Privacy Policy
DIRCAM is the controller, as defined by Article 4 of the RGPD.
It complies with all the French and European regulations and laws relating to the protection of personal data.
DIRCAM applies an extremely strict policy to guarantee the protection of users' personal data (hereinafter "User") of its information and communication systems, particularly its websites and mobile applications:
- Each user remains master of his data. DIRCAM does not have it freely.
- They are treated in a lawful, fair and transparent manner.
DIRCAM is engaged in a continuous process of data protection for the users of its systems, in compliance with the amended Data Protection Act of 6 January 1978 (hereinafter "LIL") and the General (EU) Protection Regulation. data of 27 April 2016 (hereinafter "GDPR").
Purpose of this policy
DIRCAM wishes to inform you via this policy of how we protect your personal data processed via the website www.dircam.dsae.defense.gouv.fr (hereinafter the "Site"). and its equivalent as a mobile application.
This policy describes how DIRCAM processes the personal data of visitors and users (hereinafter the "user (s)") while browsing the site www.dircam.dsae.defense.gouv.fr and their use of the services of the DIRCAM of the Ministry of the Armed Forces and its mobile application (hereinafter the "Application").
This Policy may be modified, supplemented or updated to comply with any legal, regulatory, jurisprudential and technical developments. However, the Personal Data of the user will always be processed in accordance with the policy in force at the time of collection, unless a mandatory legal prescription would otherwise be available and would apply retroactively.
This policy is an integral part of the Terms of Use legal notice of the Site and the Application.
Identity and contact details of the controller
Legal reminder: the controller is the person who determines the means and purposes of the treatment. The subcontractor is the natural person, legal entity, public authority, department or body processing personal data on behalf of the controller. It acts under the authority of the controller and on the instructions of the controller.
The person in charge of the processing of Personal Data is:
- DIRCAM of the Ministry of the Armies.
The data controller, takes measures to ensure the protection and confidentiality of personal information held by him or that he processes in accordance with the provisions of the LIL and the RGPD.
For more information about the services offered by the DIRCAM you can refer to the Terms of Use of the Site (legal notice) or the Application.
In addition, this policy is accompanied by a charter for the use of cookies.
Legal basis of the treatments
As part of the implementation of the website, the collection of your personal data requires the obtaining of your consent.
Purposes of the treatment
The use of the DIRCAM Site (of the Application) implies that the User communicates certain Personal Data. These are mainly processed to allow:
- their navigation on the Site (the Application),
- the management of subscriptions to our publications,
- the response to contact requests,
- access to the various products and services offered by DIRCAM,
- order management (online sales site coming soon)
- if necessary, send you communications about our products and services, unless you object, as described in the policy ("rights of persons").
In the alternative, User data is also collected for:
- prevent and fight against computer fraud (spamming, hacking ...),
- improve and facilitate navigation on the Site (Application),
- diagnose the problems of our server and improve the management of our Site (Application),
- conduct optional satisfaction surveys on the services of DIRCAM,
- perform statistics on the use of the Site (of the Application),
- perform audience analysis, statistics and internal reporting.
All user data is collected directly from them. DIRCAM undertakes to collect the consent of its users and / or to allow them to oppose the use of their data for certain purposes, as soon as it is necessary. In all cases, Users are informed of the purposes for which their data are collected via the various forms of online data collection.
When are personal data collected?
DIRCAM may ask you to provide personal data when you:
- use this Site or the Application;
- create an account on this Site or the Application;
- use one or more of our Services, our SaaS applications accessible via this Site or the Application;
- participate in an online survey;
- subscribe to our newsletters, emails, or other media;
- fill out forms, download documents;
- etc.
Consequence in case of refusal to provide data
If the user does not wish to provide the information requested, the user may not be able to access certain parts of the Site or the Application, and the DIRCAM may not be able to respond to its request. request.
Types of data processed
DIRCAM is likely to treat, to achieve the purposes defined above, all or part of the following data:
- your first and last name (and birth name),
- your date of birth,
- your civility,
- your family situation,
- your landline and / or mobile number (s),
- your (your) address (es) professional and / or personal email,
- your city of birth, residence,
- your country of birth, residence,
- your postal address, etc.
Consent
Your data will be collected through forms on the Site or Application (contact form or software download form). Your consent will be required when collecting your data.
Personal and minor information
In principle, the Site (the Application) is intended for adults capable of contracting obligations in accordance with the legislation of the country in which the User is located.
The Underage User under the age of 15 or incapable must obtain the prior consent of his legal guardian before entering his data on the Site (the Application).
Except in the absence of a legal obligation of confidentiality, the DIRCAM may directly inform this manager (i) of the specific categories of personal data collected from the minor (ii) of the possibility of opposing the collection, use or retention of them.
Recipients of the data
The recipients of your data are:
- services responsible for processing the User relationship, administrative services, IT services, cyber security services and their line managers;
- the authorized staff of the subcontractors, provided that the contract signed between the subcontractors and the controller mentions the obligations incumbent on subcontractors with regard to the protection of the security and confidentiality of the data and specifies, in particular, the objectives to be reached.
Data retention period
We keep your data only the time necessary for the purposes pursued.
Notification of violation
DIRCAM takes its responsibility for managing security and compliance very seriously and has established policies, processes and controls designed to ensure the protection of your personal data, including various security strategies to prevent unauthorized access. to your personal data.
DIRCAM assesses and responds to reports of incidents that may involve unauthorized access to personal data in accordance with the applicable regulatory provisions.
User right
Whenever the DIRCAM processes personal data, the DIRCAM takes all reasonable measures to ensure the consistency and relevance of the personal data with regard to the purposes for which DIRCAM processes them.
In accordance with the European regulations in force, Users of DIRCAM have the following rights:
- right of access (article 15 RGPD) and rectification (art.16 RGPD), updating, completeness of data Users;
- right of erasure of Users' data (article 17 of the RGPD), when they are inaccurate, incomplete, equivocal, out of date, or whose collection, use, communication or conservation is forbidden; or where the personal data are no longer necessary for the purpose for which they were collected or otherwise processed;
- right to limit the processing of Users' data (Article 18 RGPD);
- right to oppose the processing of Users' data (Article 21 RGPD);
- right to the portability of the data that the Users will have provided, when this data is the subject of automated processing based on their consent or on a contract (article 20 RGPD)
Right to lodge a complaint with the CNIL
Finally, Users may lodge a complaint with the supervisory authorities, particularly the CNIL (https://www.cnil.fr/fr/plaintes).
Cookies, logs
- Cookies
- Logs
When you visit the site, your login data is saved, to facilitate your navigation on our site, diagnose the problems of our server and improve the management of our site].
These are kept for a maximum of 1 year from the date of registration and are visible only to agents responsible for the administration of the site.
Registration and order form
Our registration form and order implies that you provide us with information (name, e-mail, postal address ...) that will allow us to contact you, unique identifiers (username and password), demographic information (postal code ...) and financial information (credit card numbers, account ...).
The financial information enables us to verify that the data subject can be registered, and to invoice the requested products and services.
When paying, your bank details are encrypted on your computer and transmitted in unintelligible form to only servers capable of decrypting them. Authorizations and data are then checked with your bank to prevent abuse and fraud.
Security
DIRCAM implements all technical and organizational measures to ensure the security of the processing of personal data and the confidentiality of personal data.
As such, DIRCAM takes all the necessary precautions, in view of the nature of the data and the risks presented by the Site (the Application) (DIRCAM), in order to preserve the security of the data and, in particular, to prevent they are distorted, damaged, or unauthorized third parties have access to them.
