As part of its public service missions Ancoris implements various processing of personal data (contact lists, requests for information) As such, it is subject to the provisions of the European Regulation 2016/679 (General Data Protection Regulation, hereinafter referred to as the GDPR, which came into force on 25 May 2018).
GENERAL
What are personal data processing operations?
These are all manual or computerized processing relating to data that can directly or indirectly identify natural persons (for example the use of data such as: first name last name, photograph, nominative e-mail, identification number, location data, data specific to the physical, physiological, economic identity of a person…)
Ancoris Privacy Policy
The purpose of this Privacy Policy is to provide you with general information about the processing of your personal data under the responsibility of Ancoris, your rights and how to exercise these rights.
Understanding the processing of your personal data
To ensure that information about processing is understandable and readable, it is provided to the public at the time and place where Ancoris collects a personal data, through the use of this website. This is to enable the public to understand the purpose of the data and to help them to take control of their data by facilitating the exercise of their rights (opposition, access, rectification, deletion, limitation, portability). This information described in the “RGPD information” at the time of collection concerns :
- the purpose of the data collection,
- the legal basis that authorizes Ancoris to collect and process personal data
- the length of time the data is kept
- the rights you have with respect to the data and the methods for exercising these rights
YOUR RIGHTS REGARDING YOUR PERSONAL DATA
The regulation relating to the protection of personal data recognizes the rights of persons whose personal data are processed. To exercise your rights, listed below, you have 2 ways:
- by e-mail to the address of the Data Protection Officer: ggady@ancoris.fr (attaching a copy of your identity card if there are doubts about your identification)
- by mail addressed to Ancoris – Data Protection Officer 8 rue Henri Rochefort 75 017 Paris who will reply to you in principle within 1 month of receipt of the request.
Right of access
You may ask us to provide you with the personal data that Ancoris holds about you. It is possible for us not to respond favorably to your request in several cases:
- your request is “unfounded
- your request is “excessive
- your request limits the rights of other individuals (for example, copyright or if the communication of personal data concerning a third party is not avoidable)
Right of Correction
You can ask us to amend your personal data that is inaccurate or incomplete.
Right to erasure
You can ask us to delete your personal data, provided that you are in one of the following situations:
- your data is no longer necessary for the purpose of the processing originally established
- you withdraw your consent to the use of your data, in cases where the processing is based on your consent
- you object to the processing of your personal data, in cases where you have this right (see the right to object)
- your data is processed unlawfully
- your data must be deleted to comply with a legal obligation
When requesting deletion, it is important to specify which data you wish to have deleted.
Right to object
This right allows you to object to a processing operation that is carried out for a specific purpose, provided that you can demonstrate “reasons relating to your particular situation”. We may refuse your request to object in certain cases, including:
- there are legitimate and compelling reasons to process your data
- your data is necessary for the establishment, exercise or defence of legal claims
- a legal obligation requires us to process your data
Right to portability
This right allows you to obtain part of your personal data in a machine-readable format. However, this right is limited since it only applies to :
- only to data that you have provided to us
- whose processing is automated
- whose processing is based on your consent.
Moreover, the exercise of this right must not infringe on the rights and freedoms of third parties. Right to choose the fate of your data after your death In accordance with Article 85 of the Data Protection Act, “any person may define directives relating to the conservation, deletion and communication of his or her personal data after death”. Right to complain to the CNIL If you think that your rights are not respected you can make a complaint to the supervisory authority for the protection of personal data (CNIL).
DATA CONTROLLER
The data controller is the natural or legal person, the public authority, who, alone or jointly with others, determines the purposes and means of data processing. Ancoris’ data controller is the General Manager of Ancoris. The data controller must ensure, throughout the life of the personal data processing implemented, compliance with the regulations relating to the protection of such data. Contact details for the Data Protection Officer Compliance with the regulations is facilitated by the appointment of a Data Protection Officer (DPO) whose role is to monitor the compliance of the processing carried out by the data controller and to ensure that the rights of the persons concerned are respected. For any questions relating to personal data, you can contact the Data Protection Officer: ggady@ancoris.fr. Commitments of the data controller Ancoris undertakes to provide persons whose personal data is processed by its services with all the information they need to understand how it is used and the rights they have with respect to this data. In all cases, Ancoris undertakes to make every effort to ensure that personal data is :
- obtained and processed fairly, transparently and lawfully
- collected for specified, legitimate purposes and to limit its use to those purposes
- adequate, relevant and not excessive in relation to these purposes
- processed with respect for the rights of individuals in accordance with the applicable regulations
- retained in accordance with the purposes for which it is to be used
- processed and stored in such a way as to ensure their security in order to prevent them from being subject to a breach (loss of availability, integrity or confidentiality, whether accidental or unlawful)
- updated as necessary, with procedures for erasing or correcting inaccurate personal data
ANCORIS WEBSITE AUDIENCE MEASUREMENT
The Ancoris website uses the Google solution to measure its audience. This solution involves the use of cookies. Cookies are small data files stored on the hard drive of your computer, tablet or cell phone that facilitate navigation between pages of the site and allow faster access to the information you are looking for when you visit the site regularly.
Security measures
In application of article 9 of order no. 2005-1516 of 8 December 2005 on electronic exchanges between users and administrative authorities and between administrative authorities: teleservices. Please note that Ancoris’ teleservices are subject to security approval. Ancoris implements appropriate technical and organizational measures to protect your personal data against alteration, accidental or unlawful loss, use, disclosure or unauthorized access, including :
- monitoring systems for vulnerabilities and attacks
- securing access (authorization policy), sharing and transfer of data
- training to raise awareness of data protection and confidentiality requirements for all staff
- implementation of IT security policies and procedures
- Data protection requirements when selecting subcontractors
Database Law
Databases are protected by the law of July 1, 1998 and the French copyright regime.