This privacy policy describes how the website drtourabaly.fr, published by Dr Moïse Tourabaly (SELARL medical practice), processes the personal data of visitors, in accordance with Regulation (EU) 2016/679 (RGPD) and the French Data Protection Act (“Informatique et Libertés”) of 6 January 1978, as amended.
Data controller
Dr Moïse Tourabaly (SELARL)
1 Ter Rue Camille Desmoulins — 94230 Cachan
E-mail: contact@drtourabaly.fr
Phone: +33 1 45 47 08 11
Data collected and purposes
The website contains a contact form, available from the Contact page. Sending it is optional and requires your explicit consent; merely browsing drtourabaly.fr requires neither registration nor the transmission of any personal information.
- Appointment booking: consultation requests are handled by Doctolib. Data entered on Doctolib is processed in accordance with Doctolib’s privacy policy, a separate data controller.
- Connection data: for technical and security purposes, the host retains connection logs (IP address, date and time of the request, pages viewed). This data is not used for commercial or profiling purposes.
- Direct contact: if you write to the practice’s e-mail address, the information you provide is used solely to respond to your request.
Legal basis
Processing operations are based on the publisher’s legitimate interest (security and proper operation of the website) and, where applicable, on your consent (e-mail exchanges) or on the performance of pre-contractual measures (appointment booking via Doctolib).
Recipients and hosting
Data is neither sold, rented, nor transferred to third parties for commercial purposes. Website hosting is provided by:
Hostinger International Ltd.
61 Lordou Vironos Street, 6023 Larnaca, Cyprus
hostinger.fr
Retention period
Connection logs are kept for a period not exceeding thirteen (13) months, in accordance with the recommendations of the CNIL. E-mails exchanged are kept for as long as necessary to process your request, then archived or deleted.
Cookies and trackers
This website uses only strictly necessary technical cookies required for its operation (administrator authentication, display preferences). These cookies are exempt from consent in accordance with the recommendations of the CNIL.
No behavioural analytics tools (Google Analytics, Meta Pixel, Hotjar, etc.) are used. No advertising tracking or profiling cookie is placed.
Your rights
In accordance with the RGPD, you have the following rights regarding the data concerning you:
- Right of access and information
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
Exercising your rights
To exercise these rights, contact the data controller by e-mail at contact@drtourabaly.fr or by post at the Cachan practice (1 Ter Rue Camille Desmoulins — 94230 Cachan). A response will be provided within one month.
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL (cnil.fr).
Security
The website is served over HTTPS (TLS certificate). Reasonable technical and organisational measures are implemented to protect data against any unauthorised access, alteration or disclosure.
Changes
This policy may be updated at any time to reflect legal or technical developments. The date of the most recent update appears below.
See also our legal notice.
Last updated: September 2026.
Online guidance assistant
The website provides an assistant that answers your questions based on the practice’s content. When you use it:
- Data processed: the text of your question and a pseudonymised technical identifier (hashed, non-reversible IP address). Do not enter any information identifying you (name, contact details) or details of your health.
- Purposes: to guide you in real time and improve the site’s informational content. The assistant provides no diagnosis or personalised medical advice and does not replace a consultation.
- Processor: responses are generated using Anthropic’s service (Claude), which may process the request outside the European Union, under standard contractual clauses.
- Retention: questions are kept for a maximum of 12 months, then automatically deleted.
- Your rights: access, rectification, erasure and objection by writing to the practice (see our contact details).
Online quote for your health insurer
The Quote for your health insurance page generates a PDF fee quote in your name for laser refractive surgery, to send to your health insurer. For this tool and for its verification page:
- Data processed: last name, first name and date of birth, as your health insurer expects to see them on a quote; e-mail address, printed on the quote and used to send it if you so request; chosen technique, for both eyes; for a verification, the information entered (number, control code, last name, first name, date of birth, fee amount). No medical information (medical history, examinations, treatments) is requested; the chosen technique is the only information related to your health.
- Purposes and legal basis: to draw up the quote, make it available to you for download and, if you request it, send it to you by e-mail, on the basis of your explicit consent, given by ticking the box on the form; to verify the authenticity of a quote when it is presented, to protect the service against abuse and to monitor use of the tool through aggregate counts drawn from this log, on the basis of the practice’s legitimate interest in preventing fraud, ensuring the security of the service and measuring its usefulness.
- Retention: the site keeps neither your last name, first name and date of birth, nor your e-mail address; for a verification, the last name, first name and date of birth entered are not kept either. The quote is not archived: its information is sealed in an encrypted token, valid for 24 hours and held by the page open in your browser (without a cookie); the PDF is regenerated from this token each time it is downloaded or sent. The site maintains a log with no identity details (no last name, first name, date of birth or e-mail address): quote number, technique and eye, amounts, control code, page language, timestamp, type of action and, for a verification, its result. This log is kept for 13 months; it is pseudonymised and not anonymous, because the number and the code also appear on your quote.
- Control code: each quote bears a code calculated by the site, using a secret key, from the quote number, last name, first name, date of birth and the amount of the surgeon’s fees. The page entitled Verify the authenticity of a quote recalculates the code from the information entered: if it matches, a quote bearing that information was indeed issued by the site. The code does not cover the other details on the document (date, technique, clinic package).
- Protection against abuse: the number of requests (quotes, downloads, e-mails, verifications) is limited per connection by means of a pseudonymised technical identifier (IP address hashed with a secret key). This identifier expires at most one hour after the last accepted request and is not associated with any data from the quote.
- Recipients: the data is neither sold nor transferred. The website host (Hostinger), as a processor, processes it each time the PDF is generated, each time it is sent and at each verification; the e-mail goes out from the practice’s address through the host’s e-mail service, which may keep a technical record of it. If the address entered is incorrect, the undelivered message may be returned, with the quote, to the practice’s mailbox, where it is handled like other incoming e-mails (see “Retention period”). During a verification, the page shows the person carrying out the check the date, the technique and the amounts recorded in the log, if they are still there, so that they can compare them with the document they hold.
- Your rights: those described above in this policy, exercisable by writing to the practice; you may withdraw your consent at any time, with no effect on a quote already drawn up. As the site does not archive quotes, it cannot provide you with a copy: keep the one you were given.