CNES, whose registered office is located at 52 rue de la Verrerie 75004 Paris, is concerned about the protection of your personal data. It is committed to ensuring the highest level of protection for your personal data collected, in compliance with the regulations in force applicable to the processing of Personal Data and, in particular, the Data Protection Act No. 78-17 of 6 January 1978 and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

 

When CNES collects your personal data, this collection is carried out in a fair and transparent manner thanks to the presence of information notices, a consent form (tick box) or a reference to this Policy. 
 

Définition

 

The notion of ‘personal data’ refers to any information that directly or indirectly identifies a natural person by reference to one or more elements that are specific to that person (surname, first name, email, postal or IP address, etc.).

 

As a matter of principle, CNES will not collect or process any personal data relating to your racial or ethnic origin, your political opinions or your religious or philosophical beliefs.
 

For what purposes and on what legal basis do we process your data?

 

For the online shop:

 

To process your online booking. This processing is necessary for the performance of the contract concluded between CNES and you.

To manage visits and invitations to the Europe’s spaceport site and to ensure the safety of goods and persons on the Europe’s spaceport site. This processing is based on the CNES's legitimate interest in allowing access to the Europe’s spaceport site to external visitors who do not hold an access badge.

To manage your subscriptions to our newsletters and promotional emails. For this processing, we explicitly ask for your consent by ticking a box at the bottom of the form.

 

 

To manage requests for prizes:

 

The information collected in the endowment application form is recorded in a computerised file by CNES in order to process your endowment application and facilitate the process of selecting and awarding scholarships to students. The legal basis is the legitimate interest of the CNES, more specifically its HR interest.

 

Measuring traffic and improving the website:

 

Once you have given your consent, we may collect ‘web analytics’ type information to measure traffic and improve the website. The technology used is cookies. For more information, see our Cookie Management Policy.

No automated decisions or profiling are involved in this processing.
 

 

What data is collected on our site?

 

Data transmitted directly: this is data that you transmit to us directly, via the forms. This includes the following categories: identity, family, economic or financial situation (for prize applications). Information marked with an asterisk is compulsory, otherwise your request may not be processed or its processing may be delayed.

 

Data collected via tracers: we may collect information of the ‘web analytics’ type relating to your browsing, the duration of your visit, your IP address, your browser type and version.
 

Retention periods

 

CNES keeps this data in accordance with legal provisions and/or proportionate to the purposes for which it was collected.

Information related to your account on the online shop is deleted after 1 year of account inactivity. However, you can request the deletion of your account at any time by contacting the administration team by e-mail at administration.visites.csg@cnes.fr.

Your data collected as part of your subscription to the newsletter or promotional emails is kept until you withdraw your consent.

Data collected as part of a grant application is kept for 1 year from the date of collection.

For cookies, please consult our Cookie Management Policy.
 

Recipients

 

The recipients of the data are the authorised internal departments of CNES, as well as our website service provider and our duly authorised reception service provider.

 

Data security

 

All your personal data is strictly confidential and will only be accessed on a need-to-know basis by duly authorised CNES staff and independent service providers acting on our behalf under appropriate technical and organisational security measures.

 

CNES has implemented security measures to protect your personal data from unauthorized access and use. We follow appropriate security procedures in the storage and disclosure of your personal data to prevent unauthorised access by third parties and to prevent accidental loss of your data. We restrict access to your personal data to those who have a genuine business need to access it. The people who access your data are subject to a duty of confidentiality.

 

We also have procedures in place to deal with any suspected breach of data security. We will notify you and any relevant supervisory authority of any suspected data breach where we are required to do so by law.
 

 

How can you exercise your rights?

 

You may exercise your rights in relation to all the data concerning you. The rights attached to your personal data are as follows:

• Right of access: you can exercise your right of access to find out what personal data we hold about you, including its nature, origin and intended use.
• Right to withdraw consent: you have the right to withdraw your consent at any time. You will be informed, where appropriate, of the consequences of such withdrawal.
• Right of rectification: if your personal data held by CNES is inaccurate, you may request that it be amended, updated or that the information be completed.
• Right to erasure: you may request the deletion of personal data held by CNES in accordance with applicable laws.
• Right to portability: you may request the portability of your personal data. On the twofold condition that the processing is based on the performance of a contract or the consent of the individual, and that it is automated, you have the right to receive the data in a structured format, in clear, machine-readable and interoperable language, and to transmit it to another controller without CNES hindering its processing.
• Right to limitation: you have the right to obtain the limitation of processing, in particular when you dispute the accuracy of the data.
• Right to object: You may object to the processing of your personal data for your own reasons.

You also have the right to determine what happens to this data after your death.
 

 

You may exercise the rights set out above by writing to our Data Protection Officer (DPO) at the following address: l-cnil@cnes.fr

 

In order to guarantee data confidentiality, you must be able to prove your identity. If necessary, a photocopy of an identity document will be requested in order to verify your identity.

 

CNES will respond within one month of receipt of the request and, if necessary, this period may be extended by two months, taking into account the complexity and number of requests. You will then be informed of this extension and the reasons for the postponement within one month of receipt of the request.

 

If, after contacting us, you feel that your ‘Data Protection’ rights have not been respected, you may submit a complaint to the CNIL.

 

You are informed that during your visits to one of our sites, cookies and tracers may be installed on your terminal equipment. You can consult the Cookie Policy implemented on the site concerned.