Data Protection

The American Hospital of Paris places particular importance on the protection of your personal data and is committed to ensuring that any processing of such data is carried out in compliance with the General Data Protection Regulation (GDPR) of April 27, 2016, and the French Data Protection Act of January 6, 1978.

This notice is intended to inform you about how your personal data is processed by the American Hospital of Paris, in its capacity as data controller, as part of your care pathway.

Why does the American Hospital of Paris collect your personal data?
 

Le traitement de vos données personnelles par l’Hôpital Américain de Paris intervient pour répondre notamment aux finalités suivantes :

• Your personal data is processed by the American Hospital of Paris for the following purposes, among others:
• Organizing your pre-admission;
• Managing your medical appointments;
• Ensuring continuity of care;
• Creating and maintaining your medical record;
• Managing your administrative file;
• Handling billing processes;
• Managing the hospital's activity;
• Evaluating the quality of care (e.g. satisfaction surveys);
• Sending charitable fundraising communications.

Your health data is stored in an electronic medical record to ensure proper follow-up and continuity of your care (or that of your child).

The American Hospital of Paris may also process your data using tools that include artificial intelligence algorithms (for example, to assist with diagnosis or to improve the quality of care), in accordance with the applicable legal framework. The use of AI is always supervised by a healthcare professional to ensure the reliability of results.

Unless you object, your data may be pseudonymized (i.e., replaced with a code or alias) or anonymized (making re-identification impossible) and used for medical research purposes.

The information requested on the website american-hospital.org is solely used to manage website navigation and respond to your inquiries.

Each online service on american-hospital.org limits the collection of personal data to what is strictly necessary (data minimization), clearly states the purpose of data collection, and indicates who will have access to the data.

How long is your data kept?

Your personal data is stored in accordance with the applicable legal requirements.

Your health data is retained for twenty years from the date of your last inpatient or outpatient visit at the American Hospital of Paris.

Who has access to your data?
 

Only healthcare professionals involved in your (or your child’s) care may access your medical data. To enhance the quality of your care pathway, and with your explicit consent, the American Hospital of Paris may share this data with healthcare professionals outside the hospital who are also involved in your care (e.g., your general practitioner).

Some of your personal data may be shared with authorized third parties (e.g., the Shared Medical Record system, regional health agencies (ARS), the French National Health Insurance (CNAM), complementary health insurers, law enforcement, or judicial authorities).

Certain data may also be accessible to our service providers and IT vendors acting on behalf of the American Hospital of Paris (e.g., video surveillance, patient support tools).

Finally, unless you object, your data may be shared with our research partners.

In all cases, professionals only access your data as needed to fulfill their duties and are bound by professional secrecy or confidentiality agreements.

Conformément aux dispositions de la loi du 6 janvier 1978 dite « Informatique et libertés » et du Règlement général sur la protection des données du 27 avril 2016, vous bénéficiez d’un droit d’accès, de rectification, d’effacement et d’opposition que vous pouvez exercer en contactant le délégué à la protection des données (DPO), soit : 

• In accordance with the French Data Protection Act of January 6, 1978, and the General Data Protection Regulation of April 27, 2016, you have the right to access, rectify, erase, or object to the processing of your personal data. You may exercise these rights by contacting the Data Protection Officer (DPO):

• By email: DPO@ahparis.org

  By post:
  Data Protection Officer
  American Hospital of Paris
  63, Boulevard Victor Hugo
  92200 Neuilly-sur-Seine
  France

If, after contacting us, you believe your rights have not been respected, you may file a complaint with the CNIL (French Data Protection Authority).

When you visit our website, cookies may be stored on your computer, mobile device, or tablet. You can manage your cookie preferences at any time.Your preferences are stored for a period of 6 months. They are not shared with third parties or used for any other purposes.

There are three types of cookies:

1. Strictly necessary cookies (technical cookies)
These cookies are essential for the website’s core functions to operate properly. In accordance with CNIL guidelines, they are exempt from consent. You may block them using your browser settings, but this may affect your user experience.

2. Audience measurement cookies
These cookies provide anonymous visitor statistics. They are generated by our partner Matomo Analytics and are used to optimize the website’s usability, navigation, and content.

3. Third-party cookies
Our partners (e.g., YouTube, Meta) use cookies to provide you with features that enhance your browsing experience. If you consent, these cookies will enable access to their hosted content (e.g., videos). These third parties may also use your browsing data for targeted advertising purposes, according to their own privacy policies. These cookies are disabled by default. You can manage your consent either globally or by individual service via the "Cookies" button available at the bottom of each page.