Last updated: 17 July 2026
Explicyte is committed to protecting the privacy and personal data of visitors to its website, professional contacts, clients, newsletter subscribers and job applicants.
This Privacy Policy explains what personal data we collect, why we use it, how long we retain it, with whom it may be shared and the rights available to you.
1. Who is responsible for your personal data?
The data controller is:
Immusmol SAS, operating under the Explicyte brand
French société par actions simplifiée with share capital of €50,000
Registered with the Bordeaux Trade and Companies Register under number B 753 232 719
229 Cours de l’Argonne
33000 Bordeaux
France
Telephone: +33 (0)5 64 31 11 70
For any question or request relating to personal data, you can contact Explicyte through our contact page. Please state “Data Protection Request” in your message.
In this Privacy Policy, “Explicyte”, “we”, “us” and “our” refer to Immusmol SAS operating under the Explicyte brand.
2. Scope of this Privacy Policy
This Privacy Policy applies to personal data processed through:
- the Explicyte website;
- website contact and study-enquiry forms;
- newsletter and email-marketing registrations;
- recruitment and job-application forms;
- our customer relationship management tools;
- communications exchanged with Explicyte in connection with a request, potential collaboration or professional relationship.
This policy relates to personal data processed in connection with our website and general business communications.
Personal data processed as part of a specific client study may be subject to additional contractual provisions, confidentiality agreements, data-processing agreements or study-specific documentation.
3. Personal data we collect
Depending on how you interact with Explicyte, we may collect the following categories of personal data.
3.1 Contact and professional information
This may include:
- first name and last name;
- professional email address;
- telephone number;
- company, institution or organisation;
- country;
- job title and department;
- professional areas of interest;
- preferred language;
- the content of your message or enquiry.
3.2 Information relating to service requests
When you contact us regarding a potential study, service or collaboration, we may collect:
- information about your project or research needs;
- requested services and scientific areas of interest;
- study specifications and expected timelines;
- documents or files voluntarily provided with your request;
- communications, meeting notes, proposals and follow-up information;
- information necessary to prepare or perform a contract.
Please do not submit patient-identifiable data, health data, genetic data or other sensitive personal data through our standard website forms unless Explicyte has specifically requested it and provided an appropriate secure communication channel.
3.3 Newsletter and marketing information
When you subscribe to Explicyte communications, we may collect:
- your name;
- email address;
- company or institution;
- professional interests and communication preferences;
- the date, time and source of registration;
- evidence of consent where applicable;
- information about the delivery, opening and interaction with our communications, such as links clicked.
3.4 Recruitment information
When you apply for a position, we may collect:
- your name and contact information;
- your curriculum vitae and cover letter;
- your education, qualifications and professional experience;
- your technical and language skills;
- your employment history;
- your availability and mobility;
- information provided in response to application questions;
- communications with our recruitment team;
- interview notes and assessments;
- professional references, where relevant and lawfully collected;
- any other information you voluntarily include in your application.
You should not include sensitive personal information in your application unless it is strictly necessary for the recruitment process.
3.5 Website usage and technical information
When you visit our website, we may collect technical and usage information such as:
- IP address;
- browser and device type;
- operating system;
- approximate geographical area;
- pages viewed;
- date and duration of visits;
- referring website;
- links and website features used;
- cookie identifiers;
- consent preferences;
- technical logs and security events.
Some of this information is collected through cookies and similar technologies. Further information is available in our Cookie Policy.
4. Why we process your personal data
4.1 Responding to contact and study enquiries
We use your personal data to:
- receive and respond to your request;
- understand your scientific or commercial needs;
- direct your request to the appropriate Explicyte team;
- arrange calls and meetings;
- prepare service proposals, quotations and study plans;
- take steps towards a potential contractual relationship.
The legal bases for this processing are:
- taking steps at your request before entering into a contract;
- our legitimate interest in responding to professional enquiries and developing our business relationships.
When information is required to process your request, failure to provide it may prevent us from responding appropriately.
4.2 Managing professional contacts and client relationships
We may store professional contact information in our customer relationship management system to:
- maintain a record of communications;
- manage prospects, proposals, collaborations and client relationships;
- organise follow-up activities;
- provide information relating to requested or relevant Explicyte services;
- manage contractual and administrative matters;
- improve our commercial and scientific interactions.
The legal bases for this processing are:
- performance of a contract or steps taken before entering into a contract;
- compliance with legal obligations;
- our legitimate interest in managing our professional relationships and business activities.
4.3 Sending newsletters and scientific or commercial communications
We use your personal data to send:
- Explicyte news;
- scientific content and publications;
- information about our platforms and services;
- case studies;
- webinar and event invitations;
- company announcements;
- other relevant professional communications.
Where you subscribe through a newsletter form, the processing is based on your consent.
In certain circumstances, we may send relevant business-to-business communications to existing professional contacts based on our legitimate interest in promoting services related to their professional activities, where permitted by applicable law.
Every marketing email provides an unsubscribe option. You may object to receiving such communications at any time.
Submitting a general contact or study-enquiry form does not automatically subscribe you to the Explicyte newsletter. Newsletter registration is presented as a separate and optional choice.
4.4 Managing recruitment and applications
We process candidate information to:
- receive and review applications;
- assess qualifications, professional experience and suitability;
- communicate with candidates;
- arrange and conduct interviews;
- make recruitment decisions;
- prepare an employment offer where applicable;
- retain suitable profiles for future opportunities where permitted.
The legal bases for this processing are:
- taking steps at the candidate’s request before potentially entering into an employment contract;
- our legitimate interest in organising and managing recruitment;
- compliance with legal obligations;
- consent, where specifically requested for optional processing or retention for future opportunities.
Recruitment decisions are made by authorised Explicyte personnel.
We do not make recruitment decisions producing legal or similarly significant effects solely through automated processing.
4.5 Measuring and improving website performance
Subject to your cookie choices, we may use website analytics to:
- understand how visitors use our website;
- measure website traffic and performance;
- identify frequently viewed content;
- improve navigation and user experience;
- evaluate the effectiveness of our communications and campaigns;
- detect technical problems.
Where analytics cookies or similar trackers require consent, they are not activated until you have provided consent through our cookie-management tool.
You may withdraw or modify your consent at any time through the Manage Cookie Preferences link available on the website.
4.6 Website security and technical administration
We may process technical information and logs to:
- operate and maintain the website;
- prevent spam, fraud, misuse and malicious activity;
- diagnose technical problems;
- protect our systems, users and information;
- establish, exercise or defend legal claims.
This processing is based on our legitimate interest in maintaining a secure and functional website and, where applicable, compliance with our legal obligations.
4.7 Compliance with legal obligations
We may process or retain personal data where necessary to:
- comply with legal, accounting, tax or regulatory obligations;
- respond to lawful requests from courts, regulators or public authorities;
- prevent or investigate unlawful activity;
- establish, exercise or defend legal claims.
The legal basis is compliance with a legal obligation or our legitimate interest in protecting our rights.
5. Cookies and similar technologies
Our website uses cookies and similar technologies for technical operation, preference management, website analytics and other purposes described in our Cookie Policy.
Cookies that are strictly necessary for the functioning and security of the website may be used without consent where permitted by law.
Analytics and other non-essential cookies are used only after obtaining consent where consent is legally required.
You can accept, reject or configure non-essential cookies through our cookie banner.
You can subsequently change or withdraw your choices through the Manage Cookie Preferences link available on the website.
For details about the cookies and trackers used, their purposes, providers and retention periods, please consult our Cookie Policy.
6. Service providers and recipients
Access to personal data is limited to people who require it for the purposes described in this Privacy Policy.
Personal data may be accessed by:
- authorised Explicyte employees and management;
- scientific, business-development, administrative and recruitment personnel, depending on the nature of the request;
- authorised consultants or subcontractors subject to confidentiality obligations;
- website, IT, hosting, maintenance and cybersecurity providers;
- professional advisers such as lawyers, accountants and auditors where necessary;
- competent authorities where disclosure is legally required.
We currently use the following principal service providers.
6.1 Google Analytics 4
Google Analytics 4 is used, subject to your consent, to measure and understand website usage.
Google may process technical identifiers, cookie information and information about interactions with the website.
6.2 Capsule CRM
Capsule CRM is used to manage professional contacts, enquiries, business opportunities, proposals, client relationships and related communications.
Contact details and information about professional interactions may be stored in Capsule CRM.
6.3 Transpond
Transpond is used to manage newsletter subscriptions, contact lists and email campaigns.
Transpond may process:
- names;
- email addresses;
- company information;
- subscription preferences;
- evidence of consent;
- email delivery and engagement information.
6.4 Airtable
Airtable is used to receive, organise and manage recruitment applications.
Candidate contact details, application responses, CVs, supporting documents and recruitment-status information may be stored in Airtable.
6.5 Hostinger
Hostinger provides hosting and technical infrastructure for the Explicyte website.
As part of these services, Hostinger may process technical information such as server logs, IP addresses, security information and website data stored on its infrastructure.
6.6 OVHcloud
OVHcloud provides domain-name registration and related domain or DNS services for the Explicyte website.
OVHcloud may process limited technical or administrative information necessary to provide these services.
6.7 Kipdev
Kipdev provides website design, development and maintenance services.
Where necessary to provide technical support or maintain the website, authorised Kipdev personnel may have access to limited website, administrative, technical or form-related information.
Such access is limited to what is necessary to perform the relevant services and is subject to appropriate confidentiality and data-protection obligations.
6.8 WordPress and website tools
Our website uses WordPress and associated technical tools and plugins, including Rank Math for search-engine optimisation.
Depending on their configuration, these tools may process limited technical or administrative information necessary to operate, secure and optimise the website.
Our service providers process personal data only for the purposes necessary to provide their services and in accordance with applicable contractual and data-protection obligations.
We do not sell personal data or provide it to third parties for inclusion in their independent mailing lists.
7. International transfers
Some of our service providers or their subcontractors may process personal data outside France or the European Economic Area.
Where personal data is transferred to a country outside the European Economic Area, we take steps to ensure that an appropriate transfer mechanism is in place where required.
These safeguards may include:
- a European Commission adequacy decision;
- the European Commission’s Standard Contractual Clauses;
- participation by an eligible recipient in a recognised data-protection framework;
- additional contractual, organisational or technical safeguards.
Further information about safeguards applicable to a particular transfer may be requested through our contact page.
Please state “Data Protection Request” in your message.
8. How long we retain personal data
We retain personal data only for as long as necessary for the purpose for which it was collected, subject to legal retention requirements and applicable limitation periods.
8.1 Contact requests and prospects
Information relating to a contact or service request that does not result in a contractual relationship is generally retained for no longer than three years after the last meaningful contact.
8.2 Clients and contractual relationships
Information required to manage a client relationship is retained for the duration of the contractual relationship.
Relevant information may then be archived for the applicable limitation period, generally up to five years after the end of the relationship, where necessary to establish, exercise or defend legal claims.
Invoices, accounting documents and information subject to mandatory legal retention periods may be kept for longer periods, including up to ten years where required by law.
8.3 CRM records
Professional prospect information stored in our CRM is generally retained for up to three years after the last meaningful contact.
Client contact information may be retained for the duration of the relationship and the applicable legal or contractual retention periods.
8.4 Newsletter subscriptions
Newsletter information is retained until you unsubscribe, withdraw your consent or object to receiving communications.
We may periodically remove inactive contacts.
Limited information may be retained on a suppression list to ensure that an unsubscribe or objection continues to be respected.
Information necessary to demonstrate that consent was obtained may be retained for the applicable legal limitation period.
8.5 Recruitment information
Application information is retained during the recruitment process.
If your application is unsuccessful, we may retain your application for future opportunities, provided that you have been informed and have not objected, for a maximum period of two years after our last contact with you.
Information that must be retained to comply with a legal obligation or to establish, exercise or defend a legal claim may be archived separately for the applicable period.
8.6 Website analytics
Google Analytics event-level data is retained for a period of 14 months.
Aggregated reports that no longer identify individual visitors may be retained for longer.
8.7 Security and technical logs
Technical and security logs are generally retained for no longer than 12 months, unless a longer period is required to investigate a security incident, prevent misuse or establish or defend a legal claim.
8.8 Cookies
The retention periods applicable to individual cookies and consent choices are described in our Cookie Policy.
9. Data security
We implement appropriate technical and organisational measures designed to protect personal data against:
- unauthorised access;
- unlawful use or disclosure;
- accidental loss;
- alteration;
- destruction;
- unauthorised copying.
These measures may include access controls, authentication measures, encryption, backups, system monitoring, staff confidentiality obligations and restrictions on access according to role.
No method of transmission or storage is completely secure.
Users should therefore avoid sending confidential, patient-identifiable or sensitive information through ordinary website forms or unencrypted email unless specifically instructed to do so.
10. Your data-protection rights
Subject to the conditions and limitations provided by applicable law, you may have the following rights.
Right of access
You may obtain confirmation as to whether we process your personal data and receive a copy of that data.
Right to rectification
You may request the correction of inaccurate or incomplete personal data.
Right to erasure
You may request the deletion of your personal data in circumstances provided by applicable law.
Right to restriction
You may request that the processing of your personal data be restricted in certain circumstances.
Right to object
You may object to processing based on our legitimate interests.
You may object to the use of your personal data for direct-marketing purposes at any time.
Right to withdraw consent
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect processing lawfully carried out before the consent was withdrawn.
Right to data portability
Where applicable, you may receive certain personal data in a structured, commonly used and machine-readable format or request its transmission to another controller.
Rights regarding automated decisions
You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except where legally permitted.
Instructions following death
Where applicable under French law, you may define instructions concerning the storage, erasure and communication of your personal data after your death.
You may unsubscribe from newsletters at any time by using the unsubscribe link included in each email.
11. How to exercise your rights
To exercise your rights or ask a question about our processing of personal data, contact Explicyte through our contact page.
Please state “Data Protection Request” in your message and describe your request clearly.
You may also write to:
Immusmol SAS / Explicyte
Data Protection Request
229 Cours de l’Argonne
33000 Bordeaux
France
We may request additional information where reasonably necessary to verify your identity.
Any identification information provided for this purpose will be used only to process your request.
12. Complaints to the supervisory authority
You have the right to lodge a complaint with the competent data-protection supervisory authority.
In France, the supervisory authority is:
Commission nationale de l’informatique et des libertés — CNIL
We encourage you to contact Explicyte first so that we have an opportunity to address your concerns.
13. Links and third-party websites
Our website may contain links to websites, platforms or services operated by third parties.
Those third parties process personal data according to their own privacy policies and practices.
Explicyte is not responsible for the privacy practices or content of external websites.
We recommend reviewing the privacy information provided by a third party before submitting personal information to it.
14. Children’s data
The Explicyte website and services are intended for professionals and organisations operating in the scientific, biotechnology, pharmaceutical, healthcare and academic sectors.
They are not directed at children, and we do not knowingly collect personal data from children through the website.
15. Changes to this Privacy Policy
We may update this Privacy Policy to reflect:
- changes to the website or our processing activities;
- the introduction or removal of service providers;
- changes to applicable law or regulatory guidance;
- changes to our organisational or security practices.
The revised version will be published on this page with an updated revision date.
Material changes may also be communicated through the website or another appropriate method.