Respect for the privacy and protection of the personal data of Site users are important to CNR, which undertakes to protect and use appropriately the Personal Data collected online from Users of its Website and Services.

This policy on personal data and cookies (hereinafter the “Policy”) informs Users of the CNR's policy regarding the collection, use, and disclosure of their Personal Data by and on the Site and Services.

By using this Site and the Services it offers, and/or by providing personal information, the User consents to the collection and use of their Personal Data in accordance with this Policy.

This Policy may be amended at any time, so Users should refer to the latest version of the Policy before using the Website or its Services.

DEFINITION

“Applicable regulations” refers to Law No. 78-17 on information technology, files and civil liberties of 6 January 1978 and Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

"User" » refers to any legal or natural person located within the European Union who visits the website "www.cnr.fr" and all pages of said website. 

"Personal data means any information relating to an identified or identifiable natural person.

« Cookies » refers to small text files generated and sent to the User's browser from the Website and accepted and processed by the User's browser. They are then stored on the hard drive of the User's computer by their browser. They can be used to facilitate navigation on the Website, track the User's navigation on the Website for statistical purposes, etc.

“IP address” (Internet Protocol address) refers to the number assigned to the User's computer by their Internet service provider (ISP) when they access the Internet.

“Site” » refers to the CNR website located at the URL «www.cnr.fr», including all pages of said website.

“Services ” refers to the services offered by the CNR on its Site.

RESPONSIBILITY FOR PROCESSING PERSONAL DATA

The party responsible for processing Users' Personal Data within the meaning of the applicable Regulations is CNR (Comité National Routier), a professional organization whose SIREN number is 775 666 183 and whose registered office is located at 8, villa Bosquet - 75007 Paris.

PERSONAL DATA PROTECTION DELEGATE

The role of the Data Protection Officer is to ensure compliance with the applicable Regulations and this Policy.

He can be contacted by e-mail by writing to the following address dpd@cnr.fr or by post to:

CNR

Personal Data Protection Officer

8 Villa Bosquet

75007 Paris

PERSONAL DATA AND COOKIES

In connection with the Site and the provision of Services, CNR may collect and process Personal Data and use the following Cookies.

Personal data :

Types of personal data collected and processed

CNR may collect Personal Data relating to the User in connection with the use of the Site, such as :

  • Personal data collected automatically without any action on the part of the User

The CNR may collect the User's connection and browsing data, such as IP address, device used (e.g. computer, smartphone, tablet, etc.), country of connection, browsing software and telephone number if the User uses the CNR switchboard. 

  • Personal data voluntarily provided by the User to CNR

The CNR may collect Personal Data from Users that is voluntarily provided by them, such as their company name, surname, first name, title, postal address, email address, age, telephone number, consent to participate in surveys, choice of alerts, subscriptions, product orders and bank details.

Purpose :

CNR may collect, process and store Personal Data as defined in Article 4.1.1 in order to:

  • To offer, improve and personalize the Site;
  • Remplir ses obligations légales ;
  • Maintaining the relationship with the User;
  • Manage the ordering and billing of paid services;
  • To offer Services adapted to the User's requests;
  • Subscribe to free features (e.g. newsletter) or paid features (purchase of products or monthly or annual subscriptions);
  • Measuring the Site's audience;
  • Enable the User to exercise his rights as set out in article 10.
Foundation

The processing of the User's Personal Data collected, processed and stored by the CNR is based on :

  • The User's consent;
  • Performance of a contract ;
  • Compliance with a legal obligation.

The bases are specified below for each category of Personal Data.

Cookies :

CNR may collect and process Cookies used on the Site and deposited on the User's computer in connection with the use of the Site.

Technical cookies

These are cookies placed for the technical purposes of browsing the Site, but also for the purposes of customizing the Services offered on the Site.
The technical cookies used by the CNR are the following:

Statistical analysis and audience measurement cookies

CNR uses the Google Analytics tool, which generates reports on Users' interactions with the Site. This tool is used to analyze and create statistics and to personalize advertising.

For more information on how Google Analytics uses personal data, click here: https://support.google.com/analytics/answer/6004245
and here https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage

Third-party cookies 

Some of the Site's functionalities listed below are based on services or applications offered by third parties (e.g. newsletter subscription, social network sharing button), in particular from the following websites:

  • Facebook.com 
  • Twitter.com
  • Linkedin.com
  • Mailjet.com

By accepting the use of these third-party services and applications, these third parties may deposit cookies and use the User's Personal Data in accordance with their own personal data management policies, to which the CNR is not a party (see article 8 below).

RECIPIENTS OF PERSONAL DATA, PURPOSES, LEGAL BASIS AND PERIOD OF STORAGE OF PERSONAL DATA

Personal Data are processed for the following purposes, legal bases and retention periods:

Data type(s) Data recipient(s) Purpose(s) Legal basis Data storage period
Data collected automatically without user action
Connection and browsing data (indirectly and automatically supplied)
  • IP address
  • navigation software
  • Device used
  • Country of connection,
  • Etc.
  • CNR
  • Judicial authorities
  • Site host
  • Google Inc.
  • Offer, improve and personalize the Website
  • Fulfilling legal obligations
  • Measuring the Site's audience
Compliance with a legal obligation
For the duration of the session and 2 years after session closure
Data voluntarily provided by the user
Company name, surname, first name, title, address, town, zip code, telephone number, e-mail address, acceptance to take part in surveys, choice of alerts, subscription, Product order, bank details.
  • CNR
  • Payment service provider
  • Newsletter service provider
  • Maintaining customer relations
  • Subscribe to free features (e.g. newsletter) or paid features (purchase of products or monthly or annual subscriptions);
  • Ordering and billing paid services ;
  • Offer Services adapted to the User's requests
  • Enable the User to exercise his rights in accordance with article 10
As appropriate :
  • User consent
  • Contract performance
For the entire duration of the contractual relationship and 10 years after its termination

DESTINATION OF COOKIES, PURPOSES AND PERIOD OF STORAGE OF PERSONAL DATA

Data type(s) Data recipient(s) Purpose(s) Data storage period
Technical cookies (site operation)
Session and browsing ID, user ID, user account status (activated/deactivated)
CNR
How the site works
For 13 months from the opening of the session
Statistical analysis and audience measurement cookies
Google Analytics
  • CNR
  • Google Inc.
  • Analyze and create statistics
  • Customize ads
For 13 months from the opening of the session

RECIPIENTS OF PERSONAL DATA

Personal Data collected and processed when using the Site and Services are transmitted to CNR and to the following third parties:

  • The third-party application providers referred to in article 8, which may in particular use Cookies, such as Google Inc. which provides Google Analytics, social network operators such as Facebook ;
  • CNR's subcontractors, in particular its technical service providers, including the Site host and its payment and billing service provider;
  • Public, administrative or judicial authorities, in particular if the Personal Data is the subject of a judicial requisition.

THIRD-PARTY APPLICATIONS ON THE SITE

The Website contains links to applications that are not under the control of the CNR and are operated by third parties. The User accepts and acknowledges that this Policy does not apply to these links and applications:

Google Analytics

CNR uses Google Analytics to collect and analyze information on the use of the Site and report on Site activity and trends in order to measure performance and improve the Site.

Google Analytics may also collect information about your use of other websites, applications and online resources.

The CNR cannot be held responsible for the collection and processing of Personal Data by Google, whose data protection policy is available here: https://support.google.com/analytics/answer/6004245

and here https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage

In order to offer Site Users greater control over the collection of their Personal Data by Google Analytics, Google has developed Google Analytics Opt out Browser Add-on (https://tools.google.com/dlpage/gaoptout). This add-on communicates with the Google Analytics JavaScript (ga.js) to indicate which Personal Data collected when browsing the Site should not be sent to Google Analytics. However, it does not prevent Personal Data from being sent to the Site or to other analysis services.

 Facebook, Twitter, Linkedin

CNR may use “social buttons”, i.e. buttons that link to third-party social media sites. Examples include the “Like” and “Share” features offered by Facebook, Twitter and Linkedin.

Through these features, Facebook, Twitter and Linkedin can identify the User even if the User does not use these features on the Site. Using these features, Facebook, Twitter and Linkedin can track information about the User's browsing on the Site if the User's Facebook, Twitter and Linkedin account is active during browsing.

Facebook Twitter and Linkedin have joined the EU-US Data Shield Program and Swiss-US Data Shield Program with regard to the collection and processing of personal data : 

https://www.facebook.com/about/privacyshield

https://twitter.com/fr/privacy

https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=fr

The CNR cannot be held responsible for the collection and processing of Personal Data carried out by Facebook, Twitter and Linkedin, whose data protection policies can be accessed here :

http://www.facebook.com/about/privacy/.

https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

https://twitter.com/fr/privacy

 Mailjet:

CNR uses Mailjet to send newsletters to the User.        

To this end, the CNR provides Mailjet with Users' e-mail addresses.

The CNR cannot be held responsible for the collection and processing of Personal Data carried out by Mailjet, whose data protection policy is available here: https://www.mailjet.com/privacy-policy/

COOKIE MANAGEMENT

An information banner appears when the User arrives on the Site's home page. This information banner links to a page that allows the User to configure cookies in order to accept or refuse them. 

The User will have the option of accepting the deposit of certain cookies and/or refusing them, without their browsing being hindered by this refusal.

It is however specified that the deposit of technical operating cookies is mandatory and exempt from the need to obtain the User's prior consent.

At any time, the User may also decide to refuse third-party and statistical analysis and audience measurement Cookies by configuring his/her browser. To do so, the User may consult the following pages for more information on how to delete Cookies on the most common browsers:

For more information, the User may visit the CNIL website at the following address: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser

SECURITY AND INTEGRITY

The security of personal information is important to CNR, which implements reasonable security measures to protect personal information from loss, destruction or alteration, but the User understands and accepts that no method of transmission over the Internet or electronic storage is 100% secure. Although the CNR endeavours to use commercially acceptable means to protect Users' personal information, the CNR cannot guarantee its absolute security.

USER RIGHTS

The applicable Regulations grant the User the following rights:

  • The right to access one's Personal Data;
  • The right to rectify one's Personal Data;
  • The right to object to the collection and processing of Personal Data;
  • The right to erasure of Personal Data;
  • The right to restrict the collection and processing of Personal Data;
  • The right to portability of personal data
  • The right to communicate directives concerning the conservation, deletion and communication of its Data after its death.

These rights may be exercised by the User by sending a request to CNR by e-mail or by post to the following addresses:

  • E-mail : dpd@cnr.fr
  • Mail: CNR Délégué à la Protection des Données Personnelles - 8 Villa Bosquet, 75007 Paris.

The CNR reserves the right to verify the User's identity.

The User is informed and understands that the exercise of certain rights may restrict or prevent access to or use of the Site and/or Services.

If the CNR does not respond to the User, or if the User is not satisfied with the CNR's response, he or she has the right to lodge a complaint with the protection and control authority to which he or she is subject. In France, this authority is the Commission Nationale de l'Informatique et des Libertés (CNIL): https://www.cnil.fr/fr/plaintes.