by

logo

Privacy policy (personal data)

AD4HEALTH is an agency that connects advertisers and medical press publishers through innovative solutions tailored to new usages, including the Forecaster tool, while ensuring compliance with the medical, regulatory, and legal framework specific to the healthcare sector.

AD4HEALTH (hereinafter "we", "our", "the Organization") acts as data controller within the meaning of European Regulation No. 2016-679 of April 27, 2016 ("GDPR") and the amended French "Data Protection Act" of January 6, 1978, with respect to the processing of personal data carried out through the Hub and the Forecaster tool.

1. Scope

This policy describes how we process your personal data when you use the client area (Hub) or the Forecaster tool on the website hub.v1.0.ad4health.com.

When we provide our campaign management and tracking services to our clients under the contractual relationship binding us, we may also act as a processor on behalf of our Partners (advertisers, publishers) who are data controllers; this policy does not cover such processing carried out on their behalf, but only the processing for which AD4HEALTH determines the purposes and means in operating the Hub and the Forecaster.

2. What data do we process, and why?

Client area (Hub) — logged-in access

To create your access to the client area and allow you to track your campaigns, we hold in our database your last name, first name, professional email address, and login credentials, as well as your last login date (automatically logged by our hosting provider for security purposes).


Purpose: to create and secure your personal access, give you access to tracking of the media campaign(s) that you or the company you represent have ordered, and ensure the security and technical monitoring of the service.


Legal basis: performance of the contract entered into with you or the company you represent in connection with the purchase and tracking of media campaigns (the quote and campaign order require the creation of a named dashboard access to ensure its tracking), as well as AD4HEALTH's legitimate interest and, where applicable, legal obligation to ensure the security of the platform. As this data is not optional (without it, you could not access tracking of your campaign), its collection is not subject to your consent, unlike the analytics and prospecting trackers described elsewhere in this policy.

Forecaster tool — non-logged-in professional access

When you use the Forecaster tool, the fields and choices you enter throughout the form are first saved locally on your device ("forecastData" storage), solely to ensure the proper completion of your journey. Subject to your consent, we additionally process:

  • Technical and journey data: the identifier associated with your session (a pseudonymous identifier if you are not logged in, or your login identifier if you are), the simulation data you entered (campaign criteria), and details of your interactions with the tool (steps followed, elements clicked, timestamps, number of occurrences), sent to our servers throughout your journey.
  • Your contact data: if you wish to receive your simulation results or be contacted again, your last name, first name, and email address (ideally professional).

Purposes:

  • To run the simulation tool locally and let you follow its various steps without losing your entries ("forecastData" local storage), without this data being transmitted to our servers at this stage;
  • To send you, at your request, the summary and results of your simulation by email;
  • Subject to your consent, to send the content of your entries and details of your interactions to our servers in order to analyze, for statistical purposes, friction points in the journey and improve the tool's usability and relevance;
  • To contact you again, where applicable, about your brief or your simulation, in order to offer you support or services related to your media needs.

Legal basis:

  • AD4HEALTH's legitimate interest in ensuring the proper technical functioning of the tool, for the "forecastData" local storage;
  • AD4HEALTH's legitimate interest in improving the tool and maintaining a business relationship with its clients, partner agencies, and publisher partners in a strictly professional context (B2B prospecting), without prejudice to your right to object as detailed in Section 6 below.
  • Consent, for sending your journey data to our servers and analyzing it, collected via the cookie banner (see Cookie Management Policy);
  • Contract or pre-contractual relationship: to allow us to perform the mission that is the subject of the commercial contract, or to give you an overview of our commercial offers.

3. Who can access your personal data?

Your data may be shared with providers duly authorized by us for the following purposes:

  • Hosting, storage, and technical maintenance of the Hub and the Forecaster (in particular Amazon Web Services);
  • Consent management platform (CMP) enabling the collection and storage of your cookie choices;
  • The agency's professional email system, for storing your contact data and managing the business relationship.

These third parties, acting on behalf of AD4HEALTH, are processors within the meaning of the GDPR. We ensure contractually that they act only on our instructions and implement appropriate technical and organizational measures.

Your data may also be disclosed to any administrative or judicial authority legally entitled to request it.

4. How long is your data kept?

  • Client area (Hub) account data (last name, first name, business email, login credentials):
    • Active database: these data are retained for the entire duration of the contractual relationship with you or the company you represent.
    • Intermediate archiving: at the end of this relationship, your data are retained in a restricted-access archive for 5 years, corresponding to the applicable limitation period for commercial matters (Article L.110-4 of the French Commercial Code), in order to allow us to respond to any potential claim or dispute relating to the performance of the contract.
    • Deletion: upon expiry of this period, your data are deleted or irreversibly anonymized. You may also request the early deletion of your account and your data at any time, using the contact details indicated in Article 7; we will comply with this request as soon as possible, subject to the legal data retention obligations mentioned above.
  • Forecaster technical and journey data (identifier, simulation data, interactions): kept disconnected from your identity for a maximum period of 13 months, counted from the collection of consent, in accordance with our Cookie and Other Tracker Management Policy.
  • Contact data collected via the Forecaster (last name, first name, email submitted through the results and contact form): not stored in an application database on the website. It is transmitted and securely kept within the agency's professional email system, for a maximum period of 3 years from the last contact or the end of the business relationship.
  • Hub last-login log: kept for the entire duration of the contractual relationship, in accordance with our legal obligations and internal security procedures.

5. Data transfers outside the European Union

Your data is hosted within the European Union. However, some technical providers we use (in particular for the consent management solution) may process data outside the European Union. In such cases, we ensure that appropriate safeguards are implemented, in particular through the signing of standard contractual clauses approved by the European Commission.

6. Your rights

In accordance with applicable regulations, you have the following rights over your personal data:

  • Right of access, rectification, and erasure;
  • Right to restriction of processing;
  • Right to object, including at any time and free of charge, to the use of your email address for commercial prospecting purposes;
  • Right to data portability, except for processing based on legitimate interest;
  • Right to set guidelines for the fate of your data after your death;
  • Right to lodge a complaint with the CNIL, if you believe your rights are not being respected.
  • Right to withdraw your consent at any time, for processing based on consent, without affecting the lawfulness of processing carried out before this withdrawal;

These rights may be exercised at any time. We strive to respond as promptly as possible, and within one month at the latest, except as otherwise provided by applicable regulations.

7. How to exercise your rights

You may exercise your rights by writing to AD4HEALTH, 1 rue Royale – Les bureaux de la colline, 92210 Saint-Cloud, France, or by email to dpo@ad4health.com.

To ensure your request is processed quickly and correctly, please provide your last name, first name, email address, and, where applicable, proof of identity.

8. Policy updates

This policy may be amended at any time. Any new version will be published on the website along with its update date.

Last updated: July 20, 2026