Abbreviations
- PAD : Personal Data
- RGPD : General Data Protection Regulation
- CNIL : Commission Nationale de l’Informatique et des Libertés
- DPD/DPO : Data Protection Officer
This Personal Data Management Policy (DCP) describes how your data is processed when using the Carnical of nice website ” https://www.nicecarnaval.com/” and other websites owned by the City of Nice, in compliance with the European Regulation 2016/679 of 27 April 2016 on data protection (known as the ” RGPD “), and with the amended law n° 78-17 of 06 January 1978, relating to Information Technology, Files and Liberties (known as the ” Information Technology and Liberties Law “).
The City of Nice, as the data controller, is committed to protecting the privacy of individuals and undertakes to take all necessary steps to ensure a high level of protection for your personal data. It determines the purposes and means of the processing that it implements.
Compliance with the rules on the protection of personal data is a real factor of transparency and confidence in your regard.
I. The commitments of the City of Nice in terms of personal data protection
The City of Nice undertakes to ensure that the processing of your personal data from its website “https://www.nicecarnaval.com/” and other websites owned by the City of Nice complies with the RGPD and the Data Protection Act.
The City of Nice undertakes to guarantee a high level of protection for your personal data.
The City of Nice undertakes to process your personal data in a legal, fair and transparent manner.
Each electronic form or teleservice limits the collection of personal data to what is strictly necessary for the purposes for which it is processed and clearly indicates :
- the purpose of collecting your data ;
- the legal basis for the processing ;
- whether this data is obligatory or optional for the management of your request, and the possible consequences of a failure to reply ;
- who will be able to see it ;
- how long the data will be kept ;
- your rights regarding your data and how to exercise them with the City of Nice.
Collecting your data for specific, explicit and legitimate purposes
Your personal data is collected for specific, explicit and legitimate purposes, always in connection with the public service missions pursued by City of Nice, and is not further processed in a way that is incompatible with these purposes.
Obtaining your prior consent
In the context of the use of the Nice Carnival website and other websites owned by the City of Nice, the processing of your personal data is based on your consent, which you may withdraw at any time by sending an e-mail to the City of Nice Council’s Data Protection Officer (DPO) : dpd@nicecotedazur.org.
Before collecting your data, the City of Nice ensures that your consent is free, specific, informed and unambiguous.
Minimising the data collected
Your personal data is collected in a way that is adequate and relevant to the purposes for which it is collected.
Your PII is limited to what is necessary to achieve the purposes for which it is processed.
Limiting the accesses and recipients of your data
Only authorised staff of the City of Nice have access to your personal data within the strict framework of their duties. They may only have access to the PADs necessary for the performance of their duties.
Where applicable, only authorised recipients (natural or legal person, public authority, service or other body), authorised third parties and subcontractors of the City of Nice (who process PAD on behalf of the NCA Metropolitan Area, on its instructions and under its authority), may receive your PAD in strict compliance with PAD protection rules.
Keeping your data in a limited way
Your personal data is kept for the time necessary to achieve the purposes for which it was collected.
Your PADs are retained in a manner that is consistent with data protection rules.
Guaranteeing appropriate security
The City of Nice implements appropriate technical and organisational measures :
- to ensure a level of security appropriate to the risk inherent in its FCD processing operations;
- to meet the regulatory requirements for the protection of PDS;
- to protect your rights and data at the design stage of processing operations.
Where appropriate, strong PII protection and confidentiality clauses are put in place as part of the contract/agreement/undertaking/understanding with the recipients and subcontractors of the PII concerned.
The PII concerning you is processed on French territory, or at least on the territory of the European Union. If PADs are processed in a third country, the City of Nice undertakes to ensure that the third country concerned presents guarantees that ensure a sufficient and appropriate level of data protection, in compliance with the RGPD and in particular the provisions relating to the transfer of PADs to third countries.
Respecting your rights
In accordance with the RGPD and the French Data Protection Act, you can access your personal data and request their correction and deletion.
You also have the right to portability of your data, the right to limit the processing of your data and the right to organise the fate of your data post-mortem.
II. Exercising your rights regarding your PAD
To exercise your rights or if you have any questions about the processing of your data in the context of the use of the Nice Carnival website and other websites owned by the NCA Metropolitan Area, we invite you to contact our DPO : dpd@nicecotedazur.org.
You may submit a complaint -on line or by post- to the CNIL if you feel -after contacting our DPO- that your rights have not been respected or that the processing carried out does not comply with data protection rules.
Commission Nationale de l’Informatique et des Libertés (CNIL) :
3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07
Tel : 01 53 73 22 22
www.cnil.fr
