PERSONAL DATA PROTECTION POLICY
As part of its activities, the Chamber of Trades and Crafts of Hauts-de-France (CMA HDF) is required to process the personal data of its nationals or future nationals, of people looking for a apprenticeship, job or professional training contract, of the salaried staff of the CMA HDF and of all the people solicited within the framework of its actions to promote craftsmanship.
Thus, the purpose of this Policy is to define the information necessary for your understanding of the various processing operations that we carry out in order to carry out our missions and to provide you with the services that are most suitable for you.
As a reminder, European regulations define personal data (hereinafter “personal data”) as any information likely to identify a natural person. The implementation of automated processing of personal data is notably governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data. and the free movement of such data, hereinafter referred to as “GDPR”.
1. FIELDS OF APPLICATION:
The Policy concerns any natural person in connection with the CMA HDF as a national, future national, employee, apprentice or future apprentice and all persons within the framework of its actions to promote crafts.
2. IDENTITY AND CONTACT DETAILS OF THE PROCESSING RESPONSIBLE:
The data controller is the President of the Chambre de Métiers et de l’Artisanat des Hauts-de-France : Monsieur Laurent Rigaud, Place des Artisans à Lille (59000). E-mail : contact@cma-hautsdefrance.fr
3. CONTACT DETAILS OF THE DATA PROTECTION OFFICER:
The CMA HDF has appointed a Data Protection Officer whose contact details are:
DPO SYSTEM
11 rue Marcel Pagnol
13700 Marignane
dpo.cma-hautsdefrance@dposystem.fr
4. THE PURPOSE OF THE PROCESSING IMPLEMENTED
As part of our relationship, we process your personal data for the purposes described below:
4.1 AS PART OF A CALL FOR APPLICATIONS AND PROMOTION OF THE ACTIVITY:
The personal data are:
Patrimonial name / username / first names / nationality / professional address / personal address / landline and mobile telephone number / email address / sites and social networks / RM number / activity(ies) carried out / photos
4.2. IN THE CONTEXT OF THE REGISTRATION OF APPRENTICESHIP CONTRACTS:
The personal data are:
heritage name / name of use / first names / date of birth / place of birth / sex / nationality / personal address / landline and mobile telephone number / email address / social security number of the apprentice or future apprentice / training and trade related to apprenticeship.
The registration of apprenticeship contracts in the trades sector must be carried out by the chamber of trades and crafts for transmission to the control bodies.
Decree No. 2011-1924 of December 21, 2011 relating to the registration of apprenticeship contracts.
4.3 AS PART OF ITS PROFESSIONAL AND CONTINUING TRAINING ACTIVITY:
The personal data are:
.Patrimonial name / first name / date of birth / gender address / landline and mobile telephone number / email address / activity(ies) carried out / training(s) chosen.
Article 23 of the craft code.
Article 10 of decree 2010-1356 of November 11, 2010.
4.4 IN THE FRAMEWORK OF CUSTOMER RELATION MANAGEMENT AND CALLS TO CUSTOMER SERVICE
The personal data are: property name / username / first names / date of birth / place of birth / sex / nationality / professional address / personal address / landline and mobile telephone number / email address / social security number / activity(ies) carried out.
In accordance with the General Data Protection Regulation No. 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and Law No. 78/17 of January 6, 1978 relating to data processing, files and freedoms, we inform you that the recordings mentioned above are subject to the processing of personal data concerning you. The recipients of this data are the agents of the management team of the CMA’s Customer Relations Department.
The controller is the President of the Chambre de métiers et de l’artisanat Hauts-de-France, (contact@cma-hautsdefrance.fr), Place des Artisans, CS12010, 59000 Lille
The CMA Hauts-de-France data protection officer ist DPO SYSTEM, dpo.cma-hautsdefrance@dposystem.fr, 11 rue Marcel Pagnol, 13700 Marignane.
The legal basis justifying the processing of point 4.1 is the consent of the person.
The legal basis justifying the processing described in points 4.2 to 4.4 is the legitimate interest of CMA Hauts-de-France provided for in article 6.1.f of the GDPR.
The recordings and related data may be kept for a maximum period of 06 months from the physical storage of the recordings.
As part of this processing, you have the following rights: right of access, rectification and right to be forgotten, right to the portability of your data, right to limit and oppose data processing, right to determine the fate of data after death, right to refer to the competent supervisory authority, right to withdraw consent at any time. You can exercise your rights by contacting the Data Protection Officer of the Chamber of Trades and Crafts by email, specifying your first and last name and the subject of your request. Your request will be processed within a maximum of 30 days, provided that you produce proof of identity. You also have the option of filing a complaint with the CNIL.
We undertake to protect the personal data collected, not to transmit it to third parties without your having been informed and to respect the purposes for which this data was collected.
The CMA Hauts-de-France undertakes to notify you as soon as possible, in the event of rectification or deletion of data, and, in general, any violation relating to personal data concerning you.
5. INFORMATION OBLIGATIONS:
When you refuse to provide us with personal data which is made compulsory by a standard of legal or regulatory origin and/or which is necessary for the performance of a CMA HDF service, the latter may be led to refuse the request. and/or to withdraw from the contract or to put an end to the contractual relationship.
Consequently, the CMA HDF informs the persons concerned of all the information necessary for the execution of the service on the medium for collecting said information.
6.COOKIES:
Cookies are text files stored in your connection terminal and used to record personal data and technical data relating to navigation on the website. Cookies can be temporary or permanent.
The website uses cookies or other technologies or having the same purpose (hereinafter referred to as “cookies”) that may collect or store your personal data.
Cookies are used to:
● To improve the user experience, in particular by:
○ Recognition of your connection terminal,
○ Recognition of your username and password.
● Analyze traffic and data on the website in order to:
○ Measure the audience of the website in order to improve the user experience,
○ Understand how you use this website in order to improve functionality and performance.
The CMA HDF uses Google Analytics cookies (ga.js) to perform the measurements referenced above.
In the case of the use of cookies provided by our third-party service providers, these may be used and stored under the same conditions above.
The CMA HDF ensures that when transmitting the information generated by these cookies, the cookie settings ensure that the IP/MAC address is anonymized before geolocation and before storage.
By browsing and/or using the services of the website, cookies are activated by default and the data can be read or stored locally on your connection terminal. A consent banner will notify you the first time you log on to the website where you can choose to accept or decline cookies.
By continuing to use the website, you expressly accept that the CMA HDF and its partners use such cookies.
You can configure your browser at any time to systematically control cookies.
7. RECIPIENTS:
The persons concerned are informed that the personal data concerning them may be transmitted to the following recipients:
a) Administrative and judicial authorities legally empowered under the conditions provided for by the regulatory texts applicable to public service missions under the CMA HDF.
b) The subcontractors or partners of the CMA HDF participating in particular in the management of the directory of trades, the center of business formalities, apprenticeship, the processing of the payroll of the employees of the CMA HDF and the promotion of activities of the CMA HDF.
c) The partners of the CMA HDF, to carry out commercial promotion operations.
d) The APCMA for the constitution of the national directory of trades and its promotion to the public.
8.TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION:
Personal data may be communicated to subcontractors established in a country outside the European Union. These entities perform on behalf of the CMA HDF certain material and technical tasks essential to the operation of the technical device, the associated services and for the processing purposes as described above.
This transfer is supervised by the appropriate security and control measures. In some cases, these processors may be located in countries that are not subject to an adequacy decision issued by the European Commission.
Transfers of data to these subcontractors are governed by standard contracts in accordance with the model developed by the European Commission.
The details of these rules and information relating to the transfer are available on simple request addressed to the Data Protection Officer of the CMA HDF.
9. STORAGE PERIOD:
The personal data processed within the framework of article 4.1 of the Policy are kept for 30 years from the end of the promotional actions.
The personal data processed within the framework of article 4.2 of the Policy are kept for 50,120 years for contracts between 1943 and 1973 and duration of the contract + 1 year from 1973.
The personal data processed within the framework of article 4.3 of the policy are kept for a period of 3 years from the last contact entered.
The personal data processed within the framework of article 4.4 of the policy are kept for a maximum period of 6 months from the physical storage of the recordings.
10. YOUR RIGHTS:
You have a right of access, rectification, erasure, portability of personal data, opposition, and limitation of processing as provided for by the GDPR which entered into force on May 25, 2018.
The rights referred to in this paragraph are exercised with the DPD of the CMA HDF:
DPO SYSTEM
11 rue Marcel Pagnol
13700 Marignane
dpo.cma-hautsdefrance@dposystem.fr.
By written request accompanied by a photocopy of the valid identity document (front and back, in black and white).
When the processing is based on the consent of the data subject, said consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent made prior to such withdrawal.
The right of opposition does not apply to processing operations based on a legal obligation.
No fees will be charged for requests from data subjects in connection with the exercise of the aforementioned rights. In the event of a manifestly unfounded or excessive request, the CMA HDF may refuse to respond to the request.
In the event of no response from the CMA HDF within one month of the request to exercise rights, each person concerned may file a complaint with the
CNIL,
3 place de Fontenoy – TSA 80715 –
75334 PARIS CEDEX 07.