Preamble

The Conseil départemental d’Indre-et-Loire processes your personal data (hereinafter the “Personal Data”)” with regards to using this website (hereinafter the “website”).

As the data controller, we respect our website user’s privacy and protect their personal data.

The purpose of this policy page is to inform you of the methods of collection, processing and use of your Personal Data and of your rights in terms of protection of personal data with regards to the applicable rules and regulations, in particular the latest version of the Law 78-17 of 6th January 1978 relating to data processing, privacy and freedoms known as “Informatique et libertés” and with the enforcement of RGPD (General Regulations on Data Protection) since 25th May 2018.

ARTICLE 1 – SCOPE OF THIS PRIVACY POLICY

This Policy sets out the principles and guidelines for the protection of your Personal Data, which includes Personal Data collected on – or via – Conseil départemental d’Indre-et-Loire website.

Conseil départemental d’Indre-et-Loire Board collects Personal Data (online, including by e-mail, or offline); this Policy applies regardless of the method of collection or processing.

The term “Personal Data” refers to any information relating to an identified or identifiable individual. A person is “identifiable” when he or she can be identified, directly or indirectly, in particular by reference to an identification number or to one or more specific elements.

“Non-Personal Data” refers to information that does not allow an individual to be identified.

ARTICLE 2 – STORAGE OF PERSONAL DATA

All Personal Data is stored exclusively in France, by our web hosting provider:

OVH
2 rue Kellermann
59100 Roubaix – France
www.ovh.com

ARTICLE 3 – CONTROLLER

The organisation responsible for processing your Personal Data is: Conseil départemental d’Indre-et-Loire – Hôtel du Département – 37927 TOURS cedex 9 – France. Some technical services (such as hosting) are entrusted to our technical service providers (IRIS Interactive). In accordance with the Article 28 of the RGPD, this service provider is bound by a clause of strict confidentiality which prohibits in a contract all use of the data collected by this provider. The contract also mentions the implementation of technical and structural measures in compliance with the commitments to personal data security and protection.

ARTICLE 4 – DATA COLLECTED

Private data

Personal Data may include the following:

  • Name,
  • First name,
  • Email address,
  • Town of residence
  • Post Code
  • Address
  • Phone number

And any other Personal Data that may be relevant for the purposes set out below.

Note to our visitors and website users: certain features and characteristics of the website can only be used if your personal data is supplied to Conseil départemental d’Indre-et-Loire Board when you visit the website. You are free to provide it or not, or to provide all or partial information in regards to your Personal Data.

If you choose however not to provide your data, it may prevent the display of certain functionality and a fully functional use of the website.

Cookies and other trackers

The website may use cookies or other technologies to collect or store Personal Data. Cookies are text files that are stored and used to record Personal and Non-Personal Data about your browsing on the website.

Cookies may be permanent and remain after you log out of the website in order to be used during your next visits or they can be temporary and disappear as soon as you log out of the website.

Conseil départemental d’Indre-et-Loire Board uses cookies to improve your user experience, in particular by:

  • allowing a service to recognize your connection, so that you will not have to provide the same information several times in order to perform the same task;
  • recognising the username and password that you have already provided so that you do not have to supply this information again if requested on web pages.

Conseil départemental d’Indre-et-Loire Board uses cookies to analyse traffic and data on the websites in order to:

  • measure the number of services users, thus making functionalities easier to use and to ensure a quick response to your requests;
  • help Conseil départemental d’Indre-et-Loire Board understand how users interact with the services in order to improve them.

Conseil départemental d’Indre-et-Loire Board may also use the services of third-party service providers in order to perform the services on its behalf and in particular to:

  • analyse your browsing habits and measure the websites and applications’ audiences;
  • analyse your main interests and tailor marketing or advertising offers accordingly;
  • allow you to share content on the Apps’ Sites with others on social networks or to let others know what you are watching or enjoying (e.g., the “Like” button on Facebook).

In this case, invisible “pixels” and cookies provided by these third-party providers could be used and stored. When transmitting the information generated by these cookies, the parameters of the cookies ensure that the IP address is made anonymous before geolocation and before storage. Our service providers will use this information to evaluate your use of the website, to write reports on website activity for Conseil départemental d’Indre-et-Loire Board, and to offer web users better services and advertising targeted to specific needs. They will not associate your IP address with any other data.

When browsing the website, cookies are enabled by default and data can be read or stored locally on your hardware. You will be notified the first time you receive a cookie and you will be able to decide whether to accept it or not. By continuing to use the websites, you accept that cookies are used by Conseil départemental d’Indre-et-Loire.
You may also set your browser to systematically refuse cookies (including cookies used for audience measurement purposes). However, if this is the case, certain functions and features of the website may not display properly and you may not be able to access certain parts or services of the website.

If you wish to amend or delete your information, please refer to Article 8: Your rights.

You can access your cookie management panel in order to set up the input and reading of cookies.

Data storage

By data type:

  • Civil data (surname, first name, postal address…): 3 years maximum;
  • Connection data: 3 years maximum;
  • Location data : 48 hours.

We only keep your personal data according to the purpose for which it was collected, i.e. for a maximum of 3 years from the last exchange that you had with us and carried out at your initiative.

Beyond the above-mentioned periods, your data will be deleted or anonymised.

ARTICLE 5 – PURPOSES OF PERSONAL DATA COLLECTION

As stated above, the website user provides personal data on a voluntary basis.
Personal Data is generally collected for the purposes of Conseil départemental d’Indre-et-Loire Board’s activity such as improving its marketing and advertising practices, adapting its products and services to customers’ needs, or complying with statutory reporting obligations, and other similar activities.

Conseil départemental d’Indre-et-Loire Board collects and uses Personal Data for its activity and in particular for the following purposes:

  • Sending a newsletter from the Rabelais museum
  • Respond to contact requests (contact form)
  • Pre-book a place (s) for an animation, an event, etc …

Conseil départemental d’Indre-et-Loire is also likely to use your e-mail address for administrative purposes or other non-marketing objectives (for example, to notify users of important changes to the website).

ARTICLE 6 – CONDITIONS OF PROCESSING AND STORAGE OF PERSONAL DATA

“Processing” of Personal Data includes, among other things, the use, storage, recording, transfer, adaptation, analysis, modification, reporting, sharing and destruction of Personal Data as necessary in light of the circumstances or legal requirements.

All Personal Data collected is kept for a limited period of time depending on the purpose of processing and only for the period provided for by the applicable legislation.

All Personal Data collected is stored in France (Continental).

ARTICLE 7 – LINKS TO WEBSITES NOT OPERATED BY Conseil départemental d’Indre-et-Loire

The website may provide links to third-party websites that may be of interest to you.

However, it is important to note that Conseil départemental d’Indre-et-Loire Board has no control over the content of third party sites or over the practices of these third parties with regard to the protection of Personal Data that they may collect. Consequently, Conseil départemental d’Indre-et-Loire Board declines all responsibility concerning the processing of your Personal Data by these third parties. It is your responsibility to keep informed of the Personal Data protection policies of these third parties.

ARTICLE 8 – TRANSFER OF PERSONAL DATA

In the case of accessing the website from a country outside of the European Union, with a different legislation on data collection, use and transfer, please note that by continuing to use the website, operated under French law, you consent to our Terms of Use, to this policy and to the transfer of your Personal Data to the European Union.

Your Personal Data may be disclosed within Conseil départemental d’Indre-et-Loire Board for the purposes set out in Article 3 of this Policy.

Conseil départemental d’Indre-et-Loire may transfer your Personal Data outside of the European Union, provided that it ensures, before transferring it, that the entities outside the European Union offer an adequate level of protection, in adequation with enforced European legislation.

If the Conseil départemental d’Indre-et-Loire notices that a third party to whom it has communicated Personal Data for the purposes set out in Article 3 above, is using or disclosing Personal Data without complying with this Policy or in breach of applicable law, Conseil départemental d’Indre-et-Loire Board will take all reasonable steps to prevent or stop such use or disclosure.

You also have the right to decide whether or not to authorise Conseil départemental d’Indre-et-Loire Board to use your Personal Data for a purpose other than that for which it was originally collected. You may object to this use by referring to Article 8 below.
Conseil départemental d’Indre-et-Loire may also share your Personal Data with third parties if necessary for technical reasons (for example, for hosting services by a third party) or to protect its legal interests (for example, in the event of a sale of assets to a third party company, a change of control or the total or partial liquidation of Conseil départemental d’Indre-et-Loire).

In addition, Conseil départemental d’Indre-et-Loire may share your Personal Data with the partner you depend on or assigned to the area in which you are located for the purposes of Conseil départemental d’Indre-et-Loire Board’s activity. We may also share your Personal Data with business partners when Conseil départemental d’Indre-et-Loire and the business partner jointly sponsor an event or participate together in a marketing promotion in which you are involved.

Conseil départemental d’Indre-et-Loiremay disclose your Personal Data if required to do so by law or if it believes in good faith that such disclosure is reasonably necessary to comply with legal process (for example, a warrant, subpoena or other court order) or to protect the rights, property or personal safety of Conseil départemental d’Indre-et-Loire, our customers or the public.

If permitted by the law, Conseil départemental d’Indre-et-Loire may also share your Personal Data with third parties in order to provide users with targeted marketing or advertising offers.

These transfers may take place over the Internet or by any other method deemed appropriate by the Conseil départemental d’Indre-et-Loire in adequation with applicable legislation and the internal security policies of Conseil départemental d’Indre-et-Loire.

ARTICLE 9 – YOUR RIGHTS

Your right to access and amend your data

You have the right to access and amend your personal data.

You can contact us to correct or complete your personal data if it is inaccurate, incomplete, ambiguous or out dated.

Your right to erase your data

You may request us to erase your personal data when one of the following reasons applies:

  • the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • you withdraw your consent previously given
  • you object the processing of your personal data on legitimate grounds;
  • the processing of personal data does not comply with the provisions of applicable laws and regulations.

Nevertheless, the claim to this right will not be possible when the retention of your personal data is necessary under the law or regulations and in particular, for example, for the establishment, exercise or defense of legal rights.

Your right to limit data processing

You may request the limitation of the processing of your personal data in the cases provided for by laws and regulations.

Your right to object to the processing of data

You have the right to object to the processing of your personal data when the processing is based on the legitimate interest of the controller.

Your right to your data portability

Since 25 May 2018, you have the right to portability of your personal data.

The data on which this right can be exercised are:

  • only your personal data, which excludes anonymized personal data or data that does not concern you;
  • the declarative personal data as well as the personal operating data mentioned above;
  • personal data that does not infringe on the rights and freedoms of third parties, such as those protected by business secrecy.

This right is limited to processing based on consent or a contract as well as to personal data that you have personally generated.

This right does not include derived or inferred data, which is personal data created by Conseil départemental d’Indre-et-Loire Board.

Your right to withdraw your consent

As the data processing we carry out is based on your consent, you may withdraw it at any time. We will then stop processing your personal data without jeopardizing the previous operations for which you consented.

Your right to appeal

You have the right to file a complaint with the CNIL on French territory, without prejudice to any other administrative or jurisdictional recourse.

Your right to define post-mortem guidelines

You have the possibility to set guidelines for the storage, deletion and disclosure of your personal data after your death to a trusted, certified third party who is responsible for enforcing the wishes of the deceased in accordance to the requirements of the applicable legal framework.

How to exercise your rights

All the rights listed above can be exercised:

  • par courrier postal à l’adresse suivante :
    • Conseil départemental d’Indre-et-Loire
    • Délégué à la protection des données
    • Hôtel du Département
    • 37927 TOURS cedex 9
  • en joignant une copie de votre carte d’identité et un justificatif de domicile ;
  • via notre adresse mail dpo@departement-touraine.fr. Une procédure vous sera alors envoyée afin de valider votre identité.

Note: the documents sent as part of this procedure will be purely destroyed, and the data potentially collected during the procedure will be definitively erased, at the end of the procedure.

Please also note that all applications that do not comply with these guidelines will be ignored.

We undertake to respond to such requests within 1 month after reception of the request. This deadline may be extended to 2 months depending on the complexity and number of requests received, i.e. 3 months in total.

If you have an account, you can exercise your rights of access and amendment by logging into your account.

However, with regard to the exercise of the right to information, we may not be obliged to do so if:

  • you already have this information;
  • the registration or communication of your personal data is expressly provided for by law;
  • the communication of information proves impossible;
  • the provision of information would require disproportionate efforts.

ARTICLE 10 – SECURITY AND RECIPIENTS OF THE DATA

Conseil départemental d’Indre-et-Loire Board is dedicated to protect and secure the Personal Data you have chosen to communicate, in order to ensure data confidentiality and prevent data from being distorted, damaged, destroyed or disclosed to unauthorised third parties.

Conseil départemental d’Indre-et-Loire has taken physical, digital and organisational protection measures to prevent any loss, misuse, unauthorised access or distribution, alteration or destruction of Personal Data. Among these protection measures, Conseil départemental d’Indre-et-Loire integrates technologies specially designed to protect Personal Data during its transfer. However, despite Conseil départemental d’Indre-et-Loire Board’s efforts to protect your Personal Data, it cannot guarantee the infallibility of this protection due to unavoidable risks that may occur during the transmission of Personal Data.

As all Personal Data is confidential, access to it is limited to the employees and service providers of Conseil départemental d’Indre-et-Loire who need it in order to carry out their mission. All individuals with access to your Personal Data are bound by a clause of confidentiality and expose themselves to disciplinary measures and/or other sanctions if they do not comply with these obligations.

However, it is important that you are also cautious to prevent any unauthorized access to your Personal Data. You are responsible for maintaining the confidentiality of your password and account information. Therefore, you must ensure that you log off the website if you share a computer or a connection terminal.

ARTICLE 11 – DISPUTE RESOLUTION

Although Conseil départemental d’Indre-et-Loire Board has taken all reasonable measures to protect Personal Data, no transmission or storage technology is completely infallible.

However, Conseil départemental d’Indre-et-Loire Board is committed to ensuring the protection of Personal Data. If You have any reason to believe that the security of your Personal Data has been compromised or that it has been misused, please feel free to contact Monkey Factory at the following address: dpo@departement-touraine.fr.

Conseil départemental d’Indre-et-Loire will investigate complaints with regards to the use and disclosure of Personal Data and will attempt to resolve them in adequation with the principles set out in this Policy.

Unauthorized access to or misuse of Personal Data may constitute a violation of local law.

ARTICLE 12 – CONTACT

For any question concerning this Policy, to stop receiving information from Conseil départemental d’Indre-et-Loire Board or for any request to correct, complete, update or erase your Personal Data, feel free to send an e-mail to the following address: dpo@departement-touraine.fr.

ARTICLE 13 – EFFECTIVE DATE AND REVISIONS OF THE PERSONAL DATA PROTECTION POLICY

This Policy may be updated according to the needs of Conseil départemental d’Indre-et-Loire, circumstances or if required by law. We therefore invite you to regularly check for updates.

Update : 19 mars 2021