Resilience attaches the utmost importance to protecting your personal data and complying with the General Data Protection Regulation. The purpose of this Transparency Portal is to provide you with clear and transparent information on how we process and use your personal data as part of our health data warehouse authorized by the Commission Nationale de l'Informatique et des Libertés (CNIL Deliberation No. 2022-049 of April 21, 2022, supplemented by Deliberation No. 2023-088 of September 7, 2023).
If you are a caregiver, please visit our dedicated page.
💡 For more information on the data collected and processed as part of our Resilience Solution for cancer patients, see our specific Data Protection Policy or directly on the Resilience Care mobile application ("⚙️Settings" section).
The Transparency Portal is updated to take into account new research we are conducting. We invite you to consult it regularly.
The aim of the processing is to create a health data warehouse, i.e. a database designed to bring together data from different sources, which will be reused to conduct studies and research in oncology in order to improve the care and quality of life of cancer patients, and in particular :
This warehouse is constituted on the basis of Resilience's legitimate interest in carrying out such projects (Article 6.1 f) of the RGPD). The processing of health data is necessary for the purposes of scientific research (Article 9.2 j) of the RGPD) and to ensure high standards of quality and safety of medical devices (Article 9.2 i) of the RGPD).
Our ambition: to provide better care for cancer patients.
All research and studies carried out using this warehouse will be described in this Transparency Portal.
Definition : A personal data processing operation is an operation or set of operations involving personal data (e.g. collecting, recording your data, using it for research purposes, etc.).
The data controller for the creation of the health data warehouse is Resilience, a société par actions simplifiée (simplified joint stock company) with capital of 18,838.56 euros, registered with the Paris Trade and Companies Register under number 893 834 173, whose registered office is at 6 rue d'Armaillé - 75017 Paris (France).
Definition : A data controller determines the purposes and means of personal data processing, i.e. the objective of this processing and how it is implemented.
The health data warehouse is subject to specific governance involving oncologists, cancer patients and data scientists from Resilience.
This structure is composed of:
We collect and process within our health data warehouse the following personal data:
👩 Identification data: age, gender
🏡 Personal life, lifestyle and quality of life: (weight, height, quality of life, physical exercise, menopausal status, sex life, etc.)
🔬 Health data: type of cancer, pathology history, course of treatment, date of first diagnosis of your cancer, date of last diagnosis, work status (sick leave, part-time work on health grounds, working), information on past and current treatment, effectiveness of treatment, data from remote monitoring questionnaires (symptoms, side effects, alerts issued, etc.).
📱 Data related to the use of the mobile application and the Resilience PRO Solution.
These data are non-nominative (pseudonymised), i.e. they do not include any information that could be used to identify you directly (last name, first name, email address, etc.).
The collection of these data in our health data warehouse is not mandatory. Objecting to them will not impact your use of our solution or your care at your healthcare facility.
Definition: Personal data are any information that makes it possible to directly or indirectly identify a natural person, from a single datum (for example your first and last name, your email address, etc.) or from a cross-check of data.
The health data warehouse includes:
The data will be stored for 15 years in order to be able to follow the development of:
At the end of this period, your data are deleted or anonymised for scientific research purposes.
Your personal data is used by authorized Resilience teams to conduct oncology studies and research designed to improve the care of cancer patients.
Our collaborators involved in research are subject to a strict obligation of confidentiality and cannot directly identify you. Indeed, all your first and last names are not collected in our health data warehouse.
Resilience maintains and implements technical and organizational measures to ensure the security of your personal data.
As such, our health data warehouse is hosted in France by CleverCloud and OVHcloud, which has obtained the Hébergeur de Données de Santé certification. Data is encrypted at rest and in transit.
Our employees must be authorized to access your data, and are subject to a strict obligation of confidentiality. They are also trained in security and personal data protection.
You may, at any time and without justification, object to the use of your personal data for our health data warehouse or for specific research. This objection will have no effect on your use of our mobile application or on your treatment by your healthcare establishment.
In accordance with the applicable legal and regulatory provisions, you also have the following rights:
🗂️ Right of access: you have the right to request access to the personal data we hold about you, and you may request a copy of such data(find out more)
✏️ Right of rectification: you can request a rectification of any inaccurate or incomplete data concerning you(find out more)
🧽 Right of deletion: you can request the deletion of your personal data in certain circumstances(find out more)
🛑 Right to limitation of processing: you have the right to restrict our processing in certain circumstances(find out more)
👼 Right to define directives relating to the retention, erasure and communication of your data after your death
(find out more)
These rights may be exercised with our Data Protection Officer at the following address: privacy@resilience.care or by post to Resilience (for the attention of the DPO) - 6 rue d'Armaillé - 75009 Paris.
You may be asked to provide a copy of your identity document to ensure the confidentiality of your data. If, after contacting us, you feel that your rights with regard to your data have not been respected by Resilience, you may submit a complaint to the Commission Nationale de l'Informatique et des Libertés (CNIL).
