Personal Data – Information sent by e-mail on current events or specific actions carried out by the CNIL

Purposes

The purpose of the processing is to enable the CNIL – from a dedicated software managed by the Sarbacane Software society - to:

• prepare to send electronic messages (management of e-mail address lists),
• manage objections to receiving messages,
• receive responses to invitations to take part in an event,
• compile statistics on information campaigns.

Legal basis

Article 6(1) (e) of the General Data Protection Regulation - GDPR

This data processing falls under the exercise of official authority vested in the CNIL in application of the GDPR and the amended French Data Protection Act.

Categories of data processed

• Identity;
• E-mail address;
• Opt-out list for electronic messages;
• Response to an invitation to an event;
• Analysis statistics per emailing campaign (messages opened, objections to receiving messages, technical characteristics of receiving equipment).

Source of data

The data were collected through prior exchanges with the recipients or from open sources, or from qualified contact lists of professionals for communication purposes.

Mandatory nature of data collection

Inclusion in a contact list is optional. Event registration forms specify whether data collection is mandatory or optional.

Automated decision making

The processing does not involve automated decision making.

Data recipient categories

The data recipients are:

• People likely to be interested in the communications of the CNIL;
• Persons listed in an information message;

• Authorised people from the CNIL and its processor.

Data transfers outside the EEA

No data is transferred outside the European Union.

If a person expresses the wish to no longer receive messages from the CNIL, their contact informations are registered on an opposition list. They may also request that their informations be deleted.

Security measures are contractually defined with the processor.

You can access and obtain a copy of the data concerning you, object to the processing of this data, have it corrected or deleted. You also have the right to limit the processing of your data.

• Understand your rights

Exercising your rights

The Data Protection Officer (DPO) of the CNIL is your contact for any request to exercise your rights regarding this processing.

• Contact the DPO by email
   
• Contact the DPO by mail
  Le délégué à la protection des données
  CNIL
  3 Place de Fontenoy
  TSA 80715
  75334 PARIS CEDEX 07

Lodge a claim at the CNIL

If you feel, after contacting us, that your rights on your data are not respected, you can lodge a claim to the CNIL.