Data protection policy

Publié le – Mis à jour le

The Community VILLE DE CHATILLON, considered as Data Controller, undertakes to ensure that the collection and processing of your data, carried out from the site https://ville-chatillon.fr , complies with the General Data Protection Regulation (GDPR) and the Data Protection Act.

In accordance with this new regulation, a Data Protection Officer has been appointed.

Personal Data Protection Officer
Address :
Telephone :
E-mail :

In accordance with the amended Data Protection Act of 6 January 1978 and the provisions of the General Data Protection Regulations (GDPR), you have a set of rights over your personal data and the processing thereof. .
You therefore have a right of access to the data concerning you. You can request their erasure. You also have a right of opposition for legitimate reasons, a right of rectification, portability and a right to limit the processing of your data. To find out more about your rights, you can consult the CNIL website.

For any information or to exercise your rights regarding the processing of personal data, you can contact our DPO using the contact details above or using the dedicated form on our site.

Anyone entering personal information on this site acknowledges being of legal age. For minors, the numerical majority is set at 15 years.

The legal bases for the processing of your personal data on this site are:

  • either a task in the public interest,
  • or a legal obligation,
  • or your explicit consent,
  • or the pursuit of the interests of the Community.

Details are given for each treatment explained in the table below.

No transfer or assignment of your data to third parties takes place.

The storage of this data in the active database and in intermediate archiving is, moreover, limited in time.
The date of deletion of data from forms is set at 12 months. In the case of registration for an online service, a request for confirmation of membership is sent to you every 24 months.

Personal data collected as part of the services of this site are processed according to secure protocols.

Each collection of personal data is limited to what is strictly necessary, in application of the principle of minimization.

If you feel that your rights have not been respected despite everything, you can file a complaint with the CNIL at any time; in particular by going to the following address: https://www.cnil.fr /en/complaints

Logging

In application of the CNIL recommendation of October 14, 2021, the actions carried out by authorized users on personal data within this site are logged in a dedicated file. The implementation of this system, the purpose of which is the active security of the processing, is done in compliance with Articles 5 and 32 of the GDPR, as well as the Data Protection Act.

You will find below the details of the collection and management of your data.

Contact form

Purpose: Contact form allowing exchanges between users and the Community on the site

Legal basis: Consent

Expiry: 12 months

DPO contact form

Purpose: Form allowing a user to contact the DPO of the Collectivity

Legal basis: Consent

Expiry: 12 months

Form to submit news or an event

Purpose: Form allowing a user to submit event-type content on the site

Legal basis: Consent

Expiry: 12 months

Form for FAQs

Purpose: Form allowing a user to ask a question on the site

Legal basis: Consent

Expiry: 12 months

Form to report an incident

Purpose: Form allowing a user to report an incident to the teams of the Collectivity

Legal basis: Consent

Expiry: 12 months

Job offer application form

Purpose: Form allowing the user to apply for a job offer online

Legal basis: Consent

Expiry: 12 months

Spontaneous application form

Purpose: Form allowing the user to submit an unsolicited application for a job online

Legal basis: Consent

Expiry: 12 months

PayFip payment form

Purpose: Online payment of an invoice to State services

Legal basis: Legal obligation

Expiry: 12 months

Extranet

Purpose: Account allowing access to restricted content on the site

Legal basis: Consent

Expiry: Modification, deletion at your request

Online directories

Purpose: Enriching the content of the site displaying contact information (email, surname, first name, photo)

Legal basis: Consent

Expiry: Modification, deletion at your request

Staff directories

Purpose: Enriching the content of the site displaying contact information (email, surname, first name, photo)

Legal basis: Legitimate interests pursued by the Collectivity

Expiry: Modification, deletion at your request

Newsletter subscription

Purpose: Processing your request

Legal basis: Consent

Expiry: Modification, deletion by the person concerned

Sign up for SMS alerts

Purpose: Allows the user to subscribe or unsubscribe from sending SMS

Legal basis: Consent

Expiry: Modification, deletion by the person concerned

Internal cookies necessary for the site to function

TarteAuCitron (cookie management)

Purpose: Save your choices regarding cookie consent
Expiry: 6 months

LocalStorage

Purpose: Saving your preferences
Expiry: 6 months

Matomo (Piwik)

Purpose: Audience measurement
Expiry: 6 months

Third party cookies

Google Analytics

Purpose: Audience measurement
Expiry: 6 months

Google Tag Manager

Purpose: Audience measurement
Expiry: 6 months

Video streaming (DailyMotion, YouTube, Vimeo)

Purpose: Enrichment of content on the site
Expiry: 6 months