Personal data - Public Consultation

The purpose of the processing is to collect and analyse feedback from the public consultation. It enables the CNIL:

• to collect and store the contributions, in order to analyse them and adopt a definitive position for the CNIL;
• if necessary, to contact the authors of the contributions to discuss them further and/or keep them informed of the outcome of the consultations;
• to compile statistics on the contributions received.

Legal Basis

Article 6 (1) e of the General Data Protection Regulation

This data processing relates to the exercise of public authority vested in the CNIL pursuant to the General Data Protection Regulation and the amended French Data Protection Act (loi Informatique et Libertés).

Categories of Data Processed

• Identification data ;
• Contact details;
• Professional position;
• Content of the contribution and possible further discussions;
• Date and time the contribution was sent and, if there is any, date and time of further discussions

Data Source

The information is provided directly by the user of the online consultation form, with the exception of the timestamp of the contribution, which is automatically recorded when the contribution is submitted, and the timestamp(s) of the further discussions, if applicable.

Mandatory Nature of the Data Collection

If participation in the consultation is optional, the consultation form indicates whether data collection is mandatory or optional.

Automated Decision-Making

The processing does not involve automated decision-making.

The form may be used by any person (natural or representative of a legal person) wishing to make comments or proposals relating to the publication submitted.

Categories of Recipients

Depending on their respective needs, the recipients of the data are the services of the CNIL in charge of analysing the contributions and drafting the documents following the consultation.

Data Transfers Outside the EU

No data is transferred outside the European Union.

The identification and contact data, as well as the contributions, will be kept until the CNIL adopts the definite version of its Guide, at which time the data will be deleted or anonymised.

Security measures are implemented in accordance with the CNIL's Information Systems Security Policy (PSSI), which is derived from the State's PSSI.

You may access and obtain a copy of your data, object to the processing, have it rectified or deleted. You also have the right to limit the processing of your data.

Understanding your rights (only available in French)

Exercising your rights

The CNIL's Data Protection Officer (DPO) is your contact for any request to exercise your rights in relation to this processing.

• Contact the DPO electronically

Contact the CNIL's Data Protection Officer (DPO)

• Contact the DPO by post

Data Protection Officer

CNIL

3 Place de Fontenoy

TSA 80715 75334 PARIS CEDEX 07

Submit a Complaint to the CNIL

If, after contacting us, you feel that your rights with regard to your data have not been respected, you can submit a complaint to the CNIL.