Information on the Personal data protection
The French Alternative Energies and Atomic Energy Commission (“CEA”) has undertaken an overall approach to protecting the personal data it processes.
For the needs of its activities, the CEA processes personal data. “Personal data” means any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier (such as a name, an identification) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
As such, the CEA undertakes to respect the General Data Protection Regulation 2016/679 of 27 April 2016 (“GDPR”) and the French law no.78-17 of January 6th 1978 on Information Technology, Data Files and Civil Liberties (together comprised “Data protection regulation” or “Regulation”).
This notice describes how the CEA collects, uses and processes Personal data, as well as the rights of the data subjects.
Who should you contact for any question about your Personal data?
The CEA attaches great importance to respect for human rights and freedoms and Personal data protection. The CEA has designated a Data Protection Officer who has the authority to deal with all issues related to the Personal Data protection. If needed, please write to the DPO: firstname.lastname@example.org
What types of Personal data are collected by the CEA?
According to circumstances, the CEA may collect some of the Personal data listed below:
identity : name, surname, age, photo, gender, date and place of birth, nationality, identification number
contact data : business and personal contact details
data regarding to your career
– connection data when you browse websites or access to CEA’s information systems
– data necessary for the performance of contracts
data necessary for the management of events, communications operation, solicitation, promotion, investment and partnership.
For what reasons and for what purpose does the CEA collect your Personal data?
The CEA may collect Personal data, as a data controller, to respond to your requests, for compliance with legal and contractual obligations, for the performance of a contract, for reasons of public interest or legitimate interest.
The CEA collects Personal data, where appropriate through forms and contact pages, in particular for the purposes of processing online registration, subscribing to newsletters or publications, responding to an information request, statistical studies and surveys. The Personal data collect may also occur during your consultation of websites, to allow exchanges with the CEA or for internal and external communications such as the management of communication events and the organization of training session, conferences, etc.
With whom the CEA share your Personal data?
The CEA may transfer Personal data to contractors and / or subcontractors, notably to manage registrations, subscriptions, monitor the processing of requests, operate, improve or maintain its activities and services, and to manage its websites.
Where is your Personal Data stored and processed?
Personal Data is processed as much as possible at the CEA, on the national or European Union territory. It is not transferred to third countries. However, in order to offer online services adapted to your needs, the CEA may use services of third parties. To process your Personal Data and provide these services, these partners may process your Personal Data outside the European Union. In this case, the CEA takes the necessary guarantees in order to ensure that the level of protection of natural persons guaranteed by the Regulation is not undermined. You can send a request relating to these guarantees at the following address: email@example.com
How long does the CEA save your Personal data?
Your Personal Data is stored for no longer than the time required for the purpose for which it was collected and/or processed as previously described within the limits of the applicable legal and contractual, tax and social provisions and to protect its lawful interests (for the processing of Personal data based on the legitimate interest of the CEA, within the meaning of the Regulations, for example those set up to monitor communication actions).
If you unsubscribe from a website or a newsletter, your Personal Data is erased from the active databases and only stored as an archive to prove a right, the compliance of a legal obligation or the performance of a contract.
At the end of the time for which the Personal data will be stored, the following statement applies:
deletion or secure destruction of Personal data ;
strict anonymization of Personal data ; or
archiving of Personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
What are your Personal data rights?
You have Personal data rights. In accordance with the Personal data protection regulation, especially GDPR articles 15 to 22, and after proving your identity, you have the right to access, correct or erase your Personal data.
Within the limits of the law, you have the right to object to the processing, to ask for the restriction of the processing, to decide how your personal data will be processed after your death and to exercise the right of data portability.
Notice: these rights are not absolute and remain restricted. Any abusive or unfounded request, notably regarding to safety requirements or laws and regulations obligations, can be rejected.
If you wish to exercise this right and gain access to your Personal Data, please write to our Data Protection Officer: firstname.lastname@example.org.
Where processing is based on your consent, you have the right to withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
May the CEA change this notice of information?
The CEA may change this notice of information at any time, depending on technical and tools development. Therefore, it is recommended to regularly consult it. In case of change, the CEA will publish these changes on this page, in the appropriate places, depending on the importance of the changes.
Commission Nationale de l’Informatique et des Libertés
Please note that you may raise an objection before the Data Protection Officer (email@example.com) and, in the event of unsolved litigation, before the “Commission Nationale d’Informatique et des Libertés”, (“CNIL”) which is the regulatory body in charge of the Personal data protection Regulation enforcement in France, directly by their website: https://www.cnil.fr/fr/agir or by mail at the following address : Commission Nationale de l’Informatique et des Libertés, 3 Place de Fontenoy – TSA 80715, 75334 PARIS CEDEX 07.
You can refuse this tracking at any time by blocking cookies through your browser. Personal Data collected is not transferred to third parties or processed for other purposes. In any case, cookies put down on your navigation device with your agreement are erased at the latest thirteen (13) months after their deposit on your terminal.
For further information concerning cookies, you can consult the CNIL website: https://www.cnil.fr/fr/site-web-cookies-et-autres-traceurs