Privacy policy

1.PREAMBLE

Grand Bourg Agglomération attaches the utmost importance to protecting the privacy and personal data of visitors to its website (hereinafter referred to as “website users” or “you”).

The purpose of this personal data protection policy (hereinafter the “Policy”) is to :

• to describe the purposes and the Personal Data concerning you that Grand Bourg Agglomération and its Subcontractors may collect;
• to inform you of your rights and the procedures for exercising them between you and Grand Bourg Agglomération in relation to your Personal Data.

2.DEFINITIONS

COMMISSION NATIONALE DE L’INFORMATIQUE ET DES LIBERTÉS (CNIL) :

Independent administrative authority created in 1978, composed of a pluralist college of 17 commissioners, coming from various backgrounds (4 members of parliament, 2 members of the Economic and Social Council, 6 representatives of high jurisdictions, 5 qualified personalities, etc.).

DATA PROTECTION OFFICER (DPO):

The Data Protection Officer (DPO) is responsible for ensuring compliance with the European Data Protection Regulation within Grand Bourg Agglomération, which has appointed him/her for all processing operations carried out by this body.

PERSONAL DATA (PD):

Personal data is any information relating to an identified or identifiable natural person. However, because it concerns individuals, they must retain control of it. A natural person may be identified: directly (e.g. name, etc.).

SENSITIVE DATA :

Sensitive data is a special category of personal data. It is information that reveals alleged racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, etc. No sensitive data is collected by Grand Bourg Agglomération via its website.

PURPOSE OF PROCESSING :

The purpose of processing is the main objective of the use of personal data. Data is collected for a well-defined and legitimate purpose and is not further processed in a way that is incompatible with this initial purpose.

DATA CONTROLLER:

The data controller is the legal entity (Grand Bourg Agglomération / la Plaine Tonique) or natural person who determines the purposes and means of processing, i.e. the objective and the way in which it is to be achieved. In practice and in general, this is the legal entity represented by its legal representative.

SUBCONTRACTOR

The processor is the natural or legal person (company or public body) who processes data on behalf of another body (“the controller”), as part of a service or provision.Processors have obligations.

PROCESSING OF PERSONAL DATA :

Processing of personal data is any operation, or set of operations, relating to personal data, regardless of the process used (collection, recording, organisation, storage, adaptation, modification, retrieval, consultation, use, etc.).

3.FIELD OF APPLICATION

Grand Bourg Agglomération / la Plaine Tonique is responsible for processing the user’s personal data and informs the user that their data will be processed in accordance with the provisions of the regulations in force on the protection of personal data, Regulation (EU) 2016/679 of 27 April 2016 (RGPD) on the protection of individuals with regard to the processing of personal data and their free movement.Its partners are its subcontractors. They intervene within an exclusively contractual framework in which the processing of personal data is provided for.

4.PROCESSING OF PERSONAL DATA

1.GRAND BOURG AGGLOMÉRATION/ LA PLAINE TONIQUE DATA PROCESSING REGISTER

The processing of personal data is mapped in the processing register kept by the outsourced Data Protection Officer of Grand Bourg Agglomération / la Plaine Tonique. The purpose of the privacy policy is to provide visitors to the website with the necessary information on the processing operations and their associated rights. Detailed information on data processing is available from the Data Protection Officer.

2.LEGITIMATE GROUNDS FOR PROCESSING

According to article 6 of the European Data Protection Regulation (RGPD), the consent of the person whose data is recorded in a file is not required when this data is collected:

• For the performance of a contract (e.g. a sales, rental or employment contract, etc.) or pre-contractual measures (e.g. a quotation, discussions, etc.).
• Because a legal text makes certain files compulsory (e.g. the INSEE population census, the single personnel register, etc.).
• For the performance of a public interest or public authority task (e.g. creation of police files, tax administration files, etc.).
• To safeguard a person’s vital interests (e.g. in the event of an epidemic, natural or man-made disaster, etc.).
• For a legitimate interest (e.g. fraud prevention, transfers within a group, network security, etc.) unless the interests or fundamental freedoms of the data subject prevail.

Grand Bourg Agglomération / la Plaine Tonique carries out processing on the basis of legitimacy relating to access to the Grand Bourg Agglomération / la Plaine Tonique website and the proper performance of local public services to which users have access.

Apart from these cases, the consent of the person concerned is mandatory.It is this consent that makes the proposed file lawful.For example, in the case of the Newsletter and certain website cookies, the individual’s consent is required.Withdrawal of consent is possible at any time and has no retroactive effect on the lawfulnesś of the Processing carried out on this basis, prior to the said withdrawal.

3.THE PURPOSES OF PROCESSING

The purpose of processing is the main objective of the use of personal data.

Data is collected for a well-defined and legitimate purpose and is not further processed in a way that is incompatible with that initial purpose. This principle of purpose limits the way in which the data controller may use or re-use the data in the future.

a) Purposes

1.Management of the contact form

2.Newsletter registration management

3.Quote request management

4.Route calculation management

5.How long personal data is kept

Personal data cannot be kept for an indefinite period: this period must be defined according to the objectives pursued by the processing.Once this purpose has been achieved, the data should be archived, deleted or made anonymous (for example, in order to produce statistics).The retention of personal data by Grand Bourg Agglomération / la Plaine Tonique complies with the criteria for the retention of personal data: they will be retained for the duration of their Administrative Useful Life as set out in Instruction DAF/DPACI/RES/2009/018. When this interest is no longer required for this purpose, the data will be archived or deleted using appropriate security measures to guarantee their anonymisation or total destruction.

Grand Bourg Agglomération / la Plaine Tonique will keep data for a period of 13 months concerning the data collected by the website and concerning the use of the website. Additional information is contained in the Grand Bourg Agglomération/ la Plaine Tonique personal data processing register.

These retention periods are recorded in the data processing register held by the Data Protection Officer of Grand Bourg Agglomération/ la Plaine Tonique.

5.FLOWS OF PERSONAL DATA

Personal data may be communicated between the departments of Grand Bourg Agglomération/ la Plaine Tonique, but also to public control bodies, and to subcontractors when this is necessary to carry out data processing.Grand Bourg Agglomération/ la Plaine Tonique’s subcontractors are bound by contracts, in which the conditions for processing personal data are set out in an RGPD rider.

These flows are identified in the Grand Bourg Agglomération/ la Plaine Tonique data processing register kept by the Data Protection Officer.

6.THE RIGHTS OF PERSONS CONCERNED BY THE PROCESSING OPERATIONS

In accordance with the RGPD, the constituents and users concerned by the processing implemented by Grand Bourg Agglomération/ la Plaine Tonique have the right to request from its Data Protection Officer access to the Personal Data concerning them; the rectification or deletion thereof, or a restriction on the processing of their personal data and the right to the portabilitý of their data.Data subjects may exercise their right to object on grounds that concern them. In the event of opposition the data will no longer be processed, except in the context of legal obligations imposed on Grand Bourg Agglomération/ la Plaine Tonique.To exercise these rights, it is recommended to contact the Data Protection Officer of Grand Bourg Agglomération/ la Plaine Tonique.Grand Bourg Agglomération/ la Plaine Tonique has appointed a “Data Protection Officer” (DPO) who is the official contact for all questions relating to the exercise of the rights of persons concerned by processing carried out by a metropolitan service.He can be contacted at the following address: protectiondonnees@ca3b.fr

7.PERSONAL DATA PROCESSED BY GRAND BOURG AGGLOMÉRATION/ LA PLAINE TONIQUE

The personal data collected is necessary to process the request:

• Contact form management :
o Last name o First name
o E-mail address
o Telephone number
• Postal address- Newsletter subscription management
o Last name
o First name
o E-mail address
• Management of quote requests
o Last name
o Email address
• Route planner management
o Geolocation

Data processing by Grand Bourg Agglomération/ la Plaine Tonique, in particular via the website, complies with the following principles:

b)Limitation of processing

Data controllers must only collect personal data for specific purposes, must clearly indicate their objective and must only keep the data for as long as is necessary to achieve this objective.

Processing carried out for archiving purposes in the public interest or for scientific, historical or statistical purposes enjoys greater freedoms.

c)Data minimisation

Data controllers must only process the personal data they need to achieve the initial objective. This has two major advantages. Firstly, in the event of a data breach, the unauthorised person will only have access to a limited amount of data. Secondly, data minimisation ensures that data remains accurate and up-to-date.

5.COMPULSORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED

By ticking the relevant boxes and entering the data in the fields on the contact forms or booking forms for an activity organised by Grand Bourg Agglomération/ la Plaine Tonique or presented on the downloaded forms, the user expressly, freely and unequivocally accepts that his/her data is necessary for the local service to be able to follow up his/her request, the inclusion of data being voluntary in the remaining fields. The user guarantees that the personal data provided to Grand Bourg Agglomération/ la Plaine Tonique are true and takes responsibility for communicating any changes concerning them.

Grand Bourg Agglomération/ la Plaine Tonique informs the user and expressly guarantees that under no circumstances will his/her personal data be transferred to third parties other than those mentioned above, nor to its partners involved in data processing. Whenever any type of transfer of personal data takes place, other than for reasons related to the performance of the local public service contract, the user’s express, informed and unequivocal consent will be requested beforehand on the registration form for the service offered.All the data requested via the website or via any of the contact methods made available are compulsory, as they are necessary to provide the best possible service to the user or constituent. In the event that all data is not provided, Grand Bourg Agglomération / la Plaine Tonique does not guarantee that the information and services it provides are fully adapted to the needs of the user or constituent.

6.STORAGE OF PERSONAL DATA

All Personal Data is stored exclusively in France, by our web hosting service provider :

OVH
RCS Lille Métropole 424 761 419 00045
APE code 2620Z
VAT NUMBER: FR 22 424 761 419
Head office: 2 rue Kellermann – 59100 Roubaix – France

7.SECURITY MEASURES

In accordance with the provisions of the regulations in force regarding the protection of personal data, Grand Bourg Agglomération/ la Plaine Tonique applies all the provisions of the RGPD regulations for the processing of personal data placed under its responsibility, and manifestly applies the principles described in Article 5 of the RGPD, whereby data are processed lawfully, fairly and transparently with respect to the data subject and are adequate, relevant and limited to what is strictly necessary in relation to the purposes for which they are processed.

Grand Bourg Agglomération/ la Plaine Tonique guarantees that it has put in place appropriate technical and organisational policies with a view to applying the security measures provided for in the RGPD in order to protect the rights and freedoms of website users and citizens, and has provided them with adequate information so that they can exercise them.