Data protection

The American Hospital of Paris (“the Hospital”) and the physicians who work there process your personal data in compliance with the General Data Protection Regulation (“GDPR”) of April 27, 2016, with the French Data Privacy Act (loi informatique et libertés) of January 6, 1978, and with the applicable legislation. 

The Hospital and its physicians process your data as a data controller:

• either separately for their individual needs
• or collectively for joint processing operations.

Your personal data is processed to organize your admission, manage your medical appointments, medical records and billing, ensure your satisfaction, share information with you about our projects and send fundraising appeals. Your data can also be used for medical research, unless you opt out of this use.

Your data is processed in order to meet legal obligations, on grounds of legitimate interest, or after obtaining your consent. 

Generally speaking, your data is retained only for the amount of time strictly necessary to meet the objectives at hand. The appropriate security and protective measures are applied.

As a matter of principle, your medical data is retained for 20 years following your last visit to the Hospital.

1. Only the health care professionals on the team involved in your care can access your medical data. 
    
2. The Hospital may transfer your data to health care professionals who do not practice at the Hospital (such as your primary physician) or to authorized third parties (Assurance Maladie office, supplemental health insurance provider, Haute Autorité de Santé)
    
3. Some data can also be accessed by our service providers and suppliers in the European Union
    
4.  Lastly, your data can be shared as part of clinical research, unless you have opted out of this use.

You have the right to access your data, request its amendment and erasure, restrict its processing, object to its use in certain cases, and request its transfer.

If you wish to exercise your rights, please contact our Data Protection Officer (DPO) at :

• By email:  dpo@ahparis.org
• By mail: American Hospital of Paris – DPO, 63, Boulevard Victor Hugo, 92200 Neuilly-Sur-Seine, France

You may also lodge a claim with the Commission Nationale de l’Informatique et des Libertés (CNIL), France’s national commission for information technology and civil liberties, if you deem that your rights have been breached.

When browsing our website, connection trackers, known as "cookies," are placed on your computer, mobile phone, or tablet. You can manage your cookie preferences at any time.

Your preferences are stored for a period of 6 months. They are not shared with third parties or used for other purposes.

There are three types of cookies:

Strictly necessary cookies (technical cookies)
These trackers are essential for the proper functioning of the website's core services. In accordance with CNIL guidelines, these cookies do not require user consent. You may block them through your browser settings, but doing so may affect your browsing experience.

Audience measurement cookies
These cookies provide anonymous traffic statistics. They are generated by our partner Matomo Analytics and are used to improve the site's usability, navigation, and content.

Partner cookies
Our partners (YouTube, Meta) use cookies to offer features that enhance your browsing experience. If you give your consent, they will place cookies that allow their hosted content (e.g., videos) to be displayed. These third parties may also use your browsing data for targeted advertising, in accordance with their own privacy policies. These cookies are disabled by default. You can manage your consent globally or on a per-service basis using the "Cookies" button at the bottom of each page.