Legal Notice & GDPR

1. Website publisher

Legal status: consultations and medical procedures are carried out by practitioners working as independent self-employed professionals, each responsible for their own actions under the French Code of Medical Ethics. The name "IMPACT Cardiovascular" refers to a shared place of practice and a communication identity, and does not, as of today, constitute a separate legal entity.

The doctors practising at the centre are registered with the Medical Council of the Paris department (75) and bound by the provisions of the French Code of Medical Ethics (articles R.4127-1 et seq. of the Public Health Code), available on the website of the French National Medical Council.

2. Hosting

About health-data hosting: this website is a purely informational showcase and does not directly collect any health data. Appointment bookings are handled via the Doctolib platform (an independent third-party provider), which is itself certified as a Health Data Host (HDS) under article L.1111-8 of the French Public Health Code. Patient medical records are stored on the practice's medical information system, hosted by an HDS-certified provider distinct from Cloudflare.

3. Intellectual property

All website content (texts, photographs, illustrations, logo, graphic identity, videos, sounds, icons, source code) is the exclusive property of IMPACT Cardiovascular or its partners and is protected by French and international intellectual-property laws.

Any reproduction, representation, modification, publication, adaptation or exploitation, in whole or in part, of the website's elements, by any means whatsoever, is prohibited without prior written authorisation. Any unauthorised use constitutes infringement punishable under articles L.335-2 et seq. of the French Intellectual Property Code.

4. Ethical compliance

This website is strictly informational. In accordance with the provisions of the French Code of Medical Ethics, and in particular article R.4127-19-1 of the Public Health Code:

• The website is in no way advertising, but rather information useful to the public.
• It contains neither patient testimonials nor comparison with other practitioners.
• The information provided is objective, measured, and consistent with the current state of scientific knowledge and professional guidelines.
• The content is not a substitute for a medical consultation.

5. Protection of personal data (GDPR)

Pursuant to Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the French Data Protection Act No. 78-17 of 6 January 1978 as amended, we are committed to respecting the confidentiality of the personal data you entrust to us.

5.1 — Data controller

The data controller is IMPACT Cardiovascular, 17 rue Froment, 75011 Paris.

5.2 — Data collected

As part of your medical care, we may collect and process the following categories of data:

• Identification data: surname, first name, date of birth, sex, address, phone, email.
• Administrative data: social security number, supplementary health insurance information.
• Health data: medical history, treatments, test results, reports, ECG and Holter recordings.
• Connection data when using the website (IP address, browser type — see Cookies section).

5.3 — Purposes of processing

• To provide medical care, diagnosis and follow-up of patients.
• To manage appointments, billing and relations with the French health-insurance system and supplementary insurers.
• To enable coordination with other healthcare professionals involved in your care.
• To meet our legal and regulatory obligations (maintaining the medical record, archiving).

5.4 — Legal bases

• Performance of a task carried out in the public interest and legal obligation in the field of health (articles 9.2.h and 9.2.i of the GDPR).
• Consent of the patient for certain specific processing.
• Performance of a contract or pre-contractual measures for booking appointments.

5.5 — Data recipients

Your data is accessible exclusively to:

• The centre's medical team, bound by medical confidentiality (article L.1110-4 of the Public Health Code).
• The centre's administrative staff, bound by a confidentiality obligation.
• Health-insurance bodies for the financial coverage of care.
• The healthcare professionals you indicate or with whom we coordinate your follow-up, with your agreement.
• Our technical subcontractors (HDS host, medical software publisher, appointment-booking platform), bound by a GDPR-compliant contract.

5.6 — Retention period

Medical data is kept for the period set by the regulations in force, namely 20 years from the last consultation (article R.1112-7 of the Public Health Code). In the event of the patient's death, the record is kept for 10 years from the date of death.

Administrative data is kept according to the applicable legal periods (in particular 10 years for accounting documents).

5.7 — Your rights

In accordance with the GDPR, you have the following rights over your data at any time:

• Right of access to your data and your medical record.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure within the limits of legal retention obligations.
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing, on legitimate grounds.
• Right to set directives regarding the fate of your data after your death.

To exercise these rights, you can contact the practice:

• By email: dpo@impact-cardiovasculaire.fr
• By post: IMPACT Cardiovascular — DPO — 17 rue Froment, 75011 Paris

A copy of an identity document may be requested to verify your identity.

5.8 — Complaint to the CNIL

If, after contacting us, you consider that your rights are not being respected, you can lodge a complaint with the French Data Protection Authority (CNIL):

• 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07
• Phone: +33 1 53 73 22 22
• Website: www.cnil.fr

6. Cookies

This website uses a limited number of cookies, in compliance with article 82 of the French Data Protection Act and the recommendations of the CNIL.

6.1 — Strictly necessary cookies

These cookies are essential to the operation of the website. They do not require your consent.

6.2 — Audience-measurement cookies

The website may use an audience-measurement tool configured in accordance with CNIL recommendations to qualify for a consent exemption (IP anonymisation, no cross-referencing with other processing, duration limited to 13 months).

6.3 — Third-party services

Some pages embed external services (Google Maps for location, Doctolib for booking). These services may place their own cookies. We invite you to consult their privacy policies:

• Google: policies.google.com/privacy
• Doctolib: doctolib.fr/terms/privacy

6.4 — Managing your preferences

You can configure or delete cookies at any time via your browser settings. Disabling certain cookies may affect your browsing experience.

7. External links

The website may contain links to third-party sites. IMPACT Cardiovascular has no control over these sites and disclaims any responsibility for their content, their data-protection practices or their availability.

8. Liability

The information published on this website is informational in nature. It can in no way replace a medical consultation, diagnosis or treatment. In the event of any symptom or doubt, consult a healthcare professional. In an emergency, dial 15 (SAMU) or 112.

IMPACT Cardiovascular strives to ensure the accuracy and updating of the information published, but cannot guarantee the absence of errors or omissions. The centre's liability cannot be engaged for the consequences arising from the use of the website's information.

9. Applicable law

This legal notice is governed by French law. In the event of a dispute, and failing an amicable resolution, the French courts shall have sole jurisdiction.

10. Updates

This legal notice may be amended at any time to reflect legal, case-law or technical developments.

Last updated: 26 May 2026 — Version 1.0