Right to Erasure (Right to be Forgotten)
In accordance with the General Data Protection Regulation (GDPR) and French data protection laws, you have the right to request the deletion of your personal data and account.
How to Request Account or Data Deletion
To exercise your right to erasure, please send an email to:
Please include in your request:
- Your full name
- Your email address associated with your ARO account
- A clear statement that you wish to delete your account and/or personal data
- Proof of identity (for security purposes)
Processing Your Request
We will process your deletion request within 30 days of receipt. You will receive a confirmation email once your data has been deleted.
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access:
You can request a copy of all personal data we hold about you.
Right to Rectification:
You can request correction of inaccurate or incomplete data.
Right to Erasure:
You can request deletion of your personal data under certain conditions.
Right to Data Portability:
You can request your data in a structured, machine-readable format.
Right to Object:
You can object to processing of your data for certain purposes.
Data Retention Periods
We retain your personal data in accordance with French legal requirements:
Medical Records:
Medical data (blood test results, health reports) is retained for 20 years after the last consultation, as required by French healthcare regulations (Code de la santé publique).
Financial Records:
Invoices and payment information are retained for 10 years as required by French tax law.
Account Data:
Other account data (profile information, preferences) is deleted upon request or after 3 years of account inactivity.
Exceptions to Deletion
In certain cases, we may not be able to delete all your data immediately:
- Legal obligations requiring us to retain certain information
- Pending legal claims or disputes
- Legitimate interests that override your right to erasure
If we cannot delete all your data, we will inform you of the reasons and the data that must be retained.
Questions or Concerns?
If you have any questions about your data rights or our data protection practices, please contact us at:
Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the French data protection authority:
CNIL (Commission Nationale de l'Informatique et des Libertés)
www.cnil.fr