Since the appointment, on a voluntary basis, of an IT and freedoms correspondent on 29 October 2009, Chooz Town Hall has been committed to a continuous approach to the protection of the personal data of its users, agents and elected representatives, in accordance with the French Data Protection Act (Loi Informatique et Libertés) No. 78-17 of 6 January 1978, amended by Act No. 2018-493 of 20 June 2018, and in compliance with the General Data Protection Regulation (RGPD) of 27 April 2016, which came into force on 25 May 2018.
Chooz Town Hall has an internal commission dedicated to the protection of personal data, involving the various professions concerned in a transversal manner.
This policy is also in line with Chooz Town Hall's desire to develop digital exchanges and promote new digital tools within a fair and transparent framework, at the service of elected officials, agents and users.
Chooz Town Council implements the necessary means for the physical and computer protection of personal data processing systems to avoid any malicious intrusion and prevent any loss, alteration or disclosure of data to unauthorised persons.
Chooz Town Council trains its departments in the principles applicable to the management of personal data and promotes good practice.
The following principles constitute the personal data management policy of Chooz Town Council. These principles apply to computerised and non-computerised processing.
1. Responsibility
The Chooz Town Hall is responsible for the processing of personal data that it implements directly or indirectly in France and abroad. It must therefore comply strictly with the law on the protection of personal data, but also with the RGPD.
In accordance with legal requirements, the Town Hall must complete all the formalities necessary for the implementation of personal data processing, whether this data concerns its elected representatives, its users or its agents
2. Determination of the purposes of the collection of personal data
The Town Hall determines the purposes for which it collects personal data. The data is collected for specific, explicit and legitimate purposes and may not be further processed in a manner incompatible with these purposes.
Further processing for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes shall not be considered, in accordance with Article 89 of the GDPR, paragraph 1, as incompatible with the original purposes.
3. Methods of collecting personal data
The data collected must be accurate and, if necessary, the Mairie de Chooz will take all necessary and reasonable measures to update them.
The Mairie de Chooz does not collect personal data without the knowledge of the persons concerned. The data is collected lawfully, in accordance with Article 6 of the RGPD. The Town Hall does not collect personal data when the persons concerned legitimately object.
The Town Hall provides the data subjects from whom it collects their personal data with information on the purpose of the processing, the identity of the data controller, the legal basis for the processing, the storage period and the scope of their rights in accordance with articles 13 and 14 of the GDPR.
Data shall be adequate, relevant and limited to what is necessary for the purposes for which they are processed. The storage periods must not exceed those necessary to achieve the purposes in question.
The Town Council requires its subcontractors and partners to present sufficient guarantees to ensure the security and confidentiality of personal data.
4. Recipients of personal data
The recipients are, within the limits of their respective attributions and according to the purposes: the staff of the Town Hall and, if necessary, its subcontractors or the elected officials of the Town Hall. Only duly authorised recipients may access the information required for their activity. People's personal data is not passed on to commercial or advertising entities.
In the context of requests from the Town Hall for support services by external partners for people in difficulty entrusted to the community, Chooz Town Hall may exchange information with the social workers of these organisations, who are subject to professional secrecy. The person receiving these services is then personally informed of the process.
With the consent of the beneficiary, the details of the benefits are transmitted to the correspondent of the member employer structure, the beneficiary being able to revise his or her position concerning this consent at any time by sending an e-mail to the address dpd@cd08.fr or, if he or she exists, from his or her personal space (link accessible after logging on to the Beneficiary space, depending on the treatment).
The strictly necessary data transmitted to the indirect service offer partners is intended to verify the eligibility of the beneficiaries for the offers requested by the Chooz Town Hall. This exchange framework is only applied on the initiative of the beneficiaries for a request for a service, with an identified partner.
5. Rights of individuals
The Town Hall implements the necessary means to inform any person who so requests of the existence of personal data concerning him or her and of the use made of it. Each processing operation is the subject of full information for the user, the elected representative or the agent. The Town Hall takes all measures to rectify or delete erroneous information. The Town Hall implements the necessary means to guarantee that the persons concerned have access to their personal data when they request it.
In accordance with the European regulations in force, people have the following rights: right of access, right of rectification, right of deletion, right to limit processing, right to oppose processing, right to data portability.
Chooz Town Council has appointed a Data Protection Officer (DPO) who ensures compliance with the rules on the collection and processing of personal data set out in these regulations.
If the beneficiary wishes to contact the Mairie de Chooz for questions or complaints concerning the protection of personal data or to assert his rights relating to his personal data, he may do so in writing to the following address
Chooz Town Hall, 1 Place de l'Église, 08600 Chooz
or by email to: contact@chooz.com
Since the entry into force of the RGPD, all users have the right to object to profiling, to request the limitation of processing and to lodge a complaint with the supervisory authority, represented in France by the CNIL. They can contact the latter at the following address CNIL, 3 Place Fontenoy, TSA 80715, 75334 PARIS Cedex 07
6. Violation of personal data
In the event of a personal data breach, the Chooz Town Council shall notify the supervisory authority as soon as possible, unless the breach in question is not likely to result in a risk to the rights and freedoms of natural persons. The City Council shall document all elements relating to the breach.
When a personal data breach is likely to result in a high risk to the rights and freedoms of a natural person, the controller shall communicate the information to the data subject as soon as possible. (Article 33 of the GDPR: Notification to the supervisory authority of a personal data breach and Article 34 of the GDPR: Communication to the data subject of a personal data breach).
7. Sustainability of the personal data management policy
Chooz Town Hall regularly ensures that its principles are in line with developments in technology, the law and the needs of users and third parties.