Privacy Policy
1. Introduction and general considerations
Your Cerba Lancet Africa medical biology laboratory processes your personal data, in compliance with current legislation, as part of its medical biology activity, but also, depending on your situation, as part of its recruitment, customer management, etc. activities. Cerba Lancet Africa may also process your personal data in connection with the management of this website.
This policy therefore addresses:
- the conditions under which Cerba Lancet Africa entities process your personal data, in particular as part of their activity of managing a medical biology laboratory (2.);
- but also the conditions under which Cerba Lancet Africa, publisher of the cerbalancetafrica.com website, processes your personal data as part of the management and operation of this site (3.).
This policy is regularly updated to take account of legislative and regulatory developments, as well as any changes in the laboratory's organization or in the treatments it carries out.
Who are we?
The Cerba Lancet Africa entity in charge of processing your data is the controller of the processed personal data. To find out the exact name of the Cerba entity that processes your data (hereinafter referred to as "we" or "us"),
- Kenya - https://www.cerbalancetafrica.ke,
- Uganda - https://www.cerbalancetafrica.ug,
- Rwanda - https://www.cerbalancetafrica.rw,
- Tanzania - https://www.cerbalancetafrica.co.tz,
- Zambia - https://www.cerbalancetafrica.co.zm,
- Zimbabwe - https://www.cerbalancetafrica.co.zw,
- Eswatini - https://www.cerbalancetafrica.co.sz,
- Nigeria - https://www.cerbalancetafrica.ng,
- Ghana - https://www.cerbalancetafrica.com.gh/,
- Cerba Lancet Africa - https://www.cerbalancetafrica.com.
Cerba Lancet Africa is responsible for processing personal data used to manage this website.
What are our commitments?
We are committed to complying with all regulatory and statutory laws and applicable policies concerning the processing of personal data. Accordingly, we undertake to comply with the following principles:
- We process your personal data lawfully, fairly and transparently.
- We collect your personal data for specific, explicit and legitimate purposes and do not process them in a way that is incompatible with these purposes.
- We ensure that personal data is adequate, relevant and limited to what is necessary for the purposes for which it is processed.
- We make every effort to ensure that personal data is accurate and, where necessary, kept up to date. We take all reasonable steps to ensure that inaccurate personal data, having regard to the purposes for which it is processed, is deleted or rectified without delay.
- We keep your personal data in a form that allows you to be identified only for as long as is necessary for the purposes of processing.
- We guarantee an appropriate level of security for the personal data we process.
These commitments are expressed as follows:
- We respect your privacy.
- We guarantee that the protection and security of your personal data is our top priority.
- We do not use your personal data for purposes that have not been brought to your attention.
- We do not consider that your personal data should be stored indefinitely.
- We work with trusted partners who provide sufficient guarantees that technical and organizational measures have been implemented to ensure that our processing operations meet the requirements of current regulations.
- We respect your rights as a data subject and as a patient, and will do our best to respond to your requests, provided they are well-founded.
How do we collect your personal data?
We may collect your data directly from you, for example, when you visit one of our laboratories, or indirectly, for example, when your data has been entrusted to us by the medical biology laboratory that took your sample, your healthcare establishment or your healthcare professional who took the sample.
Cerba Lancet Africa collects personal data directly through this website, in particular via its contact page.
Cross-border transfers of personal data
Your personal data may be transferred outside our country of location. Where this is the case, we ensure that the transfer of personal data complies with the requirements of the applicable legislation.
Rights to your personal data
Depending on the circumstances, and in particular insofar as the applicable data protection law so provides, you have the following rights with regard to your data:
- Right to limit processing;
- Right to object, including to automated decision-making;
- Right of portability;
- Right of access
- Right of rectification;
- Right to erasure.
You may exercise these rights by contacting the Cerba entity that is controller of the processing of your personal data.
Consequences of failure to provide your personal data
If you fail to provide us with some or all of your personal data, we may not be able to provide you with the service you require.
Security
We are committed to implementing technical and organizational security measures adapted to the risk, particularly with regard to:
- Raising staff awareness;
- User authentication;
- Authorization management;
- Access logging and incident management;
- Securing workstations;
- Securing mobile phones;
- Internal network protection;
- Website protection;
- Protecting the premises;
- Securing exchanges with third parties;
- Ensuring business continuity.
2. Data processing carried out by Cerba entities
Below are the purposes for which we process your personal data, the legal basis on which the various processing operations are based and the retention periods for personal data:
| Purpose | Categories of personal data collected | Legal basis | Data retention period (active base) |
|---|---|---|---|
| Medical biology examination and laboratory management (to carry out your analyses, interpret and transmit your results and manage the laboratory's administration) | Identification data, health data | Performance of the contract / legal obligation to maintain and preserve medical records | 15 years after the end of the study |
| Appointment management | Identification data, appointment data | Our legitimate interest in managing appointments | The time necessary to manage the appointment |
| Recruitment management | Identification data, data needed to assess suitability for the job | Pre-contractual measures taken on your initiative or our legitimate interest to recruit staff | During the recruitment process |
| Video surveillance management | Images from the video surveillance system | Our legitimate interest in ensuring the safety of property and persons | 1 month from recording or, where applicable, for the duration of the procedure for which the images are required |
| Supplier management | Identification, contractual and commercial data | Performance of contracts with suppliers | For the duration of the contract with the supplier |
| Customer management | Identification, contractual and commercial data | Performance of the contract with the customer concerned | For the duration of the contract with the customer |
| Leads management | Identification data, data relating to the commercial relationship | Our legitimate interest in increasing our customer base | 3 years from the date of collection of the data or the last action taken by the prospect |
| Litigation management | Identification data, litigation data | Our legitimate interest in defending our legal rights | Until a final decision is handed down, or until it is enforced |
| Managing access to premises | Identification data, data from premises access system | Our legitimate interest in securing our premises | 1 month from data collection |
| Accounting management | Identification data, information and accounting documents | Complying with our legal obligation to keep our accounts | Until our legal obligations are met |
We may transfer your personal data to the following recipients:
- As part of our medical biology examination and laboratory management activities:
- Healthcare facilities;
- Doctors;
- Hospitals;
- Medical clinics;
- Medical insurance companies (for medical insurance plans);
- Private nurses and prescribers;
- Miscellaneous service providers (collection, printing, etc.);
- Administration (Ministry of Health, etc.);
- Paying agencies.
- As part of our litigation management activity:
- External lawyers;
- Ministerial and judicial officers;
- Authorities involved in a dispute;
- Police forces.
- As part of our recruitment management activity:
- Consultants helping the company in the recruitment process.
- As part of the supply of certain tools:
- Other Cerba entities, such as Lancet South Africa.
3. Data processing used by Cerba Lancet Africa to manage this website
In addition to the processing activities detailed above, Cerba Lancet Africa processes your personal data in accordance with the applicable legislation, as part of the management of this website.
Below are the purposes for which Cerba Lancet Africa processes your personal data, the legal basis on which the various processing operations are based and the retention periods for personal data:
| Purpose | Categories of personal data collected | Legal basis | Shelf life (active base) |
|---|---|---|---|
| Management of requests received via the website's contact form | Contact details (name, e-mail address, telephone number), nature of request | Our legitimate interest in responding to your requests | The time it takes to process your request |
Cerba Lancet Africa may transfer your personal data to the following recipients:
- The service provider in charge of hosting this website;
- Miscellaneous service providers (collection, printing, etc.);
- Cerba Group entities.