Privacy Policy
Last updated: September 4, 2026
American Medical Center Paris (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website american-medical-center-paris.fr (the “Website”).
The Website is operated by Xcell Innovation SAS, a company registered in France under SIREN number 933 605 768, located at 16 avenue du Colonel Bonnet, 75016 Paris, France.
1. Data Controller
The data controller responsible for processing your personal data is:
Xcell Innovation SAS
16 avenue du Colonel Bonnet
75016 Paris, France
Email: contact@american-medical-center-paris.fr
2. Personal Data We Collect
We may collect and process the following categories of personal data:
a) Data you provide directly
- Contact form (“Ask Us”): When you submit an inquiry through our contact form, we collect your name, email address, and any information you include in your message.
- Appointment booking: When you schedule an appointment through our integrated Calendly booking system, you provide your name, email address, phone number, and appointment preferences. This data is processed by Calendly (see Section 6).
b) Data collected automatically
- Technical data: IP address, browser type and version, operating system, referring URL, pages visited, date and time of access.
- Cookies and similar technologies: See Section 5 below for details on cookies.
3. Purpose and Legal Basis for Processing
We process your personal data for the following purposes:
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Responding to your inquiries via our contact form | Legitimate interest / Pre-contractual measures |
| Scheduling medical appointments | Performance of a contract / Pre-contractual measures |
| Website analytics and performance monitoring | Legitimate interest (with your consent for non-essential cookies) |
| Website security and fraud prevention | Legitimate interest |
| Displaying patient reviews | Legitimate interest |
| Providing website translation | Legitimate interest |
4. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Contact form submissions: up to 24 months after your last interaction, unless a longer retention period is required for legal or regulatory purposes.
- Appointment data: retained in accordance with French medical record-keeping requirements (up to 20 years for medical records, as required by Article R. 1112-7 of the French Public Health Code).
- Analytics data: up to 26 months (Google Analytics default).
- Security logs: up to 12 months.
5. Cookies and Tracking Technologies
Our Website uses cookies and similar technologies. A cookie is a small text file stored on your device when you visit our Website.
Categories of cookies used:
| Cookie Type | Provider | Purpose |
|---|---|---|
| Strictly necessary | WordPress / Wordfence | Session management, security, login functionality |
| Analytics | Google Analytics (via Site Kit) | Understanding how visitors use the Website to improve content and user experience |
| Marketing / Tag Management | Google Tag Manager | Managing and deploying marketing tags |
| Functional | GTranslate | Remembering your preferred language for website translation |
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect Website functionality.
6. Third-Party Services
We use the following third-party services that may process your personal data:
- Calendly (Calendly LLC, USA): for online appointment scheduling. Calendly processes your name, email, and appointment details. Calendly’s privacy policy: calendly.com/privacy.
- Google Analytics (Google Ireland Ltd / Google LLC): for website usage analysis. Data may be transferred to the United States under appropriate safeguards. Google’s privacy policy: policies.google.com/privacy.
- Google Tag Manager (Google Ireland Ltd / Google LLC): for managing website tags and scripts.
- Google Reviews: for displaying patient reviews from Google Business Profile.
- GTranslate: for automatic website translation into multiple languages.
- WhatsApp (Meta Platforms Inc.): a WhatsApp chat widget is available on the Website, allowing you to contact us directly. If you choose to use it, your interaction is governed by WhatsApp’s terms and Meta’s privacy policy: whatsapp.com/legal/privacy-policy.
- Wordfence (Defiant Inc., USA): for website security, firewall, and malware scanning. Wordfence may process IP addresses and request data for security purposes.
7. International Data Transfers
Some of our third-party service providers are located outside the European Economic Area (EEA), particularly in the United States. When your data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as:
- The EU-US Data Privacy Framework (where the recipient is certified)
- Standard Contractual Clauses approved by the European Commission
- An adequacy decision by the European Commission
8. Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés), you have the following rights:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate or incomplete data.
- Right to erasure: You may request deletion of your personal data, subject to legal obligations.
- Right to restriction of processing: You may request that we limit how we use your data.
- Right to data portability: You may request to receive your data in a structured, commonly used format.
- Right to object: You may object to processing based on legitimate interest, including profiling.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at: contact@american-medical-center-paris.fr
We will respond to your request within 30 days. You also have the right to lodge a complaint with the French data protection authority:
CNIL (Commission Nationale de l’Informatique et des Libertés)
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Website: www.cnil.fr
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption, a web application firewall (Wordfence), regular security audits, and access controls.
10. Children’s Privacy
Our Website is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us and we will take steps to delete such information.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
American Medical Center Paris
Xcell Innovation SAS
16 avenue du Colonel Bonnet
75016 Paris, France
Email: contact@american-medical-center-paris.fr
Phone: +33 1 46 47 50 00