Tangramed Biotech SAS (“Tangramed”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use and protect personal data when you visit our website, contact us, request information, or interact with Tangramed in connection with our activities, services, platform, resources or business development discussions.

1. Who we are

The data controller is:

Tangramed Biotech SAS
50 Cours Mirabeau
13100 Aix-en-Provence
France

Contact: info@tangramed.com

2. Personal data we collect

We may collect and process the following categories of personal data:

Information you provide directly, such as your name, company, role, email address, message content, project type, disease area, asset or modality information, and any other non-confidential information you choose to share with us.

Website and technical information, such as IP address, browser type, device information, pages visited, date and time of visit, referring pages and cookie-related information.

Business contact information, such as professional details exchanged during meetings, email correspondence, conferences, introductions or business development discussions.

Please do not submit confidential information through our website forms. Tangramed can put a non-disclosure agreement in place before reviewing confidential project details.

3. How we use your personal data

We use personal data for the following purposes:

to respond to your requests or messages;
to assess and follow up on non-confidential project, partnership, service or diligence enquiries;
to send requested materials, such as non-confidential decks, flyers or one-pagers;
to manage business development discussions and professional relationships;
to improve our website, communication and user experience;
to comply with legal, accounting, regulatory or administrative obligations;
to protect Tangramed’s rights, website, systems, business interests and confidential information.

4. Legal bases for processing

Depending on the context, we process personal data on one or more of the following legal bases:

Consent, where you actively submit a form, request materials or agree to be contacted;
Legitimate interest, for business-to-business communication, website operation, business development follow-up, security and improvement of our services;
Pre-contractual or contractual necessity, where processing is needed to discuss, prepare or manage a potential or existing business relationship;
Legal obligation, where processing is required by applicable law.

5. Cookies and analytics

Our website may use cookies and similar technologies to operate the website, improve navigation, measure audience activity and understand how visitors interact with our pages.

Some cookies are strictly necessary for the website to function. Other cookies, such as analytics or marketing cookies, may require your consent depending on their purpose and configuration. CNIL guidance confirms that audience measurement tools using cookies are generally subject to consent unless specific exemption conditions are met.

You can manage your cookie preferences through the cookie banner or browser settings, where available.

6. Who may receive your personal data

We do not sell your personal data.

We may share personal data only where necessary with:

website hosting and technical service providers;
CRM, email, analytics or communication service providers;
professional advisers, including legal, accounting or compliance advisers;
Tangramed team members or authorized representatives involved in responding to your request;
public authorities, courts or regulators where required by law.

These recipients may process personal data only for the purposes described in this Privacy Policy or as otherwise permitted by law.

7. International transfers

Some service providers used for website hosting, email, analytics or communication tools may be located outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, Tangramed aims to rely on appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses, or other mechanisms recognized under applicable data protection law.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

As a general rule:

contact form and business enquiry data may be kept for up to three years after the last meaningful interaction;
data relating to an active or potential contractual relationship may be kept for the duration of the relationship and then archived as required by applicable limitation, accounting or legal obligations;
accounting and contractual records may be kept for the legal retention period applicable in France;
cookie retention periods depend on the type of cookie and the settings of the website or service provider.

9. Data security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

However, no website, email system or online transmission method is completely secure. Please avoid submitting confidential or sensitive information through public website forms.

10. Your rights

Depending on applicable law and the circumstances, you may have the right to:

access your personal data;
request correction of inaccurate or incomplete data;
request deletion of your personal data;
request restriction of processing;
object to processing based on legitimate interest;
request data portability where applicable;
withdraw consent at any time where processing is based on consent;
lodge a complaint with the competent data protection authority.

The European Commission summarizes these GDPR rights as including access, rectification, erasure, restriction, objection and portability, where applicable.

In France, the competent authority is the Commission Nationale de l’Informatique et des Libertés (CNIL).

11. How to contact us

For any question about this Privacy Policy or to exercise your data protection rights, please contact:

Tangramed Biotech SAS
50 Cours Mirabeau
13100 Aix-en-Provence
France

Email: info@tangramed.com

12. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, legal obligations or data protection practices.