Privacy policy

Data controller

Christian Dides, sole trader operating Sansomed, 194 route du Loroux-Bottereau, 44115 Basse-Goulaine. For any question about personal data: contact@sansomed.fr or +33 6 82 61 20 70.

Data processed

Depending on the service used, Sansomed may process: professional identity and title, contact details, practice name and address, technologies or equipment concerned, appointment preferences, messages, consumables requests, BPC Method progression, equipment references, certificates and professional signatures.

No information that could identify a patient should be entered on the website or in the BPC Method Assistant.

Purposes and legal bases

• Responding to an enquiry, assessing a project and arranging an appointment: pre-contractual steps requested by the professional.
• Managing equipment, support, a consumables request or a certificate: performance of the contractual relationship and Sansomed’s legitimate interest in providing follow-up.
• Protecting the website, preventing misuse and retaining evidence where necessary: legitimate interest and legal obligations.
• Sending appointment confirmations and reminders: performance of the request, without automated marketing.

Recipients and service providers

Data are accessible to Christian Dides and, only when the relevant function is used, to the technical providers required for hosting, email, calendar services, notifications, commercial management and artificial intelligence. The principal services used or planned are Scalingo for application and database hosting in France, the OpenAI API for the BPC Method Assistant, IONOS for the domain, email and Dolibarr, Brevo for transactional emails and SMS, and Google Calendar when the connection is active.

Some providers may process data outside the European Union. In such cases, Sansomed relies on safeguards provided for under the GDPR and the contractual commitments of the provider concerned.

BPC Method Assistant

Messages are sent to OpenAI’s artificial intelligence service to produce the response. Sansomed disables application-level storage of the response where the technical interface permits and does not retain conversation history in the BPC portal. Sansomed retains a summary only if the professional chooses to submit it. The Assistant does not make automated decisions that produce legal or similarly significant effects.

Retention periods

• Contact, project or appointment requests that do not result in a commercial relationship: three years after collection or the professional’s most recent contact.
• Partner portal data: for the duration of the relationship with Sansomed, followed by archiving limited to the period required for evidence and applicable obligations.
• Certificates and contractual follow-up records: five years after the end of the relevant relationship, unless a different obligation applies.
• Unsuccessful access recovery requests and technical security logs: deletion or anonymisation no later than twelve months afterwards.

Cookies and local storage

The website currently uses no advertising cookies or audience measurement tools. The partner portal uses only a secure technical cookie required for authentication and session continuity. This cookie does not require prior consent. If an optional tool is added later, information and consent procedures will be adapted before it is activated.

Your rights

You may request access, rectification, erasure, restriction or portability of your data and may object to processing based on legitimate interest. Email contact@sansomed.fr with details of your request. Sansomed responds within the statutory period and may request proof only where there is reasonable doubt about identity.

If you believe your rights have not been respected after contacting Sansomed, you may lodge a complaint with the French data protection authority, the CNIL.

Security

Partner access uses hashed codes and tokens, secure cookies and server-side authorisation checks. As no system can guarantee zero risk, Sansomed limits the data collected to what is necessary for the requested service.

Last updated: 1 September 2026.