].

2. Data we collect and why

We collect only the data needed to operate this site and respond to you. Specifically:

• Browsing data (IP address, browser type, server logs) — to keep the site secure and functioning. Legal basis: our legitimate interest. Retention: up to 12 months.
• Contact data you submit through our forms (name, email, message, and any details you provide) — to answer your request. Legal basis: your consent or pre-contractual steps. Retention: up to 3 years from our last contact.
• Investor-portal data (email and authentication record) — to grant and secure access to the reserved investor space. Legal basis: pre-contractual / contractual measures. Retention: for the duration of access plus applicable legal limitation periods.
• Recruitment data, where applicable (CV, contact details, professional background) — to consider your application. Legal basis: pre-contractual steps. Retention: up to 2 years.

3. Cookies

We use a single strictly necessary cookie, solely to keep authorised users signed in to the investor portal. It is essential to that service and therefore does not require consent. We do not use any advertising, analytics, social, or profiling cookies.

4. Who receives your data

Your data is accessible only to authorised DOTs staff and to trusted service providers acting on our instructions (for example, hosting and technical support). We may also disclose data where required by law. We never sell your personal data.

5. Transfers outside the EU

We process your data within the European Union. Where a service provider operates outside the EU, we put in place the safeguards required by the GDPR (such as the European Commission's standard contractual clauses).

6. Data security

We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption in transit, secured hosting, restricted access on a need-to-know basis, and staff awareness.

7. Your rights

Under the GDPR you have the following rights over your personal data:

• Right of access (Art. 15) — obtain a copy of the data we hold about you.
• Right to rectification (Art. 16) — correct inaccurate or incomplete data.
• Right to erasure (Art. 17) — have your data deleted in certain cases.
• Right to restriction (Art. 18) — limit how we process your data.
• Right to portability (Art. 20) — receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — object to processing based on legitimate interest, and withdraw consent at any time.
• Right to give directives on the fate of your data after death.

8. Exercising your rights and complaints

To exercise any of these rights, contact us at contact@dots.you or [PLACEHOLDER: DPO email]. We will respond within one month. If you believe your rights are not respected, you may lodge a complaint with the French data-protection authority (CNIL, www.cnil.fr).

9. External links

This site may link to third-party websites that have their own privacy practices. We are not responsible for the content or data handling of those sites.

10. Changes to this policy

We may update this policy from time to time. The current version is always published on this page, with its last-updated date shown above.