Privacy policy
The website https://www.dumonceau-urologie.fr/ is the official website of Dr. Olivier Dumonceau, a specialist physician registered with the National Council of the Order of Physicians. Discover our privacy policy.
What personal data do we collect?
| Situation | Data collected | Main purpose |
|---|---|---|
| Contact form / Appointment booking: | Name, surname, email, phone number, reason for request, preferred time slots. | Appointment management and response to requests. |
| Comment area (if applicable) | Comment content, IP address, user agent | Spam prevention and security |
| Uploading medical documents: | Documents you choose to transmit (X-rays, reports, etc.). | Creating or updating your medical file. |
| Site navigation, | technical cookies and anonymous audience measurement | , proper site functioning, aggregated statistics |
No health data is collected without your explicit consent (by sending a secure form or submitting a document).
Privacy Policy: Legal Basis for Processing
| Purpose | Legal basis |
|---|---|
| Appointment management, remote monitoring, creation of medical records. | Execution of the care relationship (Article 9 §2 h GDPR) |
| Responding to requests via form or email. | Legitimate interest of the firm in communicating with its patients. |
| Anonymized audience measurement. | Consent (cookie banner). |
Shelf life
| Data | Duration |
|---|---|
| Medical records | are kept for 20 years from the date of the last treatment (article R1112-7 CSP) |
| Inquiries without medical follow-up | (1 year) |
| Technical cookies ( | maximum 13 months) |
| 6-month | security logs |
Privacy and Cookies
Strictly necessary cookies: provide basic functions (session, language).
Audience measurement cookies (Matomo or equivalent configured in RGPD mode, IP anonymized).
You can configure your choices at any time via the “Cookie management” banner.
Integrated content (videos, maps, etc.)
Content integrated from third-party platforms (YouTube, Doctolib, Google Maps…) acts as if you were visiting these services directly; they may therefore deposit their own cookies and collect data according to their respective policies. You can block such content via your browser or our consent manager.
Where and with whom is your data shared?
| Recipient | Role | Guarantees |
|---|---|---|
| HDS-certified hosting provider ( OVH ) | Secure storage of health data | “Health Data Hosting” certification (decree of 22/03/2017) |
| Appointment booking provider (e.g., Doctolib) | , calendar, SMS reminders, | GDPR subcontractor, HDS servers |
| Health or judicial authorities; | legal obligations; | transmission restricted to what is strictly necessary |
No data is transferred outside the European Union without adequate safeguards (EU standard contractual clauses / adequacy decision).
Your rights
You have the following rights at all times:
- Access to and copying of your data,
- Rectification of inaccurate data,
- Deletion (unless legally required to retain),
- Limiting or objecting to certain treatments,
- Portability (medical file in compatible format).
To exercise these rights: contact us or write to the DPO (contact details below). Proof of identity may be required. You can also lodge a complaint with the CNIL.
Security
- TLS encryption for all HTTPS connections.
- HDS-certified hosting, encrypted daily backups.
- Access to medical records restricted to doctors and authorized personnel, via strong authentication.
- Automated traffic analysis (firewall, anti-spam protection, logging).
Data Protection Officer (DPO)
Nanor Beley – direction@urologieparisopera.fr
Privacy Policy Update
Last update: June 30, 2025. Any substantial modification will be announced on the site.
