Personal Data Protection Policy (GDPR)

1 - Definitions and Data Controllers

1.1. Definitions

The term "Personal Data" refers to all information relating to an identified or identifiable natural person. This includes in particular your surname, first name, phone number, date of birth, email address, postal address, IP address, as well as any information concerning your pet and your appointment history.

1.2. Data Controllers

CENTRAVET and the Partner Veterinarians act as Joint Data Controllers for data collected via PILEPOILS, in accordance with Article 26 of the GDPR.

CENTRAVET is responsible for the technical management of the Application/Site, data hosting, and the provision of Directory and Appointment Booking Services.

Partner Veterinarians are responsible for processing data related to medical follow-up, client records, and legal obligations related to their profession.

Contact details of the main Data Controller:

2 - Data Collection and Purposes

Your Personal Data is collected only for specific, explicit and legitimate purposes, to meet one or more of the following purposes:

• Managing veterinary appointments (performance of the Service)
• Appointment reminders (email/SMS) and post-consultation follow-up
• Compiling activity statistics for veterinarians
• Compliance with legal and regulatory obligations related to veterinary practice (accounting records, transaction traceability)
• Transfer of activity to another veterinary establishment

3 - Recipients and Data Transfer

3.1. Internal Recipients and Veterinarians

Only authorised CENTRAVET departments, Partner Veterinarians and their teams, and their contractually bound subcontractors have access to the information within the limits of their respective responsibilities.

3.2. Other Recipients

The following may also be recipients of your data: public bodies (exclusively to meet legal obligations), legal auxiliaries, ministerial officers, and debt collection bodies.

3.3. Transfer Outside the EU

No data will be sold commercially to other companies or organisations.

Data is stored in France. CENTRAVET and its subcontractors undertake not to transfer data to companies located outside the European Union (EU) or the European Economic Area (EEA).

In the event that a transfer to a third country is necessary, CENTRAVET undertakes to put in place all appropriate safeguards (Standard Contractual Clauses of the European Commission, or adequacy decision).

4 - Data Retention Period

The retention period for data varies depending on the purpose of collection and legal obligations:

5 - Security

CENTRAVET takes all necessary precautions and implements appropriate technical and organisational measures to preserve the security of your Personal Data, in particular to prevent it from being distorted, damaged, or accessed by unauthorised third parties.

6 - User Rights

In accordance with Articles 15 et seq. of the GDPR, you have the following rights:

• Right of Access (Article 15): Obtain confirmation that your data is being processed and, where applicable, access to it.
• Right to Rectification (Article 16): Request the correction of inaccurate or incomplete data.
• Right to Erasure — "Right to be Forgotten" (Article 17): Request the deletion of your data, except where there is a legal obligation to retain it (see section 7).
• Right to Restriction of Processing (Article 18): Request the suspension of processing of your data in certain circumstances.
• Right to Data Portability (Article 20): Receive your data in a structured, commonly used and machine-readable format, and transmit it to another data controller.
• Right to Object (Article 21): Object at any time to the processing of your data for commercial prospecting purposes or for reasons relating to your particular situation.

To exercise these rights:

• From your personal Pilepoils space: You can directly exercise your right of access and rectification on certain data.
• With CENTRAVET: Send a letter to CENTRAVET, 7 Bd du Petit Paris, ZA des alleux, BP 20360 TADEN, 22106 DINAN CEDEX, along with a valid identity document.
• With your veterinary establishment: For any request relating to patient file data and medical obligations, contact the relevant veterinarian directly.

You also have the right to lodge a complaint with the competent supervisory authority: the CNIL (Commission Nationale de l'Informatique et des Libertés).

7 - Data Deletion Procedures (Right to Erasure)

In accordance with Article 17 of the GDPR, you have the right to request the deletion of your Personal Data. For any request, contact us at dpo@centravet.fr.

CENTRAVET will delete your Personal Data from the Application/Site, except for data that the law requires it to retain.

Partner Veterinarians will remain subject to their own legal retention obligations (patient records, accounting) and must be contacted separately for the deletion of their internal databases, to the extent permitted by law.

8 - Consent and Withdrawal of Consent

Where the processing of your data is based on your consent, you expressly agree to the collection and use of that data.

You may withdraw your consent at any time for specific prospecting purposes. This withdrawal does not affect the lawfulness of processing carried out prior to it. To withdraw your consent, contact us at dpo@centravet.fr or use the unsubscribe links provided in our communications.

9 - Cookies

9.1. Purposes of Cookies

In order to better serve you, CENTRAVET and its subcontractors measure the number of pages viewed, the number of visits and visitor activity, and combat fraud by monitoring connection statuses. Cookies help improve your user experience and provide basic service functionality.

9.2. Types of Cookies and Consent

The use of cookies that are not strictly necessary for the operation of the site (analytics, audience measurement, advertising cookies) requires your express consent.

You can give or withhold your consent:

• Via the information banner / cookie management module
• By configuring your browser appropriately

Data collected by cookies is exclusively and strictly intended for internal use and is never passed on to third parties for commercial purposes.

CENTRAVET invites you to consult the page CNIL's advice on managing your browser for more information.