Quality and Safety

During your consultation or treatment at the Angoulême Charente Radiotherapy Center (CeRAC), personal administrative and medical data have been requested from you and are included in your medical and administrative file. This file will be updated throughout your visits and care process with information provided by the facility’s staff and professionals or external establishments involved in your care (general practitioner, specialist, laboratory, medical imaging, other radiotherapy centers, etc.). The collection of this information is limited to what is necessary for your care and coordination of treatments.

The information is processed in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act of January 6, 1978, as amended by Decree 2019-536 of May 29, 2019, which aligns the national law with the GDPR.

The processing of this data serves the following purposes:

• Managing your file for administrative purposes, in relation to health insurance, complementary insurance, and billing authorities.
• Managing your health data for medical and paramedical care.
• Creating statistical reports related to cancer pathology within the radiotherapy center and with authorized recipients.
• Video and audio surveillance at the entrance to the center, in waiting areas, and treatment rooms for your safety. Only the surveillance at the service entrance is recorded and stored for a maximum of 30 days.
• Conducting teleconsultations.
• Managing your appointments, with the option to send SMS confirmations.

This processing is carried out under the responsibility of the CeRAC[1] Administrator as the operator and the Director of the Angoulême Hospital Center, the holder of the radiotherapy treatment authorization.

Your file is accessible only to internal and external staff involved in your care. Some information may be shared with external partners, such as health insurance and complementary insurance companies for administrative management of care, and, if necessary, with establishments involved in your treatment (Charente Cancer Coordination Center, healthcare facilities, MonEspaceSanté, and other radiotherapy centers, etc.). Your information may also be transmitted to authorized recipients for statistical purposes or studies on cancer pathology (e.g., Cancer Registry, University Hospital Center, etc.). All recipients are located within the European Union.

Your medical file, whether digital or paper, is retained for an appropriate duration following your last visit to the radiotherapy center, in compliance with current regulations. Given the specificity of radiotherapy treatments (the need to consider previous radiation exposure for an unlimited period), physicians may decide to extend the retention period of technical data related to your radiotherapy treatment in case of future radiation, in your best interest.

The processing of your personal data, particularly health-related information, will be handled by healthcare professionals bound by professional secrecy (Article 9 of the GDPR). Your consent to treatment authorizes CeRAC and its staff to process your personal data for your care. You have several rights designed to protect your privacy and ensure the accuracy of your data:

• Right of access to your file, upon request to the CeRAC Administrator or the Director of the Angoulême Hospital Center. Information will be provided either directly or through a doctor of your choice.
• Right to rectification in case of inaccuracies in your data.
• Right to erasure of data (“right to be forgotten”) that is no longer necessary for processing.
• Right to restrict processing if the accuracy of certain information is disputed or if it is no longer necessary for processing.
• Right to data portability for the data you have provided (limited to this data), which means you can receive it or send it to another organization of your choice in a structured, commonly used, and machine-readable format (this format will depend on the characteristics of the software used by CeRAC and its partner establishments and the technical capabilities available).
• Right to file a complaint with the CNIL if you believe that the processing of your personal data infringes on your privacy or is not compliant with regulations.

For more information or to enforce your rights, you can contact the Data Protection Officer at CeRAC, either by mail at the CeRAC address or by email at [dpo@elsan.care](mailto:dpo@elsan.care)

[1] CeRAC: Angoulême Charente Radiotherapy Center. A healthcare cooperation group facilitating public/private collaboration within Charente for the treatment of cancer patients. CeRAC includes the Angoulême Hospital Center, the Clinical Center, SAS CALIANG, and SELAS RADION.