Welcome to the new Gustave Roussy website
A new website designed to offer you a simpler, clearer, and more intuitive experience. Patients, caregivers, healthcare professionals, and donors: find information, news, and services more easily.
Patient Personal Information
As part of your care, Gustave Roussy collects and uses certain personal data necessary to ensure the quality and continuity of your care. The protection of this data is a legal obligation and an ongoing commitment of the institution.
The processing of this data is governed by the regulations applicable to the protection of personal data and medical confidentiality.
Why is your data used?
The information collected throughout your care journey allows us, among other things, to:
- provide you with medical care;
- organize and coordinate your care;
- to ensure your administrative follow-up;
- to contribute, under certain conditions, to research, teaching, and the evaluation of the quality of care;
- to comply with the legal and regulatory obligations applicable to healthcare facilities.
All data is processed in accordance with confidentiality and medical privacy requirements.
Processing of Patient Data
Throughout your care at Gustave Roussy, the Institute’s teams collect a great deal of information about you.
The information about you recorded in your medical record throughout your care includes the following types of data:
- Identity and administrative data: your name, age, address, nationality, social security and health insurance coverage, social security number, etc.;
- Employment information: your occupation, etc.;
- Personal lifestyle data: your lifestyle habits, your use of tobacco, alcohol, and drugs, etc.;
- Health data (clinical, biological, and genetic): your medical history, your consultation and hospitalization records, your treatment data, the results of various tests performed as part of your care and follow-up, etc.
Collecting this information is essential for the quality and safety of your care.
The data collected about you is used primarily to provide you with care; for example, to manage your medical and administrative records, to bill for medical services, to electronically submit your treatment forms, to generate your test results, and to conduct statistical analyses of Gustave Roussy’s department activities.
Your data may also be used in satisfaction surveys.
Finally, your data may be used for scientific research (research on cancer, COVID-19, etc.). Gustave Roussy collaborates with DrData, and in this context, your personal data may only be processed via the DrData Consent solution if you have been informed in advance of this processing. For certain categories of research, this processing may also only be carried out after obtaining your explicit consent.
While ensuring your anonymity, some of your medical data (e.g., your imaging scans) may also be shared with the scientific community at seminars or conferences, published in scientific journals, and/or reused for educational purposes.
Your personal data is retained for the limited periods provided for by applicable law, depending on the specific purpose.
For example, medical records must be retained for a period of twenty years from the date of the last treatment, or at least until the patient’s twenty-eighth birthday, or for ten years from the date of death.
Access to Patient Data
Access to your data is restricted to:
- the healthcare team providing your care;
- to your primary care physician (unless you object);
- to authorized administrative departments at Gustave Roussy, within the scope of their responsibilities (e.g., Medical Information Department, Quality and Risk Management Department);
- to Gustave Roussy’s partners and subcontractors (e.g., EVERIAL for the archiving of Gustave Roussy’s medical records);
- where applicable, to certain public authorities (e.g., the Primary Health Insurance Fund).
The healthcare team responsible for your care may also need to share your data with other professionals to obtain additional expertise as part of your care.
Please note that Gustave Roussy’s subcontractors who have access to patient information must first enter into a contract committing to comply with a set of very strict security and confidentiality measures.
Satisfaction and experience surveys are regularly conducted among Gustave Roussy patients and their families. Gustave Roussy also participates in the national e-Satis survey for all patients hospitalized for more than 48 hours and for all patients undergoing outpatient surgery.
During these surveys, access to your data is limited to Gustave Roussy staff conducting the surveys (e.g., a physician and their team) and to Gustave Roussy’s Quality and Risk Management Department; except in the case of the e-Satis survey, where your responses are shared with the French National Health Authority (HAS) and the Technical Agency for Hospital Information (ATIH).
Please note that for all surveys (including e-Satis), the information you provide by participating is anonymous.
Your participation in a research study involves the collection and use of certain personal data for scientific analysis.
Access to information that could identify you is restricted to:
- to Gustave Roussy professionals involved in the study and to those responsible for the study’s quality control and assurance;
- to your treating physician in the context of a clinical trial (unless you object);
- where applicable, to subcontractors acting on behalf of Gustave Roussy;
- where applicable, to certain public authorities (e.g., ANSM, European Medicines Agency).
Your personal data is pseudonymized in advance—meaning it no longer reveals your identity—before it is used by anyone other than those listed above.
After pseudonymization, your personal data may be shared with hospital, industry, and academic partners, as well as specialized healthcare companies collaborating with Gustave Roussy. In this context, your data may be transferred outside of France, including to non-European countries. In all cases, Gustave Roussy ensures that any third party with access to your data provides sufficient safeguards prior to the sharing of your information.
While always ensuring your anonymity, the results of this study may also be shared with the scientific community at seminars and conferences or published in scientific journals.
Gustave Roussy also conducts scientific studies using data from the Program for the Medicalization of Information Systems (PMSI)*. Your PMSI data is hosted by the Technical Information Agency (ATIH). Analysis of this data does not allow researchers to identify you.
Spotlight on Dr. WAREHOUSE
The Gustave Roussy Health Data Warehouse:
Since 2020, Gustave Roussy has been using a health data warehouse that enables the integration of its patients’ health data from a wide range of its clinical software systems (e.g., electronic health records).
This repository, called Dr WAREHOUSE, enables researchers to accelerate patient recruitment for clinical trials, better visualize their care journeys at Gustave Roussy, and facilitate research programs by consolidating all hospital patient data into a single database while ensuring strict confidentiality of their data.
→ Learn more about this data warehouse
Spotlight on ESMÉ
The data warehouse in collaboration with Unicancer:
Gustave Roussy is participating in a research program in collaboration with Unicancer, a network of cancer treatment centers.
Épidémio-Stratégie Médico-Économique (ESMÉ) is a data repository that centralizes data on patients treated for cancer in France for research purposes, with the aim of improving treatments and therapeutic strategies. ESMÉ aims to track changes in the care of cancer patients, evaluate the effectiveness of treatments in real-world settings, and provide this data to researchers and clinicians.
ni-esme-unicancer-v1-110123.pdf
Your Data & Your Rights
In accordance with applicable regulations, you may request access to your data, obtain a copy of it, and, in certain circumstances, request that it be corrected or erased, object to its processing, and/or request that its use be restricted.
To exercise your rights, you may contact the Data Protection Officer at Gustave Roussy (please include a valid form of identification with your request), either:
- by mail: Institut Gustave Roussy, Data Protection Officer, Digital Transformation and Information Systems Department, 114 Edouard-Vaillant Street, 94 805 Villejuif Cedex – France;
- by email: donneespersonnelles@gustaveroussy.fr.
Requests to delete personal data and/or to object to its use must be supported by a legitimate reason.
If your request is not resolved to your satisfaction, you may also file a complaint with the French Data Protection Authority (CNIL): https://www.cnil.fr/fr/plaintes.
Requests for access to your medical records should not be directed to the Data Protection Officer.
→ To learn about the rules governing access to your medical records.
* Scientific studies conducted by Gustave Roussy using PMSI data: You may exercise your rights directly with the agency that administers the mandatory health insurance program (e.g., CPAM) to which you are enrolled.