Skip to content

Privacy policy

Last update: 16 April 2026

H.A.C. Pharma, a company established in France with its registered office at 43 Avenue de la Côte de Nacre 14000 Caen, registered with the Trade and Companies Register of Caen under number 333 491 132, acts as data controller within the meaning of Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation – “GDPR”) and the amended French Data Protection Act of 6 January 1978. In this context, H.A.C. Pharma implements appropriate organizational and technical measures to ensure the protection, confidentiality and security of your personal data, in accordance with applicable regulations.

This policy explains how we collect, use, store and protect your personal data as part of our various activities.

1. Personal data collected

1.1. Website navigation

When you visit our website, we collect:

  • Technical data strictly necessary for website operation (essential cookies),
  • Information entered into online forms.

1.2. External contacts

When you contact us (via form, phone or email), we collect:

  • Your identity and contact details,
  • Information relating to your request.

1.3. Applications and recruitment

As part of the processing of job applications, we collect:

  • Your identity and contact details,
  • Your CV, professional background and the information provided during recruitment-related exchanges.

1.4. Healthcare professionals

As part of promotional, non-promotional and medical information activities, and to comply with legal obligations, we collect:

  • Your identity, medical specialty and professional contact details,
  • Interactions with our teams,
  • Information necessary to comply with regulatory requirements (transparency of links).

1.5. Pharmacovigilance, nutrivigilance, quality and medical information

Depending on the nature of your report or request, we collect:

  • Strictly necessary health data,
  • Direct or indirect identification data,
  • Information relating to the product concerned and the circumstances of the report.

2. Purposes of processing

Your personal data is processed exclusively for the following purposes:

2.1. Website managment

  • Website management and security,
  • Processing of requests submitted via the website.

2.2. Pharmaceutical obligations

  • Processing pharmacovigilance and nutrivigilance reports,
  • Managing quality complaints,
  • Handling medical information requests,
  • Complying with legal and regulatory obligations, in particular those relating to transparency of links and public health and safety.

2.3. Professional relationships

  • Managing contacts with healthcare professionals and partners,
  • Sending promotional or non-promotional information where permitted,
  • Managing scientific or contractual collaborations.

2.4. Recruitment

  • Managing and monitoring job applications,
  • Assessing candidate profiles.

3. Legal bases for processing

Processing is based on:

  • Compliance with a legal obligation, in particular in relation to pharmacovigilance, public health and safety, quality and transparency requirements,
  • Our legitimate interest, in particular for managing our professional relationships, ensuring security and the proper functioning of the website,
  • The performance of a contract or pre-contractual measures (recruitment, collaborations),
  • Consent, where required by applicable regulations.

4. Data recipients

Your data may only be disclosed only to:

  • Our authorized employees,
  • Our service providers and subcontractors act on our behalf,
  • Competent health authorities (ANSM, EMA, or other national or international authorities.) when required by applicable regulations,
  • Other pharmaceutical companies, where applicable, where a third-party product is concerned by a report.

No commercial transfer or unauthorized use of personal data is carried out.

5. Where is your data processed?

Your personal data is mainly processed within the European Union.

If a transfer outside the EU is necessary, it will be carried out with appropriate safeguards (standard contractual clauses, legal framework).

6. Data retention periods

Retention periods comply with applicable regulatory requirements:

  • Pharmacovigilance: duration of the marketing authorization and applicable statutory retention periods,
  • Medical information: 20 years,
  • Quality complaints: minimum of 10 years,
  • Recruitment: 2 years after the last contact,
  • Website contact requests: maximum of 3 years,
  • Transparency obligations: applicable statutory retention periods.

7. Your rights

You may exercise the following rights at any time: the right of access, rectification, objection, restriction of processing, erasure (where applicable), and data portability.

To exercise your rights, please contact us at the following address: donnees.personnelles@hacpharma.com

8. Data security

We implement technical and organizational measures to protect your data against loss, unauthorized access, disclosure or alteration.

9. Updates to this policy

This policy may be updated to reflect changes in our practices or regulatory requirements.

The date of the latest update is indicated at the top of this document.

Edit preferences