Privacy Notice & GDPR Compliance
1. Data Controller
The data controller responsible for the processing of personal data on this website is SAS Aleha, registered with the Registre du commerce et des sociétés under number 879 818 862, whose registered office is at Center Azur, Route des Vernèdes, 83480 Puget-sur-Argens, France.
2. Purpose of Processing and Legal Basis
Personal information submitted through the contact form may be processed solely to:
- respond to your enquiries and requests for guidance;
- assess your residency standing, timing and insurance requirements in France;
- organise consultations conducted by Christina Wingfield or a trained member of her team;
- handle formal complaints in accordance with statutory obligations.
Processing relies on the steps taken at your request before entering into a contract and/or, where applicable, your consent. The contact form is not intended for sensitive health data.
3. Strict Exclusion of Medical Data
Do not include diagnoses, treatment details, medication lists, medical reports or sensitive health records in any website form. Any formal medical underwriting required by an insurance provider must be sent only through the insurer’s designated secure medical underwriting channel.
4. Data Recipients and Confidentiality
Personal information is never sold. Enquiries are addressed to the authorised Healthcare in France / SAS Aleha team through the secure operational mailbox. They may also be accessed by technical service providers acting on SAS Aleha’s instructions. Where necessary to respond to an insurance request, and subject to the appropriate legal basis and information being provided to the client, relevant information may subsequently be communicated to selected insurers or insurance-management partners.
Medical-underwriting information must never be sent through this website. Where required, it must be sent only through the insurer’s designated secure medical channel.
When the contact form is operational, transactional routing is provided through Brevo acting on SAS Aleha’s documented instructions. The form sends text-only messages, does not configure marketing webhooks, and disables open and click tracking for these transactional communications.
5. Retention Period
Personal information is retained only for the period necessary for each stated purpose, taking account of the relationship with the person, applicable legal or regulatory obligations, and any need to establish, exercise or defend legal claims.
The exact retention schedule and criteria will be maintained by SAS Aleha and reviewed where required by applicable legal or regulatory obligations.
6. Your Rights
Under Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (Loi Informatique et Libertés), you may have rights of access, rectification, erasure, restriction of processing, objection and, where the conditions are met, data portability.
To exercise these rights or ask a question about personal-data processing, contact contact@healthcare-in-france.com or write to SAS Aleha, Center Azur, Route des Vernèdes, 83480 Puget-sur-Argens, France.
If, after contacting the controller, you consider that your rights or applicable data-protection rules are not respected, you may lodge a complaint with the CNIL. The CNIL also provides an online complaints service.