Privacy Policy

Last update: February 13, 2024

1.    Introduction

1.1. What is the purpose of this Privacy Policy?

Thank you for visiting our website and for your interest in our company and our products. In accordance with applicable data protection regulations, we would like to inform you about the personal data we collect when you visit our Website.

Personal data refers to any information that allows you to be identified directly (such as your name) or indirectly (for example using a unique customer number or order tracking number).

Our personal data processing activities are subject to the European Union’s General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 – GDPR) and/or any other applicable data protection legislation.

1.2. Who is processing your information?


A French limited company (société anonyme) with a share capital of €7.447.444.00

Registered under number RCS Marseille 891 031 148

Parc Technologique Luminy – Bâtiment CCIMP – 163 Avenue de Luminy – 13009 Marseille – France

VAT N°FR48891031148


We own and operate the website (the “Website”) which provides information and news about our company, its products and activity.

In this capacity, we process your personal data as a data controller, i.e. the legal person which alone or jointly with others determines the purpose and means of the processing of personal data.

1.3. Are you concerned by this Privacy Policy?

Our website is aimed at all visitors and users of the same, customers, interested parties and business partners.

1.4. Changes to our Privacy Policy

This privacy policy is subject to change from time to time, if this becomes necessary to comply with technical developments or legal changes. Please note the current version of this privacy policy and check back periodically to ensure you are aware of any changes.

2. contact us

If you would like to assert your rights or would like more detailed information, please contact our data protection officer:

  • By email:
  • Or by post: Tafalgie Therapeutics – DPO – Parc Technologique Luminy – Bâtiment CCIMP – 163 Avenue de Luminy – 13009 Marseille – France

All requests must specify the reason for the request (exercise of right of access, opposition, etc.). It must also specify the postal or e-mail address to which the reply should be sent. To exercise your rights, you must prove your identity by any means. Where we have reasonable doubts as to your identity, we may ask you to provide additional information necessary to confirm your identity.

We will send you a reply within a maximum of one (1) month from the date of receipt of your request. However, this period may be extended by two (2) months in case of increased complexity and/or number of requests.

3. What are your rights on your personal data?

Please bear in mind that sometimes your rights as set out below may be limited, depending on the circumstances, conditions and subject to the exceptions provided for by applicable regulations.

3.1. Access to your personal data

Exercising your right of access enables you to find out whether your personal data is being processed, and to have it communicated in an understandable format.

3.2. Rectification of your personal data

You have the right to correct inaccurate data concerning you or to complete data relating to the purposes for which it is used.

3.3. Erasure of your personal data

You have the right to ask us to erase your personal data when you can justify certain reasons provided for in Article 17 of the GDPR, and subject to legal obligations incumbent on us.

3.4. Restriction of processing of your personal data

In certain cases provided for in Article 18 of the GDPR, you have the right to ask us to temporarily freeze the use of certain of your data.

3.5. Request the portability of your personal data

You may request a copy of the personal data you have provided to us in a structured, commonly used and machine-readable format. Where technically possible, you may request that we transfer this copy to a third party.

3.6. Object to the processing of your data

You have the right to object to the use of your data when its processing is based on our legitimate interests. You have the right to object at any time to the use of your data for marketing purposes, as well as to the automatic processing of your data, including profiling.

3.7. Withdraw your consent at any time

If you have given your consent to the processing of your personal data you may withdraw this consent at any time. Please note that this will not affect our right to process your personal data collected prior to the withdrawal of your consent, nor our right to continue certain parts of the processing on a legal basis other than that of your consent.

3.8. Lodge a complaint with the data protection authority in your country

You have the right to lodge a complaint with the data protection authority in your country (CNIL in France – the list of European data protection authorities can be consulted by clicking on the following link:

4. What personal data do we collect?

We collect personal data needed for the operation of the Website and for commercial prospection.

We collect your personal data during your time on our Website. This includes, but is not limited to:

  • Personal identification and contact information you send us directly through contact forms available on the Website: name, surname, email address, phone number, content message, IP address, date and time of submission. Mandatory fields are indicated as such on these forms. Without these, we cannot provide you with the requested service.
  • Usage data: IP address, date and time of the request, time zone, access status/HTTP status code, data volume transferred in each case, website from which the request comes, browser as well as language and version of the browser software, operating system and its interface, cookies

If, when browsing the Website, you disclose personal data that you have directly or indirectly collected from a person, it is your responsibility to ensure that the person concerned has authorized you to share his or her personal data with us and that he or she has been duly informed of this privacy policy.

When you voluntarily provide personal data about yourself you undertake to provide information that is accurate and not prejudicial to the interests or rights of third parties.

5. What are the purposes of processing your personal data?

We use your personal data for the following purposes:

  • For the provision of the website, its functions and contents;
  • For responding to contact requests and communicating with users;
  • For the assertion, enforcement, exercise or defense of and against legal claim(s) and legal dispute(s), and for the detection, investigation and prevention of crime;
  • For security measures;
  • For understanding better how our website is used.

We process your information in accordance with the legal bases determined as follows:

  • Consent: we use information stored on your device (third party or marketing cookies and similar tracking technologies) to better understand how you use our Website and enhance your experience on our Website;
  • Legitimate interest: we use your personal data for purposes that are not harmful to your privacy and that can be reasonably expected within the context of using the Website (processing your enquiries, strictly necessary and technical cookies);
  • Legal obligation: we process your personal data due to legal obligation or right (security monitoring, litigation or pre-litigation, finance and accounting, legal compliance).

6.With whom may we share your personal data?

Your personal data is processed using IT tools. It is disclosed to:

  • our authorized personnel on a need-to-know basis.
  • our service providers (subcontractors), suppliers and partners – whom we call upon to provide our services for the above-mentioned purposes. This includes our site providers, to enable access to our website, to host, maintain, edit our website, to contact you.
  • any regulated profession to whom the communication of personal data is necessary to meet our legal and regulatory obligations, in particular auditors of a competent authority, experts, lawyers, statutory auditors, etc.
  • under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

If we are involved in a merger, acquisition or asset sale, your personal data may be transferred. We will do our best efforts to give you notice before your personal data is transferred and becomes subject to a different privacy policy.

7.How long do we keep your personal data?

Your personal data will be retained for a period of time that is necessary and proportional to the purposes for which it was collected, and, where applicable, within the limits of the legal civil statute of limitations and legal retention periods.

In particular, we apply specific policies and procedures with regard to the management of your personal data which is deleted at the end of the period defined according to the following retention criteria:

  • We retain your data for as long as we have an ongoing business relationship with you;
  • we will keep your data for as long as is necessary to provide you with our services;
  • we retain your data for as long as is necessary to comply with our legal and contractual obligations.

The retention periods are as follows:

  • Information concerning prospects (people who have never made a purchase) is kept for 3 years after the last contact);
  • Audience measurement, targeted advertising and social network sharing cookies are stored on the user’s terminal for a period of 13 months.
  • Certain personal data may be kept (credit notes, purchase orders) for a commercially reasonable period, for backup, archiving or audit purposes. The mandatory retention period is ten (10) years for invoices. 

8. Is your data transferred outside of the European Union?

You are informed that your personal data may be transferred to and processed in countries outside of the European Union, where the level of data protection may be lower than in the E.U. Appropriate safeguards have been put in place to control such transfers.

9. About cookies

We collect other information indirectly, in particular via cookies or other tracking technologies. Detailed information on our use of cookies can be found at our Cookies Policy.

Visit our contact page