Privacy Policy

Last updated: October 2, 2026

The purpose of this Privacy Policy is to provide you with clear and transparent information about how your personal data may be collected and processed when you use this website.

This website is operated under the MultiHealth Group brand.

MultiHealth Group refers to a group comprising several legally distinct companies. Each company has its own legal personality and may process personal data in the course of its own activities.

Depending on the nature of your request, the service used, or the relationship in question, the entity responsible for processing your data may therefore be a legally separate company belonging to the MultiHealth group.

The data controller for each processing operation is identified in the information regarding that processing operation.

Data Controller     

The controller of personal data depends on the nature of the processing in question.

For data processing carried out in connection with this website, the data controller is:

MultiHealth

Address: Vélizy Espace Imm Santos Dumont, 13 Avenue Morane Saulnier – 78140 VELIZY VILLACOUBLAY

SIREN: 809 942 048 / 809 942 048 00020

Email: contact@multihealthgroup.com

When the processing is carried out by another legally separate company belonging to the MultiHealth group, the identity and contact information of that company are specified in the information regarding the processing in question.

Depending on the services and features you use, the data that may be processed may include, among other things:

• your first and last name;
• your contact information, including your email address and phone number;
• your professional data;
• the information contained in your requests or messages;
• the data necessary to process applications;
• data related to appointments or requests made through the website;
• login and browsing data;
• information necessary for the management and security of the site;
• information regarding your preferences and choices regarding cookies, where applicable.

The exact nature of the data collected depends on the form, service, or feature being used.

Your personal data may be processed for the following purposes:

Table of Personal Data Processing Activities

Treatment	Purpose	Data Controller	Legal Basis
Contact Form	Respond to requests, follow up, and communicate with users	Affiliated company of the MultiHealth Group	Legitimate interest
Request for Information	Process the request and provide the requested information	Affiliated company of the MultiHealth Group	Legitimate interest or precontractual measures, depending on the context
Request for Information About a Training Program	Respond to inquiries, present training programs, and follow up	FORMATIS SAS	Legitimate interest or precontractual measures, depending on the context
Registration for a Training Course	Manage registration, participation, and administrative follow-up for the training program	FORMATIS SAS	Performance of the contract or pre-contractual measures
Administrative Management of Training Programs	Organize training sessions, manage participants, and handle administrative follow-up	FORMATIS SAS	Performance of the contract or legal obligation, depending on the processing
Application / Recruitment	Review applications, organize the hiring process, and contact candidates	TempoPHARMA	Precontractual measures or legitimate interest
Click & Book / Schedule an Appointment	Enable appointment scheduling and manage requests.	Affiliated company of the MultiHealth Group	Precontractual measures or legitimate interest, depending on the context
Website Management	Ensure the operation, maintenance, and improvement of the site	MultiHealth	Legitimate interest
Strictly Necessary Cookies	To ensure the site functions properly and to save certain essential settings	MultiHealth	No consent is required when cookies are strictly necessary
Audience Measurement Cookies	Measuring and analyzing website traffic and usage	MultiHealth	Consent, unless the applicable exemption conditions are actually met
Newsletter / Communications	Send communications to people who have requested to receive them	Affiliated company of the MultiHealth Group	Consent When Required
Handling Requests to Exercise Rights	Process requests for access, correction, erasure, objection, restriction, and portability	Data Controller in Question	Legal Requirement
Site Security	Prevent unauthorized access, fraud, and incidents, and ensure system security	MultiHealth	Legitimate interest

The applicable legal basis depends on the nature of the processing in question and the circumstances under which the personal data is collected.

When certain information is required to process your request, the relevant fields are marked as required.

If you do not provide this information, we may not be able to respond to your request or provide you with the relevant service.

Your personal data may be accessed, within the limits of their respective responsibilities, by:

• to authorized employees of the company acting as the data controller;
• when necessary, to authorized employees of other group companies involved in the processing;
• technical service providers involved in the operation of the website or services;
• to service providers responsible for certain specific services;
• to authorities or entities legally authorized to receive such information when disclosure is required by law.

The recipients of the data are determined on a case-by-case basis for each processing operation.

Certain technical operations or services may be entrusted to service providers acting on behalf of the data controller.

When these service providers act as subcontractors within the meaning of applicable regulations, they are bound by contract and may process data only in accordance with the instructions of the data controller and applicable regulations.

Personal data is retained for no longer than is necessary for the purposes for which it is processed, subject to applicable legal obligations.

The main retention periods are as follows:

Category / Treatment	Shelf Life
Contact Requests	While the request is being processed, and for up to 3 years after the last contact with the individual, if further follow-up is warranted
Requests for Information	While the request is being processed, and for up to 3 years after the last contact, when the request is in a legitimate business interest.
Applications	During the hiring process. For unsuccessful applicants, their information may be retained in a talent pool for up to 2 years after the last contact, unless the applicant objects.
Appointment-Related Data	During the processing of the request and the scheduling of the appointment, and for a period of 2 years following the appointment, subject to administrative needs and applicable obligations.
Cookie-Related Data	Depending on the duration applicable to each cookie

When certain data must be retained for a longer period to comply with a legal obligation or to enable the exercise or defense of legal rights, it may be retained for as long as necessary to fulfill those obligations.

Some technical service providers or services used in connection with the website may be based outside the European Union or may involve the transfer of data to a third country.

When personal data is transferred outside the European Economic Area, the measures and safeguards provided for by applicable regulations are implemented as necessary.

Information regarding any international data transfers and the safeguards in place may be obtained from the data controller.

Under the terms of applicable regulations, you have the following rights, among others:

• the right to access your personal data;
• the right to correct inaccurate or incomplete data;
• the right to have your data erased under applicable conditions;
• the right to object to certain processing activities;
• right to restriction of processing;
• the right to data portability, where applicable;
• the right to withdraw your consent when the processing is based on it.

Certain rights may be subject to conditions, exceptions, or limitations set forth in the regulations.

You can exercise your rights by contacting the DPO:

Email: dpo@multihealthgroup.com

Mailing Address:

Vélizy Espace – Santos Dumont Building
13 avenue Morane Saulnier
78140 Vélizy-Villacoublay
France

In order to process your request, we may ask for additional information when necessary to verify your identity or clarify your request.

If, after contacting us, you believe that your rights have not been respected, you may file a complaint with the National Commission for Information Technology and Civil Liberties (CNIL) on the CNIL website: www.cnil.fr/fr/plaintes, in accordance with the procedures set forth in the applicable regulations.

This website uses cookies and similar technologies as described in our Cookie Policy.

This policy describes, among other things, the types of cookies used, their purposes, and, where applicable, how you can give, refuse, or withdraw your consent.

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

The nature and level of these measures are tailored to the risks associated with the processing operations in question.

This policy may be updated to reflect changes to the website, the services offered, the data processing activities, or applicable regulations.

The date of the last update is shown at the top of this page.

We encourage you to check this page regularly to review the most recent version of our policy.