{"id":617,"date":"2020-10-22T09:25:36","date_gmt":"2020-10-22T09:25:36","guid":{"rendered":"https:\/\/ficha.fr\/?page_id=617"},"modified":"2026-05-04T11:38:52","modified_gmt":"2026-05-04T11:38:52","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/ficha.fr\/en\/privacy-policy","title":{"rendered":"Privacy policy"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tPolitique de confidentialit\u00e9<\/title><style>\n\/* cspell:disable-file *\/\n\/* webkit printing magic: print all background colors *\/\nhtml {\n\t-webkit-print-color-adjust: exact;\n}\n* {\n\tbox-sizing: border-box;\n\t-webkit-print-color-adjust: exact;\n}\n\nhtml,\nbody {\n\tmargin: 0;\n\tpadding: 0;\n}\n@media only screen {\n\tbody {\n\t\tmargin: 2em auto;\n\t\tmax-width: 900px;\n\t\tcolor: rgb(55, 53, 47);\n\t}\n}\n\nbody {\n\tline-height: 1.5;\n\twhite-space: pre-wrap;\n}\n\na,\na.visited {\n\tcolor: inherit;\n\ttext-decoration: underline;\n}\n\n.pdf-relative-link-path {\n\tfont-size: 80%;\n\tcolor: #444;\n}\n\nh1,\nh2,\nh3 {\n\tletter-spacing: -0.01em;\n\tline-height: 1.2;\n\tfont-weight: 600;\n\tmargin-bottom: 0;\n}\n\n\/* Override strong tags inside headings to maintain consistent weight *\/\nh1 strong,\nh2 strong,\nh3 strong {\n\tfont-weight: 600;\n}\n\n.page-title {\n\tfont-size: 2.5rem;\n\tfont-weight: 700;\n\tmargin-top: 0;\n\tmargin-bottom: 0.75em;\n}\n\nh1 {\n\tfont-size: 1.875rem;\n\tmargin-top: 1.875rem;\n}\n\nh2 {\n\tfont-size: 1.5rem;\n\tmargin-top: 1.5rem;\n}\n\nh3 {\n\tfont-size: 1.25rem;\n\tmargin-top: 1.25rem;\n}\n\n.source {\n\tborder: 1px solid #ddd;\n\tborder-radius: 3px;\n\tpadding: 1.5em;\n\tword-break: break-all;\n}\n\n.callout {\n\tborder-radius: 10px;\n\tpadding: 1rem;\n}\n\nfigure {\n\tmargin: 1.25em 0;\n\tpage-break-inside: avoid;\n}\n\nfigcaption {\n\topacity: 0.5;\n\tfont-size: 85%;\n\tmargin-top: 0.5em;\n}\n\nmark {\n\tbackground-color: transparent;\n}\n\n.indented {\n\tpadding-left: 1.5em;\n}\n\nhr {\n\tbackground: transparent;\n\tdisplay: block;\n\twidth: 100%;\n\theight: 1px;\n\tvisibility: visible;\n\tborder: none;\n\tborder-bottom: 1px solid rgba(55, 53, 47, 0.09);\n}\n\nimg {\n\tmax-width: 100%;\n}\n\n@media only print {\n\timg {\n\t\tmax-height: 100vh;\n\t\tobject-fit: contain;\n\t}\n\n\ttable.collection-content {\n\t\twidth: 100%;\n\t\ttable-layout: fixed;\n\t}\n\n\ttable.collection-content th,\n\ttable.collection-content td {\n\t\toverflow-wrap: anywhere;\n\t}\n\n\ttable.collection-content td > .user,\n\ttable.collection-content td > time {\n\t\twhite-space: pre-wrap;\n\t}\n}\n\n@page {\n\tmargin: 1in;\n}\n\n.collection-content-wrapper {\n\toverflow-x: auto;\n}\n\n@media only print {\n\t.collection-content-wrapper {\n\t\toverflow-x: visible;\n\t}\n}\n\n.collection-content {\n\tfont-size: 0.875rem;\n}\n\n.collection-content td {\n\twhite-space: pre-wrap;\n\tword-break: break-word;\n}\n\n.column-list {\n\tdisplay: flex;\n\tgap: 46px;\n}\n\n.column {\n\tmin-width: 0;\n\toverflow: hidden;\n}\n\n.column > *:first-child {\n\tmargin-top: 0;\n}\n\n.table_of_contents-item {\n\tdisplay: block;\n\tfont-size: 0.875rem;\n\tline-height: 1.3;\n\tpadding: 0.125rem;\n}\n\n.table_of_contents-indent-1 {\n\tmargin-left: 1.5rem;\n}\n\n.table_of_contents-indent-2 {\n\tmargin-left: 3rem;\n}\n\n.table_of_contents-indent-3 {\n\tmargin-left: 4.5rem;\n}\n\n.table_of_contents-link {\n\ttext-decoration: none;\n\topacity: 0.7;\n\tborder-bottom: 1px solid rgba(55, 53, 47, 0.18);\n}\n\ntable,\nth,\ntd {\n\tborder: 1px solid rgba(55, 53, 47, 0.09);\n}\n\ntable {\n\tborder-collapse: collapse;\n\tborder-left: none;\n\tborder-right: none;\n}\n\nth,\ntd {\n\tfont-weight: normal;\n\tpadding: 0.25em 0.5em;\n\tline-height: 1.5;\n\tmin-height: 1.5em;\n\ttext-align: left;\n}\n\nth {\n\tcolor: rgba(55, 53, 47, 0.6);\n}\n\nol,\nul {\n\tmargin: 0;\n\tmargin-block-start: 0.6em;\n\tmargin-block-end: 0.6em;\n}\n\nli > ol:first-child,\nli > ul:first-child {\n\tmargin-block-start: 0.6em;\n}\n\nul > li {\n\tlist-style: disc;\n}\n\nul.to-do-list {\n\tpadding-inline-start: 0;\n}\n\nul.to-do-list > li {\n\tlist-style: none;\n}\n\n.to-do-children-checked {\n\ttext-decoration: line-through;\n\topacity: 0.375;\n}\n\nul.toggle > li {\n\tlist-style: none;\n}\n\nul {\n\tpadding-inline-start: 1.7em;\n}\n\nul > li {\n\tpadding-left: 0.1em;\n}\n\nol {\n\tpadding-inline-start: 1.6em;\n}\n\nol.numbered-list.numbered-list-digits-2 {\n\tpadding-inline-start: 2em;\n}\n\nol.numbered-list.numbered-list-digits-3plus {\n\tpadding-inline-start: 2.4em;\n}\n\nol > li {\n\tpadding-left: 0.2em;\n}\n\n.mono ol {\n\tpadding-inline-start: 2em;\n}\n\n.mono ol > li {\n\ttext-indent: -0.4em;\n}\n\n.toggle {\n\tpadding-inline-start: 0em;\n\tlist-style-type: none;\n}\n\n\/* Indent toggle children *\/\n.toggle > li > details {\n\tpadding-left: 1.7em;\n}\n\n.toggle > li > details > summary {\n\tmargin-left: -1.1em;\n}\n\n.selected-value {\n\tdisplay: inline-block;\n\tpadding: 0 0.5em;\n\tbackground: rgba(206, 205, 202, 0.5);\n\tborder-radius: 3px;\n\tmargin-right: 0.5em;\n\tmargin-top: 0.3em;\n\tmargin-bottom: 0.3em;\n\twhite-space: nowrap;\n}\n\n.collection-title {\n\tdisplay: inline-block;\n\tmargin-right: 1em;\n}\n\n.page-description {\n\tmargin-bottom: 2em;\n}\n\n.simple-table {\n\tmargin-top: 1em;\n\tfont-size: 0.875rem;\n\tempty-cells: show;\n}\n.simple-table td {\n\theight: 29px;\n\tmin-width: 120px;\n}\n\n.simple-table th {\n\theight: 29px;\n\tmin-width: 120px;\n}\n\n.simple-table-header-color {\n\tbackground: rgb(247, 246, 243);\n\tcolor: black;\n}\n.simple-table-header {\n\tfont-weight: 500;\n}\n\ntime {\n\topacity: 0.5;\n}\n\n.icon {\n\tdisplay: inline-flex;\n\talign-items: center;\n\tjustify-content: center;\n\tmax-width: 1.2em;\n\tmax-height: 1.2em;\n\ttext-decoration: none;\n\tvertical-align: text-bottom;\n\tmargin-right: 0.5em;\n}\n\nimg.icon {\n\tborder-radius: 3px;\n}\n\n.callout img.notion-static-icon {\n\twidth: 1em;\n\theight: 1em;\n}\n\n.callout p {\n\tmargin: 0;\n}\n\n.callout h1,\n.callout h2,\n.callout h3 {\n\tmargin: 0 0 0.6rem;\n}\n\n.user-icon {\n\twidth: 1.5em;\n\theight: 1.5em;\n\tborder-radius: 100%;\n\tmargin-right: 0.5rem;\n}\n\n.user-icon-inner {\n\tfont-size: 0.8em;\n}\n\n.text-icon {\n\tborder: 1px solid #000;\n\ttext-align: center;\n}\n\n.page-cover-image {\n\tdisplay: block;\n\tobject-fit: cover;\n\twidth: 100%;\n\tmax-height: 30vh;\n}\n\n.page-header-icon {\n\tfont-size: 3rem;\n\tmargin-bottom: 1rem;\n}\n\n.page-header-icon-with-cover {\n\tmargin-top: -0.72em;\n\tmargin-left: 0.07em;\n}\n\n.page-header-icon img {\n\tborder-radius: 3px;\n}\n\n.link-to-page {\n\tmargin: 1em 0;\n\tpadding: 0;\n\tborder: none;\n\tfont-weight: 500;\n}\n\np > .user {\n\topacity: 0.5;\n}\n\ntd > .user,\ntd > time {\n\twhite-space: nowrap;\n}\n\ninput[type=\"checkbox\"] {\n\ttransform: scale(1.5);\n\tmargin-right: 0.6em;\n\tvertical-align: middle;\n}\n\np {\n\tmargin-top: 0.5em;\n\tmargin-bottom: 0.5em;\n}\n\n.image {\n\tborder: none;\n\tmargin: 1.5em 0;\n\tpadding: 0;\n\tborder-radius: 0;\n\ttext-align: center;\n}\n\n.code,\ncode {\n\tbackground: rgba(135, 131, 120, 0.15);\n\tborder-radius: 3px;\n\tpadding: 0.2em 0.4em;\n\tborder-radius: 3px;\n\tfont-size: 85%;\n\ttab-size: 2;\n}\n\ncode {\n\tcolor: #eb5757;\n}\n\n.code {\n\tpadding: 1.5em 1em;\n}\n\n.code-wrap {\n\twhite-space: pre-wrap;\n\tword-break: break-all;\n}\n\n.code > code {\n\tbackground: none;\n\tpadding: 0;\n\tfont-size: 100%;\n\tcolor: inherit;\n}\n\nblockquote {\n\tfont-size: 1em;\n\tmargin: 1em 0;\n\tpadding-left: 1em;\n\tborder-left: 3px solid rgb(55, 53, 47);\n}\n\nblockquote.quote-large {\n\tfont-size: 1.25em;\n}\n\n.bookmark {\n\ttext-decoration: none;\n\tmax-height: 8em;\n\tpadding: 0;\n\tdisplay: flex;\n\twidth: 100%;\n\talign-items: stretch;\n}\n\n.bookmark-title {\n\tfont-size: 0.85em;\n\toverflow: hidden;\n\ttext-overflow: ellipsis;\n\theight: 1.75em;\n\twhite-space: nowrap;\n}\n\n.bookmark-text {\n\tdisplay: flex;\n\tflex-direction: column;\n}\n\n.bookmark-info {\n\tflex: 4 1 180px;\n\tpadding: 12px 14px 14px;\n\tdisplay: flex;\n\tflex-direction: column;\n\tjustify-content: space-between;\n}\n\n.bookmark-image {\n\twidth: 33%;\n\tflex: 1 1 180px;\n\tdisplay: block;\n\tposition: relative;\n\tobject-fit: cover;\n\tborder-radius: 1px;\n}\n\n.bookmark-description {\n\tcolor: rgba(55, 53, 47, 0.6);\n\tfont-size: 0.75em;\n\toverflow: hidden;\n\tmax-height: 4.5em;\n\tword-break: break-word;\n}\n\n.bookmark-href {\n\tfont-size: 0.75em;\n\tmargin-top: 0.25em;\n}\n\n.sans { font-family: ui-sans-serif, -apple-system, BlinkMacSystemFont, \"Segoe UI Variable Display\", \"Segoe UI\", Helvetica, \"Apple Color Emoji\", \"Noto Sans Arabic\", \"Noto Sans Hebrew\", Arial, sans-serif, \"Segoe UI Emoji\", \"Segoe UI Symbol\"; }\n.code { font-family: \"SFMono-Regular\", Menlo, Consolas, \"PT Mono\", \"Liberation Mono\", Courier, monospace; }\n.serif { font-family: Lyon-Text, Georgia, ui-serif, serif; }\n.mono { font-family: iawriter-mono, Nitti, Menlo, Courier, monospace; }\n.pdf .sans { font-family: Inter, ui-sans-serif, -apple-system, BlinkMacSystemFont, \"Segoe UI Variable Display\", \"Segoe UI\", Helvetica, \"Apple Color Emoji\", \"Noto Sans Arabic\", \"Noto Sans Hebrew\", Arial, sans-serif, \"Segoe UI Emoji\", \"Segoe UI Symbol\", 'Twemoji', 'Noto Color Emoji', 'Noto Sans CJK JP'; }\n.pdf:lang(zh-CN) .sans { font-family: Inter, ui-sans-serif, -apple-system, BlinkMacSystemFont, \"Segoe UI Variable Display\", \"Segoe UI\", Helvetica, \"Apple Color Emoji\", \"Noto Sans Arabic\", \"Noto Sans Hebrew\", Arial, sans-serif, \"Segoe UI Emoji\", \"Segoe UI Symbol\", 'Twemoji', 'Noto Color Emoji', 'Noto Sans CJK SC'; }\n.pdf:lang(zh-TW) .sans { font-family: Inter, ui-sans-serif, -apple-system, BlinkMacSystemFont, \"Segoe UI Variable Display\", \"Segoe UI\", Helvetica, \"Apple Color Emoji\", \"Noto Sans Arabic\", \"Noto Sans Hebrew\", Arial, sans-serif, \"Segoe UI Emoji\", \"Segoe UI Symbol\", 'Twemoji', 'Noto Color Emoji', 'Noto Sans CJK TC'; }\n.pdf:lang(ko-KR) .sans { font-family: Inter, ui-sans-serif, -apple-system, BlinkMacSystemFont, \"Segoe UI Variable Display\", \"Segoe UI\", Helvetica, \"Apple Color Emoji\", \"Noto Sans Arabic\", \"Noto Sans Hebrew\", Arial, sans-serif, \"Segoe UI Emoji\", \"Segoe UI Symbol\", 'Twemoji', 'Noto Color Emoji', 'Noto Sans CJK KR'; }\n.pdf .code { font-family: Source Code Pro, \"SFMono-Regular\", Menlo, Consolas, \"PT Mono\", \"Liberation Mono\", Courier, monospace, 'Twemoji', 'Noto Color Emoji', 'Noto Sans Mono CJK JP'; }\n.pdf:lang(zh-CN) .code { font-family: Source Code Pro, \"SFMono-Regular\", Menlo, Consolas, \"PT Mono\", \"Liberation Mono\", Courier, monospace, 'Twemoji', 'Noto Color Emoji', 'Noto Sans Mono CJK SC'; }\n.pdf:lang(zh-TW) .code { font-family: Source Code Pro, \"SFMono-Regular\", Menlo, Consolas, \"PT Mono\", \"Liberation Mono\", Courier, monospace, 'Twemoji', 'Noto Color Emoji', 'Noto Sans Mono CJK TC'; }\n.pdf:lang(ko-KR) .code { font-family: Source Code Pro, \"SFMono-Regular\", Menlo, Consolas, \"PT Mono\", \"Liberation Mono\", Courier, monospace, 'Twemoji', 'Noto Color Emoji', 'Noto Sans Mono CJK KR'; }\n.pdf .serif { font-family: PT Serif, Lyon-Text, Georgia, ui-serif, serif, 'Twemoji', 'Noto Color Emoji', 'Noto Serif CJK JP'; }\n.pdf:lang(zh-CN) .serif { font-family: PT Serif, Lyon-Text, Georgia, ui-serif, serif, 'Twemoji', 'Noto Color Emoji', 'Noto Serif CJK SC'; }\n.pdf:lang(zh-TW) .serif { font-family: PT Serif, Lyon-Text, Georgia, ui-serif, serif, 'Twemoji', 'Noto Color Emoji', 'Noto Serif CJK TC'; }\n.pdf:lang(ko-KR) .serif { font-family: PT Serif, Lyon-Text, Georgia, ui-serif, serif, 'Twemoji', 'Noto Color Emoji', 'Noto Serif CJK KR'; }\n.pdf .mono { font-family: PT Mono, iawriter-mono, Nitti, Menlo, Courier, monospace, 'Twemoji', 'Noto Color Emoji', 'Noto Sans Mono CJK JP'; }\n.pdf:lang(zh-CN) .mono { font-family: PT Mono, iawriter-mono, Nitti, Menlo, Courier, monospace, 'Twemoji', 'Noto Color Emoji', 'Noto Sans Mono CJK SC'; }\n.pdf:lang(zh-TW) .mono { font-family: PT Mono, iawriter-mono, Nitti, Menlo, Courier, monospace, 'Twemoji', 'Noto Color Emoji', 'Noto Sans Mono CJK TC'; }\n.pdf:lang(ko-KR) .mono { font-family: PT Mono, iawriter-mono, Nitti, Menlo, Courier, monospace, 'Twemoji', 'Noto Color Emoji', 'Noto Sans Mono CJK KR'; }\n.highlight-default {\n\tcolor: rgba(44, 44, 43, 1);\n}\n.highlight-gray {\n\tcolor: rgba(125, 122, 117, 1);\n\tfill: rgba(125, 122, 117, 1);\n}\n.highlight-brown {\n\tcolor: rgba(159, 118, 90, 1);\n\tfill: rgba(159, 118, 90, 1);\n}\n.highlight-orange {\n\tcolor: rgba(210, 123, 45, 1);\n\tfill: rgba(210, 123, 45, 1);\n}\n.highlight-yellow {\n\tcolor: rgba(203, 148, 52, 1);\n\tfill: rgba(203, 148, 52, 1);\n}\n.highlight-teal {\n\tcolor: rgba(80, 148, 110, 1);\n\tfill: rgba(80, 148, 110, 1);\n}\n.highlight-blue {\n\tcolor: rgba(56, 125, 201, 1);\n\tfill: rgba(56, 125, 201, 1);\n}\n.highlight-purple {\n\tcolor: rgba(154, 107, 180, 1);\n\tfill: rgba(154, 107, 180, 1);\n}\n.highlight-pink {\n\tcolor: rgba(193, 76, 138, 1);\n\tfill: rgba(193, 76, 138, 1);\n}\n.highlight-red {\n\tcolor: rgba(207, 81, 72, 1);\n\tfill: rgba(207, 81, 72, 1);\n}\n.highlight-default_background {\n\tcolor: rgba(44, 44, 43, 1);\n}\n.highlight-gray_background {\n\tbackground: rgba(42, 28, 0, 0.07);\n}\n.highlight-brown_background {\n\tbackground: rgba(139, 46, 0, 0.086);\n}\n.highlight-orange_background {\n\tbackground: rgba(224, 101, 1, 0.129);\n}\n.highlight-yellow_background {\n\tbackground: rgba(211, 168, 0, 0.137);\n}\n.highlight-teal_background {\n\tbackground: rgba(0, 100, 45, 0.09);\n}\n.highlight-blue_background {\n\tbackground: rgba(0, 124, 215, 0.094);\n}\n.highlight-purple_background {\n\tbackground: rgba(102, 0, 178, 0.078);\n}\n.highlight-pink_background {\n\tbackground: rgba(197, 0, 93, 0.086);\n}\n.highlight-red_background {\n\tbackground: rgba(223, 22, 0, 0.094);\n}\n.block-color-default {\n\tcolor: inherit;\n\tfill: inherit;\n}\n.block-color-gray {\n\tcolor: rgba(125, 122, 117, 1);\n\tfill: rgba(125, 122, 117, 1);\n}\n.block-color-brown {\n\tcolor: rgba(159, 118, 90, 1);\n\tfill: rgba(159, 118, 90, 1);\n}\n.block-color-orange {\n\tcolor: rgba(210, 123, 45, 1);\n\tfill: rgba(210, 123, 45, 1);\n}\n.block-color-yellow {\n\tcolor: rgba(203, 148, 52, 1);\n\tfill: rgba(203, 148, 52, 1);\n}\n.block-color-teal {\n\tcolor: rgba(80, 148, 110, 1);\n\tfill: rgba(80, 148, 110, 1);\n}\n.block-color-blue {\n\tcolor: rgba(56, 125, 201, 1);\n\tfill: rgba(56, 125, 201, 1);\n}\n.block-color-purple {\n\tcolor: rgba(154, 107, 180, 1);\n\tfill: rgba(154, 107, 180, 1);\n}\n.block-color-pink {\n\tcolor: rgba(193, 76, 138, 1);\n\tfill: rgba(193, 76, 138, 1);\n}\n.block-color-red {\n\tcolor: rgba(207, 81, 72, 1);\n\tfill: rgba(207, 81, 72, 1);\n}\n.block-color-default_background {\n\tcolor: inherit;\n\tfill: inherit;\n}\n.block-color-gray_background {\n\tbackground: rgba(240, 239, 237, 1);\n}\n.block-color-brown_background {\n\tbackground: rgba(245, 237, 233, 1);\n}\n.block-color-orange_background {\n\tbackground: rgba(251, 235, 222, 1);\n}\n.block-color-yellow_background {\n\tbackground: rgba(249, 243, 220, 1);\n}\n.block-color-teal_background {\n\tbackground: rgba(232, 241, 236, 1);\n}\n.block-color-blue_background {\n\tbackground: rgba(229, 242, 252, 1);\n}\n.block-color-purple_background {\n\tbackground: rgba(243, 235, 249, 1);\n}\n.block-color-pink_background {\n\tbackground: rgba(250, 233, 241, 1);\n}\n.block-color-red_background {\n\tbackground: rgba(252, 233, 231, 1);\n}\n.select-value-color-default { background-color: rgba(42, 28, 0, 0.07); }\n.select-value-color-gray { background-color: rgba(28, 19, 1, 0.11); }\n.select-value-color-brown { background-color: rgba(127, 51, 0, 0.156); }\n.select-value-color-orange { background-color: rgba(196, 88, 0, 0.203); }\n.select-value-color-yellow { background-color: rgba(209, 156, 0, 0.282); }\n.select-value-color-green { background-color: rgba(0, 96, 38, 0.156); }\n.select-value-color-blue { background-color: rgba(0, 118, 217, 0.203); }\n.select-value-color-purple { background-color: rgba(92, 0, 163, 0.141); }\n.select-value-color-pink { background-color: rgba(183, 0, 78, 0.152); }\n.select-value-color-red { background-color: rgba(206, 24, 0, 0.164); }\n\n.checkbox {\n\tdisplay: inline-flex;\n\tvertical-align: text-bottom;\n\twidth: 16;\n\theight: 16;\n\tbackground-size: 16px;\n\tmargin-left: 2px;\n\tmargin-right: 5px;\n}\n\n.checkbox-on {\n\tbackground-image: url(\"data:image\/svg+xml;charset=UTF-8,%3Csvg%20width%3D%2216%22%20height%3D%2216%22%20viewBox%3D%220%200%2016%2016%22%20fill%3D%22none%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%0A%3Crect%20width%3D%2216%22%20height%3D%2216%22%20fill%3D%22%2358A9D7%22%2F%3E%0A%3Cpath%20d%3D%22M6.71429%2012.2852L14%204.9995L12.7143%203.71436L6.71429%209.71378L3.28571%206.2831L2%207.57092L6.71429%2012.2852Z%22%20fill%3D%22white%22%2F%3E%0A%3C%2Fsvg%3E\");\n}\n\n.checkbox-off {\n\tbackground-image: url(\"data:image\/svg+xml;charset=UTF-8,%3Csvg%20width%3D%2216%22%20height%3D%2216%22%20viewBox%3D%220%200%2016%2016%22%20fill%3D%22none%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%0A%3Crect%20x%3D%220.75%22%20y%3D%220.75%22%20width%3D%2214.5%22%20height%3D%2214.5%22%20fill%3D%22white%22%20stroke%3D%22%2336352F%22%20stroke-width%3D%221.5%22%2F%3E%0A%3C%2Fsvg%3E\");\n}\n\t\n<\/style><\/head><body><article id=\"350cccb0-c7b8-80a6-9533-d5a8060c0588\" class=\"page sans\"><header><h1 class=\"page-title\" dir=\"auto\"><strong>Privacy Policy<\/strong><\/h1><p class=\"page-description\" dir=\"auto\"><\/p><\/header><div class=\"page-body\"><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8064-b8b2-d5e7a40fb779\" class=\"\"><strong>Last updated: April 28, 2026<\/strong>\u00a0<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-808f-a8cc-dab0d9c73158\" class=\"\"><strong>Version: 2.0<\/strong><\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-802f-9c6d-d8028332e8ec\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-8021-9115-dcde87737e99\" class=\"\"><strong>Preamble<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-800f-9065-fbd0e1d80bc6\" class=\"\">The company\u00a0<strong>File<\/strong>\u00a0(hereinafter "\u00a0<strong>File<\/strong>\u00a0"\u00a0<strong>We<\/strong>\u00a0" Or "\u00a0<strong>OUR<\/strong>\u00a0"), Simplified joint-stock company (SAS) with a share capital of [Share capital \u2013 to be completed] euros, registered with the Grenoble Trade and Companies Register under number\u00a0<strong>SIREN 881 734 800<\/strong>whose registered office is located\u00a0<strong>12 rue Pierre Semard, 38000 Grenoble, France<\/strong>attaches the greatest importance to respecting privacy and protecting the personal data of users of its products and services.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80ac-9386-e9a765eee519\" class=\"\">This Privacy Policy (hereinafter the \u201c\u00a0<strong>Policy<\/strong>\u00a0" aims to inform you, in a clear and transparent manner, about how Ficha collects, uses, stores, shares and protects your personal data when you use any of our Products (as defined below) or interact with us.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-801a-b0c2-f9b27507ed92\" class=\"\">This Policy has been drafted in accordance with:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8055-bcb8-dd2ec5a11341\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the \u201c\u00a0<strong>GDPR<\/strong>\u00a0");<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-805d-8f8b-f2e494aa6c26\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">to Law No. 78-17 of 6 January 1978, as amended, relating to information technology, files and freedoms (\u201c\u00a0<strong>Data Protection Act<\/strong>\u00a0");<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8089-96bb-e32ecb58966e\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">to the guidelines and recommendations of the National Commission for Information Technology and Freedoms (\u201c\u00a0<strong>CNIL<\/strong>\u00a0".<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80c7-b1e3-e6d259c883c9\" class=\"\">By using our Products, you acknowledge that you have read this Policy. If you do not agree to its terms, please do not use our Products.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-807c-b77f-c710f62ad882\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-80bd-856d-f7ae48f96528\" class=\"\"><strong>Summary<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"ltr\"><nav id=\"352cccb0-c7b8-80e1-99d9-fa508e363bd2\" class=\"block-color-gray table_of_contents\"><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8021-9115-dcde87737e99\"><strong>Preamble<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80bd-856d-f7ae48f96528\"><strong>Summary<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80cf-8f6d-c4c14d3f44d5\"><strong>1. Definitions<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-802f-abe8-ce703970d3ed\"><strong>2. Scope: the Ficha products concerned<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8015-af57-c26dbcd3fa72\"><strong>3. Identity of the data controller and contact details of the DPO<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-807c-b124-ebb959df3231\"><strong>3.1 Data Controller<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-802f-91f2-ed3dadc58d6f\"><strong>3.2 Data Protection Officer (DPO)<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-807d-8ca6-c2c508e693c9\"><strong>4. Categories of data collected, purposes, legal bases and retention periods<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-803f-9456-c4d183788508\"><strong>4.1 Showcase website ficha.fr<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-803b-82f4-eb576cd59a59\"><strong>4.2 Cocoon User Application (iOS and Android)<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-807d-853f-cc9d3146bdf7\"><strong>4.3 Camia Ambassador Application (iOS and Android) and Camia Dashboard<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80f7-bf42-db6c2907b28f\"><strong>4.4 Cocoon Manager (manager.ficha.fr)<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8088-9eae-c55033c790fa\"><strong>4.5 Data collected in all cases (cross-sectional)<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80a1-a3e3-c85e5ed6ddb9\"><strong>4.6 Clarification on the training of artificial intelligence models<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8057-adf3-d6b586976978\"><strong>5. Data Origin<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80e0-bd9d-df65ab7fa9e1\"><strong>5.1 Information regarding indirect data collection (Article 14 GDPR)<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80d0-ad6c-e072946f6724\"><strong>5.2 Incidental capture of third-party images by IoT sensors<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80d8-bade-c5334632f2bd\"><strong>6. Mandatory or optional nature of the data<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8018-84b5-dccd39a7f458\"><strong>7. Recipients and subcontractors<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-801b-8cd1-f49ee96c7f78\"><strong>7.1 Internal Recipients<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80a5-8ba3-f441b5d01004\"><strong>7.2 External Recipients<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8070-8d14-eb0caf933388\"><strong>7.3 Subcontractors<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8018-b1da-d82c68ad2bca\"><strong>8. Data transfers outside the European Union<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80ad-9602-ff5f85b01fe8\"><strong>9. Cookies and other trackers<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8000-92b3-feb6f3fa7e07\"><strong>9.1 What is a cookie?<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80fb-a2f7-ce7d867ddc57\"><strong>9.2 Obtaining your consent<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-806d-b5e9-dba15d0816ea\"><strong>9.3 List of cookies and trackers used<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80c3-b837-d3a61aba5fee\"><strong>a) Showcase website ficha.fr<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-809c-836e-d927f5583120\"><strong>b) Trackers placed in the applications (Cocon, Camia Ambassador, Camia, Cocon Manager)<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80c4-9375-c70e5558ceda\"><strong>9.4 Configuring your browser or device<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#356cccb0-c7b8-80a8-9adb-cc95bb62ecca\">10. Data Security<\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#356cccb0-c7b8-8053-9c5f-dc6ebbf9f66e\">10.1 Technical Measures<\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#356cccb0-c7b8-8045-94f8-ff366f78b7b6\">10.2 Organizational Measures<\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#356cccb0-c7b8-8076-80d3-d9634f340053\">10.3 Detailed Documentation<\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#356cccb0-c7b8-80f5-84a5-d14e8ab8151e\">10.4 Limitations<\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8001-9bf4-ed8fc8f859e7\"><strong>11. Your rights<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80f1-a255-c6db926ee89c\"><strong>11.1 List of rights<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8027-af3f-ccfe606e47fd\"><strong>11.2 Procedures for exercising<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80b7-9dab-f8063fafecee\"><strong>11.3 Response Times<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8053-8940-e740f9d17e79\"><strong>11.4 Complaint to a supervisory authority<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-1\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80d4-8aab-e5559e316b58\"><strong>11.5 Special case of Products used in the context of a professional mission<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-801c-902f-efc4fd4fdd55\"><strong>12. Data concerning minors<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80a5-9529-d308ff5d72a4\"><strong>13. Automated decision-making and profiling<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-80be-a4a3-ce4273a2168b\"><strong>14. Links to third-party sites<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8012-b3d9-d9e7a7b791c1\"><strong>15. Notification of data breaches<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8000-851c-e891d5dfe592\"><strong>16. Amendments to this Policy<\/strong><\/a><\/div><div class=\"table_of_contents-item table_of_contents-indent-0\"><a class=\"table_of_contents-link\" href=\"#350cccb0-c7b8-8089-b550-d7fa6036956c\"><strong>17. Contact us<\/strong><\/a><\/div><\/nav><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-80f8-9f03-f1ecf9d78572\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-80cf-8f6d-c4c14d3f44d5\" class=\"\"><strong>1. Definitions<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80c4-9f0d-ece7596c8ea0\" class=\"\">For the purposes of this Policy, the following terms have the meanings set forth below:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-801d-89a7-d8abf45584da\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>\u201cPersonal data\u201d<\/strong>\u00a0Or\u00a0<strong>\u201cPersonal data\u201d<\/strong>\u00a0: any information relating to an identified or identifiable natural person, directly or indirectly, within the meaning of Article 4.1 of the GDPR.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80f6-afd5-ec0f5dc4bc55\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>" Treatment "<\/strong>\u00a0: any operation or set of operations performed on Personal Data (collection, recording, storage, modification, extraction, consultation, communication, erasure, destruction, etc.).<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8081-99a5-fac07e2661fc\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>" User "<\/strong>\u00a0Or\u00a0<strong>" YOU "<\/strong>\u00a0: any natural person who uses one of the Ficha Products or interacts with Ficha (site visitor, application user, ambassador, customer manager, prospect, candidate, etc.).<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8032-aa03-e4ab5d9d73b7\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>\u201cProduct(s)\u201d<\/strong>\u00a0: any of the websites, web applications, mobile applications or IoT sensors published and operated by Ficha, as listed in section 2.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80bc-9ccd-fd2bc0424b58\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>\u201cData controller\u201d<\/strong>\u00a0: the legal entity that determines the purposes and means of the Processing, within the meaning of Article 4.7 of the GDPR.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8066-9f8b-fa377e245de3\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>" Subcontractor "<\/strong>\u00a0: the legal entity which processes Personal Data on behalf of the Data Controller, as defined in Article 4.8 of the GDPR.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-8078-aedf-efe4b3372f21\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-802f-abe8-ce703970d3ed\" class=\"\"><strong>2. Scope: the Ficha products concerned<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80d4-80fd-d8a0a793d962\" class=\"\">This Policy applies to all Products published by Ficha. Ficha's roles in data processing may vary depending on the Product and its use.<\/p><\/div><div style=\"display:contents\" dir=\"ltr\"><table id=\"350cccb0-c7b8-8095-b331-c8cbaa0b0afd\" class=\"simple-table\"><thead class=\"simple-table-header\"><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-804e-9dcb-d05515fa045c\"><th id=\";cRV\" class=\"simple-table-header-color simple-table-header\">Product<\/th><th id=\"sVM@\" class=\"simple-table-header-color simple-table-header\" style=\"width:173.6875px\">URL \/ Platform<\/th><th id=\"nHGz\" class=\"simple-table-header-color simple-table-header\">Target audience<\/th><th id=\"{{nY\" class=\"simple-table-header-color simple-table-header\">Ficha's Role<\/th><\/tr><\/div><\/thead><tbody><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80e2-b5e9-d9fb2d9b29a1\"><td id=\";cRV\" class=\"\"><strong>Ficha showcase website<\/strong><\/td><td id=\"sVM@\" class=\"\" style=\"width:173.6875px\"><a href=\"https:\/\/ficha.fr\/en\/\">https:\/\/ficha.fr<\/a><\/td><td id=\"nHGz\" class=\"\">General public, prospects<\/td><td id=\"{{nY\" class=\"\">Data controller<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8015-a384-ea4544a0c105\"><td id=\";cRV\" class=\"\"><strong>Camia Dashboard<\/strong><\/td><td id=\"sVM@\" class=\"\" style=\"width:173.6875px\"><a href=\"https:\/\/camia.ficha.fr\/\">https:\/\/camia.ficha.fr<\/a><\/td><td id=\"nHGz\" class=\"\">Employees and agents of local authorities and client operators<\/td><td id=\"{{nY\" class=\"\">Subcontractor acting on behalf of the Client<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-807d-b56d-ddfc4b768996\"><td id=\";cRV\" class=\"\"><strong>Camia Ambassador App<\/strong><\/td><td id=\"sVM@\" class=\"\" style=\"width:173.6875px\">iOS and Android<\/td><td id=\"nHGz\" class=\"\">Employees and agents of local authorities, sorting operators and public service concessionaires who are clients of Ficha (for example Suez, Brest M\u00e9tropole)<\/td><td id=\"{{nY\" class=\"\">Subcontractor acting on behalf of the Client (local authority \/ operator)<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80e2-b654-d6a69fdcaa82\"><td id=\";cRV\" class=\"\"><strong>Cocoon User Application<\/strong><\/td><td id=\"sVM@\" class=\"\" style=\"width:173.6875px\">iOS and Android<\/td><td id=\"nHGz\" class=\"\">End users of the Cocon devices (residents, individuals sorting their waste)<\/td><td id=\"{{nY\" class=\"\">The data controller (user account lifecycle) may act as a data processor on behalf of a local authority or landlord in certain cases.<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8099-bd1c-d2730625759b\"><td id=\";cRV\" class=\"\"><strong>Cocoons Manager<\/strong><\/td><td id=\"sVM@\" class=\"\" style=\"width:173.6875px\"><a href=\"https:\/\/manager.ficha.fr\/\">https:\/\/manager.ficha.fr<\/a><\/td><td id=\"nHGz\" class=\"\">Social housing providers, property managers, local authorities, building managers<\/td><td id=\"{{nY\" class=\"\">Subcontractor acting on behalf of the Client, Jointly responsible for certain ancillary functionalities<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-802b-a036-d3d8b14f207b\"><td id=\";cRV\" class=\"\"><strong>Onboard IoT sensors (collection trucks, Cocon devices)<\/strong><\/td><td id=\"sVM@\" class=\"\" style=\"width:173.6875px\">Hardware deployed in the field<\/td><td id=\"nHGz\" class=\"\">Indirectly: end users whose sorting images can be captured; local authority employees operating the vehicles<\/td><td id=\"{{nY\" class=\"\">Subcontractor acting on behalf of the Client<\/td><\/tr><\/div><\/tbody><\/table><\/div><div style=\"display:contents\" dir=\"auto\"><blockquote id=\"350cccb0-c7b8-80c6-aedf-e89e67562c3e\" class=\"\"><strong>Clarification on the roles<\/strong>\u00a0When Ficha acts as\u00a0<strong>subcontractor<\/strong>\u00a0On behalf of a Client (local authority, landlord, operator), it is this Client who determines the purposes of the processing and constitutes the Data Controller. This Policy nevertheless informs you of how Ficha technically processes your data and explains how to exercise your rights, noting that for certain requests, we may need to transfer them to the competent Data Controller.<\/blockquote><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-8078-a288-c0694de7e96d\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-8015-af57-c26dbcd3fa72\" class=\"\"><strong>3. Identity of the data controller and contact details of the DPO<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-807c-b124-ebb959df3231\" class=\"\"><strong>3.1 Data Controller<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-806c-8aa1-f4b0f189e33f\" class=\"\"><strong>Ficha SAS<\/strong>\u00a0<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"351cccb0-c7b8-8062-88da-eced86f49dd6\" class=\"\">12 rue Pierre Semard 38000 Grenoble, France <\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"351cccb0-c7b8-8015-b9d2-d92836a4ca29\" class=\"\">SIREN: 881 734 800 <\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"351cccb0-c7b8-8082-90a0-fcd37e0a4842\" class=\"\">Email:\u00a0<a href=\"mailto:contact@ficha.fr\">contact@ficha.fr<\/a><\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-802f-91f2-ed3dadc58d6f\" class=\"\"><strong>3.2 Data Protection Officer (DPO)<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80fa-8816-d7ab95c1b43e\" class=\"\">In accordance with Article 37 of the GDPR, Ficha has appointed a data protection officer:<div class=\"indented\"><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8017-9c0c-c13fa79e0684\" class=\"\"><strong>Guillaume Dionisi<\/strong>, CTO and DPO of Ficha <\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"351cccb0-c7b8-8075-ba1c-c34e0e2f75b5\" class=\"\"><strong>E-mail<\/strong> :\u00a0<a href=\"mailto:guillaume.dionisi@ficha.fr\">guillaume.dionisi@ficha.fr<\/a>\u00a0<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"351cccb0-c7b8-8074-8cc5-dc75fa7c9866\" class=\"\"><strong>Phone<\/strong> : +33 6 69 21 81 34 <\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"351cccb0-c7b8-8059-b2c6-dff62a909354\" class=\"\">Postal address: 12 rue Pierre Semard, 38000 Grenoble, France<\/p><\/div><\/div><\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80b5-938d-eef22a3b9ae2\" class=\"\">You can contact our DPO for any questions relating to this Policy or to exercise your rights (see section 11).<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-8030-9a69-fc8e9debd3c8\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-807d-8ca6-c2c508e693c9\" class=\"\"><strong>4. Categories of data collected, purposes, legal bases and retention periods<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80f4-a8a9-cc51ce163be9\" class=\"\">Ficha systematically applies the principles of\u00a0<strong>minimization<\/strong>\u00a0and of\u00a0<strong>proportionality<\/strong>\u00a0: we only collect data that is strictly necessary for the purposes pursued, and only for the duration necessary for those purposes.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80e5-b770-db8b3f5975ee\" class=\"\">The table below details the main treatments implemented.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-803f-9456-c4d183788508\" class=\"\"><strong>4.1 Showcase website ficha.fr<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"ltr\"><table id=\"350cccb0-c7b8-8037-8397-f0e505379bad\" class=\"simple-table\"><thead class=\"simple-table-header\"><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80c4-bb0b-ca6da2567577\"><th id=\"=gat\" class=\"simple-table-header-color simple-table-header\">Data category<\/th><th id=\";ibw\" class=\"simple-table-header-color simple-table-header\">Purpose<\/th><th id=\"Wlxo\" class=\"simple-table-header-color simple-table-header\">Legal basis<\/th><th id=\"~BpX\" class=\"simple-table-header-color simple-table-header\">Shelf life<\/th><\/tr><\/div><\/thead><tbody><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-809e-989d-d82f90205833\"><td id=\"=gat\" class=\"\">Browsing data (IP address, browser type, pages visited, timestamp, referrer) is recorded in our server logs.<\/td><td id=\";ibw\" class=\"\">Site security and proper functioning<\/td><td id=\"Wlxo\" class=\"\">Legitimate interest (Art. 6.1.f GDPR)<\/td><td id=\"~BpX\" class=\"\">6 months for server logs<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80a2-b139-c75dec6decd2\"><td id=\"=gat\" class=\"\">Cookie identifiers and marketing trackers<\/td><td id=\";ibw\" class=\"\">Advertising effectiveness measurement, retargeting<\/td><td id=\"Wlxo\" class=\"\">Consent (Art. 6.1.a GDPR)<\/td><td id=\"~BpX\" class=\"\">Maximum 13 months (cookie lifespan)<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80ac-9e31-c9e8791677ee\"><td id=\"=gat\" class=\"\">Data provided via contact form (name, surname, email, telephone, message)<\/td><td id=\";ibw\" class=\"\">Responding to information requests and business inquiries<\/td><td id=\"Wlxo\" class=\"\">Pre-contractual measures (Art. 6.1.b GDPR) or legitimate interest (Art. 6.1.f)<\/td><td id=\"~BpX\" class=\"\">3 years from the last contact (prospect)<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8073-8862-f49c689e5eaf\"><td id=\"=gat\" class=\"\">Data from unsolicited candidates or those responding to a job offer (CV, cover letter, experience)<\/td><td id=\";ibw\" class=\"\">Recruitment management<\/td><td id=\"Wlxo\" class=\"\">Pre-contractual measures (art. 6.1.b); consent for retention beyond recruitment (art. 6.1.a)<\/td><td id=\"~BpX\" class=\"\">2 years after the last contact, unless explicit consent is given for longer retention<\/td><\/tr><\/div><\/tbody><\/table><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-803b-82f4-eb576cd59a59\" class=\"\"><strong>4.2 Cocoon User Application (iOS and Android)<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"ltr\"><table id=\"350cccb0-c7b8-8048-bab8-e86eef8790aa\" class=\"simple-table\"><thead class=\"simple-table-header\"><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8000-ab38-f5e7474b7345\"><th id=\"am]N\" class=\"simple-table-header-color simple-table-header\">Data category<\/th><th id=\"ahK;\" class=\"simple-table-header-color simple-table-header\">Purpose<\/th><th id=\"^>~E\" class=\"simple-table-header-color simple-table-header\">Legal basis<\/th><th id=\"GUCW\" class=\"simple-table-header-color simple-table-header\">Shelf life<\/th><\/tr><\/div><\/thead><tbody><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8086-8acc-d9407d2fb2f6\"><td id=\"am]N\" class=\"\"><strong>Identification data<\/strong>\u00a0name, surname, email address or telephone number, unique user identifier<\/td><td id=\"ahK;\" class=\"\">Account creation and management, authentication<\/td><td id=\"^>~E\" class=\"\">Performance of the contract (Art. 6.1.b GDPR)<\/td><td id=\"GUCW\" class=\"\">Account lifespan<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80ee-921a-e4b2ba8010d3\"><td id=\"am]N\" class=\"\"><strong>Profile data<\/strong>\u00a0residence or landlord of attachment<\/td><td id=\"ahK;\" class=\"\">Determining eligible rewards and partners<\/td><td id=\"^>~E\" class=\"\">Performance of the contract (art. 6.1.b)<\/td><td id=\"GUCW\" class=\"\">Account lifespan<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8000-818b-e99f1a36bc0b\"><td id=\"am]N\" class=\"\"><strong>Usage data<\/strong>\u00a0Number of sorts performed, points accumulated, points exchange history, badges, rankings<\/td><td id=\"ahK;\" class=\"\">Delivery of reward and gamification services<\/td><td id=\"^>~E\" class=\"\">Performance of the contract (art. 6.1.b)<\/td><td id=\"GUCW\" class=\"\">Account lifespan; anonymized statistics beyond<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80e1-8e56-d67f5c5987ee\"><td id=\"am]N\" class=\"\"><strong>Geolocation data<\/strong>\u00a0: GPS location of the device (precise)<\/td><td id=\"ahK;\" class=\"\">Location of nearby collection points, collection points and partner businesses<\/td><td id=\"^>~E\" class=\"\">Consent (art. 6.1.a) \u2013 can be enabled\/disabled at any time in the device settings<\/td><td id=\"GUCW\" class=\"\">For the duration of use of the feature; not retained beyond the session.<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8084-9c6d-d2c44adb4dd7\"><td id=\"am]N\" class=\"\"><strong>Photos<\/strong>\u00a0photos taken from the application<\/td><td id=\"ahK;\" class=\"\">Reporting a problem with the recycling management in the residence<\/td><td id=\"^>~E\" class=\"\">Performance of the contract (art. 6.1.b)<\/td><td id=\"GUCW\" class=\"\">During the processing of the associated event. Beyond that, the images can be kept without any link to a user account after prior anonymization, to be referenced by the residence manager.<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80f8-9d7a-ed19e3086dc6\"><td id=\"am]N\" class=\"\"><strong>Device identifiers and technical data<\/strong>\u00a0Model, OS, app version, language, time zone<\/td><td id=\"ahK;\" class=\"\">Diagnostics, bug fixing, security<\/td><td id=\"^>~E\" class=\"\">Legitimate interest (art. 6.1.f)<\/td><td id=\"GUCW\" class=\"\">During the processing of bug reports<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8086-9879-d629df7eb30d\"><td id=\"am]N\" class=\"\"><strong>Push notifications<\/strong>\u00a0(FCM\/APNs token)<\/td><td id=\"ahK;\" class=\"\">Sending notifications related to the account, rewards, and events<\/td><td id=\"^>~E\" class=\"\">Consent (art. 6.1.a) \u2013 can be enabled\/disabled in the device settings<\/td><td id=\"GUCW\" class=\"\">As long as the token is valid<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8091-8634-ecbd891bebbd\"><td id=\"am]N\" class=\"\"><strong>Connection logs and event logs<\/strong><\/td><td id=\"ahK;\" class=\"\">Security, anomaly detection, fraud prevention<\/td><td id=\"^>~E\" class=\"\">Legitimate interest (art. 6.1.f); legal obligation in the event of a requisition (art. 6.1.c)<\/td><td id=\"GUCW\" class=\"\">3 months<\/td><\/tr><\/div><\/tbody><\/table><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-807d-853f-cc9d3146bdf7\" class=\"\"><strong>4.3 Camia Ambassador Application (iOS and Android) and Camia Dashboard<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><blockquote id=\"350cccb0-c7b8-8083-96c6-dcf7f87fb8d0\" class=\"\">When you use these Products as part of your work on behalf of a local authority or operator, it is that entity which is\u00a0<strong>Data controller<\/strong>\u00a0and Ficha acts in the capacity of\u00a0<strong>subcontractor<\/strong>The precise legal basis for the processing is determined by the Client in the subcontracting agreement and may, depending on its status, be based on the<strong>execution of the employment contract<\/strong>\u00a0(art. 6.1.b GDPR), a\u00a0<strong>public interest mission<\/strong>\u00a0(Art. 6.1.e GDPR) for public authorities, or the<strong>legitimate interest<\/strong>\u00a0(Art. 6.1.f GDPR). The durations and purposes can be adapted to the Client's instructions.<\/blockquote><\/div><div style=\"display:contents\" dir=\"ltr\"><table id=\"350cccb0-c7b8-80ca-93bc-fc2d061edec3\" class=\"simple-table\"><thead class=\"simple-table-header\"><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80e0-a146-fa09a7e9237a\"><th id=\"UGKg\" class=\"simple-table-header-color simple-table-header\">Data category<\/th><th id=\"c;<K\" class=\"simple-table-header-color simple-table-header\">Purpose<\/th><th id=\"CDqg\" class=\"simple-table-header-color simple-table-header\">Legal basis (determined by the Client)<\/th><th id=\"D`s}\" class=\"simple-table-header-color simple-table-header\">Shelf life<\/th><\/tr><\/div><\/thead><tbody><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8002-8379-c9b067d2539c\"><td id=\"UGKg\" class=\"\"><strong>Professional identification data<\/strong>\u00a0Name, surname, professional email address, internal identifier, role, team, affiliated organization<\/td><td id=\"c;<K\" class=\"\">Account creation, authentication, and allocation of rights<\/td><td id=\"CDqg\" class=\"\">Performance of the employment contract (Art. 6.1.b GDPR)<\/td><td id=\"D`s}\" class=\"\">Contract duration with the Client + applicable statute of limitations; account deletion within 48 hours of an agent's departure<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-801a-b8fd-d1fbb7c42b06\"><td id=\"UGKg\" class=\"\"><strong>Geolocation data<\/strong>\u00a0Routes, waypoints, real-time position during tours<\/td><td id=\"c;<K\" class=\"\">Monitoring of awareness campaigns, automatic population of visited addresses<\/td><td id=\"CDqg\" class=\"\">Contract execution<\/td><td id=\"D`s}\" class=\"\">During the duration of use of the feature<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80b7-91a9-c4d3552cce59\"><td id=\"UGKg\" class=\"\"><strong>Technical identifiers of the professional device<\/strong><\/td><td id=\"c;<K\" class=\"\">Security, auditing, traceability<\/td><td id=\"CDqg\" class=\"\">Legitimate interest \/ Legal obligation (according to Client)<\/td><td id=\"D`s}\" class=\"\">3 months<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80e1-8a0f-e4412c9b3325\"><td id=\"UGKg\" class=\"\"><strong>Access and action logs<\/strong><\/td><td id=\"c;<K\" class=\"\">Security, traceability, fraud prevention<\/td><td id=\"CDqg\" class=\"\">Legal obligation \/ Legitimate interest<\/td><td id=\"D`s}\" class=\"\">3 months<\/td><\/tr><\/div><\/tbody><\/table><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-80f7-bf42-db6c2907b28f\" class=\"\"><strong>4.4 Cocoon Manager (manager.ficha.fr)<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"ltr\"><table id=\"350cccb0-c7b8-8099-a5a3-e83e1df1502d\" class=\"simple-table\"><thead class=\"simple-table-header\"><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8006-990e-e2e7586824a1\"><th id=\"axaT\" class=\"simple-table-header-color simple-table-header\">Data category<\/th><th id=\"@>H>\" class=\"simple-table-header-color simple-table-header\">Purpose<\/th><th id=\"[R]E\" class=\"simple-table-header-color simple-table-header\">Legal basis<\/th><th id=\"k}qf\" class=\"simple-table-header-color simple-table-header\">Shelf life<\/th><\/tr><\/div><\/thead><tbody><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80a4-9b6d-c89c9f3c6210\"><td id=\"axaT\" class=\"\"><strong>Professional identification data<\/strong>\u00a0Managers (landlords, property managers, local authorities): name, surname, professional email, position, organization<\/td><td id=\"@>H>\" class=\"\">Account creation, authentication, support<\/td><td id=\"[R]E\" class=\"\">Contract execution<\/td><td id=\"k}qf\" class=\"\">Contract duration with the Client + limitation period (1 month)<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80e6-bca8-d1cee21ddc03\"><td id=\"axaT\" class=\"\"><strong>Functional data<\/strong>\u00a0: bin reference data, communication materials, residence data, usage indicators<\/td><td id=\"@>H>\" class=\"\">Provision of administrative functionalities<\/td><td id=\"[R]E\" class=\"\">Contract execution<\/td><td id=\"k}qf\" class=\"\">Contract duration with the Client<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-808d-bbb5-fa5189299eee\"><td id=\"axaT\" class=\"\"><strong>Access logs<\/strong><\/td><td id=\"@>H>\" class=\"\">Security, traceability<\/td><td id=\"[R]E\" class=\"\">Legitimate interest; Legal obligation<\/td><td id=\"k}qf\" class=\"\">minimum 1 year<\/td><\/tr><\/div><\/tbody><\/table><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-8088-9eae-c55033c790fa\" class=\"\"><strong>4.5 Data collected in all cases (cross-sectional)<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"ltr\"><table id=\"350cccb0-c7b8-80ce-8654-fd80c0bda1a7\" class=\"simple-table\"><thead class=\"simple-table-header\"><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8012-95fd-c2f126f89038\"><th id=\"knpH\" class=\"simple-table-header-color simple-table-header\">Data category<\/th><th id=\"IGcS\" class=\"simple-table-header-color simple-table-header\">Purpose<\/th><th id=\"TeMd\" class=\"simple-table-header-color simple-table-header\">Legal basis<\/th><th id=\"TrDg\" class=\"simple-table-header-color simple-table-header\">Shelf life<\/th><\/tr><\/div><\/thead><tbody><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-808c-86fe-e1100ee0b8eb\"><td id=\"knpH\" class=\"\">User support data (email exchanges, screenshots provided, technical identifiers)<\/td><td id=\"IGcS\" class=\"\">Responding to support requests, resolving incidents<\/td><td id=\"TeMd\" class=\"\">Legitimate interest; Performance of the contract<\/td><td id=\"TrDg\" class=\"\">3 years after the ticket closure<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80de-86ea-f2febf1db2ef\"><td id=\"knpH\" class=\"\">Information required for invoicing (company name, billing address, VAT number)<\/td><td id=\"IGcS\" class=\"\">Accounting and tax obligations<\/td><td id=\"TeMd\" class=\"\">Legal obligation (art. 6.1.c)<\/td><td id=\"TrDg\" class=\"\">10 years (accounting and tax obligations \u2013 Commercial Code, art. L123-22)<\/td><\/tr><\/div><\/tbody><\/table><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-80a1-a3e3-c85e5ed6ddb9\" class=\"\"><strong>4.6 Clarification on the training of artificial intelligence models<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-808b-84ac-dd8afd261c57\" class=\"\">Some images collected via IoT sensors and the Camia Ambassador app can be used to train and improve Ficha's artificial intelligence models for waste recognition.\u00a0<strong>Before any use for this purpose, the images are systematically anonymized (removal of EXIF metadata, blurring of elements likely to identify a person).<\/strong>\u00a0No directly identifying personal data is used for AI training.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-801f-8622-cbf776e137ba\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-8057-adf3-d6b586976978\" class=\"\"><strong>5. Data Origin<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8094-be8a-dc7fd220f7e0\" class=\"\">The personal data that Ficha processes comes primarily from:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8060-accb-f4d3c94622a2\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>directly from you<\/strong>, when you enter information into our Products (account creation, forms, photos, etc.);<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8093-8592-d317ac2d0751\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>automatically<\/strong>, when you use our Products (logs, technical data, geolocation activated by you, IoT sensors);<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8028-a581-dc65390ffe1b\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>of our Clients<\/strong>\u00a0(local authorities, landlords, operators), when they assign you a professional account to use the Camia Dashboard, the Camia Ambassador application or the Cocons Manager;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8071-aa5d-e72d2d876ee5\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">of\u00a0<strong>reward partners<\/strong>\u00a0(partner merchants, voucher platforms), for the delivery of rewards against points in Cocon (without transmission of identifying data beyond what is strictly necessary for the delivery of the reward).<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-808e-a1a6-cdaa54d49b37\" class=\"\">File\u00a0<strong>does not purchase prospecting files from data brokers<\/strong>.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-80e0-bd9d-df65ab7fa9e1\" class=\"\"><strong>5.1 Information regarding indirect data collection (Article 14 GDPR)<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80e7-aa21-cc50fd8e3207\" class=\"\">When Ficha processes data about you that was not collected directly from you, for example:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8087-bc69-ffb854475cac\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">of the\u00a0<strong>data provided by your landlord, your local authority or your operator<\/strong>\u00a0(belonging to a residence or team, employee ID, role);<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8016-8f53-fbba2324c2da\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">of the\u00a0<strong>images captured by IoT sensors<\/strong>\u00a0on board collection vehicles (passersby, license plates likely to appear in the background);<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80e0-a6ac-fb56690bc601\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">of the\u00a0<strong>data transmitted by a partner<\/strong>\u00a0as part of a joint promotional operation;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-807d-bf46-e1afec4e93c1\" class=\"\">This Policy serves as the information required under Article 14 of the GDPR. The categories of data concerned and the purposes are described in section 4; the sources are indicated above; your rights are outlined in section 11. Where providing the information directly to the data subject is impossible or would require disproportionate effort, the information is disseminated by any appropriate means (display on vehicles, communication by the Client to its agents and constituents).<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-80d0-ad6c-e072946f6724\" class=\"\"><strong>5.2 Incidental capture of third-party images by IoT sensors<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80b1-a71c-cd05dc0ec912\" class=\"\">The IoT sensors installed on Ficha's customers' collection vehicles are designed to automatically recognize the\u00a0<strong>contents of bins and waste streams<\/strong>Although this is not their intended purpose, these sensors may occasionally capture images of\u00a0<strong>passers-by, residents, or license plates<\/strong>.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-806a-8b17-e79f676cb192\" class=\"\">To minimize this accidental collection:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-801c-92e6-c6b040e91cf0\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">the cameras are\u00a0<strong>oriented towards the loading area<\/strong>\u00a0the containers and their field is restricted to the bare minimum;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8071-b847-ff3fb4a1dccf\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">the images are subject, from the moment they are captured, to a\u00a0<strong>automatic blurring processing<\/strong>\u00a0faces and license plates detected;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80f2-9dad-c60a446e6ae8\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">the images are not\u00a0<strong>not stored in plain text beyond the time strictly necessary for business processing<\/strong>\u00a0; images stored for the purpose of improving AI models are systematically anonymized beforehand;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8070-8f11-e199ca73aa6b\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">Any image that is the subject of a request to exercise rights by a third party is processed according to the procedure described in section 11.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-806d-8127-f32661fdd875\" class=\"\">A data protection impact assessment (DPIA) has been carried out for this processing.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-80f8-9a6e-c84841558575\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-80d8-bade-c5334632f2bd\" class=\"\"><strong>6. Mandatory or optional nature of the data<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8099-90fb-e6d5a16bf646\" class=\"\">When Ficha collects Personal Data, whether it is mandatory or optional is indicated at the time of collection (for example by an asterisk on the forms).<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80e0-8961-e13311da6901\" class=\"\">THE\u00a0<strong>refusal to provide mandatory data<\/strong>\u00a0may prevent account creation, access to certain features, or the provision of the service.\u00a0<strong>refusal to provide optional data<\/strong>\u00a0does not affect access to essential features; it may limit certain optional features.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-809d-ba01-ded773a56bb4\" class=\"\">For example, in the Cocoon user application:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8062-b8c6-db2e484ee548\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Refusal of geolocation<\/strong>\u00a0The map of nearby collection points and stations, as well as the list of local reward partners, cannot be presented to you in a personalized way. You will still be able to use the rest of the application.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8068-a75b-eeb33c10809c\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Refusal of access to the camera or photos<\/strong>\u00a0: some image sorting and reporting features will not be available.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8026-b5e0-f4508144cdac\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Reject push notifications<\/strong>\u00a0You will not receive alerts about point allocations, available rewards, or ongoing promotions in your area. Email communications will still be available.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80a3-92c0-f280128e6def\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Account creation request refused (email\/password)<\/strong>\u00a0: access to features related to accumulating points and exchanging them for rewards is impossible.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-807b-8957-c42a651eddfb\" class=\"\">No data is collected beyond what is strictly necessary for the intended purpose.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-808a-a915-fe6610973c2c\" class=\"\">File\u00a0<strong>does not collect audio data<\/strong>\u00a0: none of our Product features use the device's microphone.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-8012-8591-dfd8e51220d9\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-8018-84b5-dccd39a7f458\" class=\"\"><strong>7. Recipients and subcontractors<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80e7-aa4b-fa69f740f3ad\" class=\"\">Ficha does not sell or rent your Personal Data to third parties. Personal Data is accessible, to the extent strictly necessary for their missions, to the following recipients.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-801b-8cd1-f49ee96c7f78\" class=\"\"><strong>7.1 Internal Recipients<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8085-9655-c3c74690c80a\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">The Product, Technical, Support, Sales and Management teams at Ficha, within the framework of their respective missions, and in compliance with the principle of\u00a0<strong>lesser privilege<\/strong>\u00a0(access management via Google Cloud IAM, quarterly rights review, mandatory MFA).<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-80a5-8ba3-f441b5d01004\" class=\"\"><strong>7.2 External Recipients<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8022-bd92-d484b2540d49\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Our Clients<\/strong>\u00a0(local authorities, landlords, trustees, public service operators), for the Products they make available to their agents or constituents;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80fa-91f3-dc4f6611bc4b\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Our reward partners<\/strong>\u00a0(local merchants, digital voucher platforms), for the delivery of rewards in Cocon (transmission limited to a unique identifier or code, without unnecessary identifying information);<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-801c-bc99-def63617e825\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Administrative, judicial and regulatory authorities<\/strong>, when required by law (judicial requisition, CNIL request, etc.).<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-8070-8d14-eb0caf933388\" class=\"\"><strong>7.3 Subcontractors<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80dc-a2c4-d59a94f4046b\" class=\"\">Ficha relies on a limited number of technical subcontractors, selected for their guarantees regarding security and GDPR compliance. Each subcontractor is bound to Ficha by a contract containing the clauses required by Article 28 of the GDPR (Data Processing Agreement \/ DPA).<\/p><\/div><div style=\"display:contents\" dir=\"ltr\"><table id=\"350cccb0-c7b8-8080-a845-e386137d79da\" class=\"simple-table\"><thead class=\"simple-table-header\"><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-800d-8512-c33fa142f919\"><th id=\"ovoV\" class=\"simple-table-header-color simple-table-header\">Subcontractor<\/th><th id=\"KFDq\" class=\"simple-table-header-color simple-table-header\">Role<\/th><th id=\"Bake\" class=\"simple-table-header-color simple-table-header\">Data location<\/th><th id=\"`:Lv\" class=\"simple-table-header-color simple-table-header\">Guarantees \/ transfer framework<\/th><\/tr><\/div><\/thead><tbody><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-808c-a639-e64aeb264b4e\"><td id=\"ovoV\" class=\"\"><strong>Google Cloud EMEA Limited \/ Google Cloud France<\/strong>\u00a0(Google Cloud Platform, Firestore, Cloud Run, Cloud Storage, Cloud KMS, Cloud Functions, Cloud Logging, Cloud Monitoring, Cloud Audit Logs, Security Command Center, Google Cloud Armor, Cloud Secret Manager)<\/td><td id=\"KFDq\" class=\"\">Hosting, database, media file storage, key management, security<\/td><td id=\"Bake\" class=\"\">EU regions: France (europe-west9, Paris) and Belgium (europe-west1, St-Ghislain)<\/td><td id=\"`:Lv\" class=\"\">ISO\/IEC 27001, 27017, 27018, SOC 2\/3 certifications; AES-256 encryption at rest, TLS 1.2+ in transit; Google Cloud DPA; Standard Contractual Clauses for support operations that may involve a transfer<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-808f-9b0b-d7fce23f1044\"><td id=\"ovoV\" class=\"\"><strong>Firebase (Google)<\/strong>\u00a0: Firebase Authentication, Firebase Cloud Messaging, Firebase Analytics, Firebase Hosting<\/td><td id=\"KFDq\" class=\"\">Authentication, push notifications, application audience measurement<\/td><td id=\"Bake\" class=\"\">EU (multi-region configuration)<\/td><td id=\"`:Lv\" class=\"\">Same as Google Cloud<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-801b-bf59-d44251cc35a0\"><td id=\"ovoV\" class=\"\"><strong>Twilio Inc. \/ Twilio Ireland Limited<\/strong><\/td><td id=\"KFDq\" class=\"\">Sending transactional SMS messages (OTPs, codes, notifications)<\/td><td id=\"Bake\" class=\"\">EU \/ United States<\/td><td id=\"`:Lv\" class=\"\">Twilio DPA; Standard Contractual Clauses; ISO 27001 and SOC 2 certifications. SMS content is retained by Twilio for the minimum period required by operator regulations; dispatch identifiers are retained by Ficha for 12 months.<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-806a-96f4-d1f48099ebf5\"><td id=\"ovoV\" class=\"\"><strong>Twilio Inc. \u2013 SendGrid product<\/strong><\/td><td id=\"KFDq\" class=\"\">Sending transactional emails (account creation, magic link, notifications)<\/td><td id=\"Bake\" class=\"\">EU \/ United States<\/td><td id=\"`:Lv\" class=\"\">DPA SendGrid (Twilio Inc.); Standard Contractual Clauses<\/td><\/tr><\/div><\/tbody><\/table><\/div><div style=\"display:contents\" dir=\"auto\"><blockquote id=\"350cccb0-c7b8-801c-a506-dc98ec3e613b\" class=\"\"><strong>Detailed list of subcontractors<\/strong>\u00a0\u2013 An up-to-date list of subcontractors used by Ficha can be obtained upon request from the DPO. Any significant changes to this list will be communicated to Clients within the framework of the corresponding contractual relationships.<\/blockquote><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-8012-878b-db0099621c71\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-8018-b1da-d82c68ad2bca\" class=\"\"><strong>8. Data transfers outside the European Union<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8055-85ee-c56b84ba646b\" class=\"\">L'<strong>main accommodation<\/strong>\u00a0data processed by Ficha for its Products takes place\u00a0<strong>exclusively within the European Union<\/strong>\u00a0(France and Belgium, via Google Cloud Platform).<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80f5-bd4f-e77ce276134c\" class=\"\">Some of our subcontractors (notably Twilio, SendGrid) may, for ancillary operations (support, backup, monitoring) or by their very nature, process data from the\u00a0<strong>UNITED STATES<\/strong>\u00a0or other third countries.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80f0-86d9-e511986682a1\" class=\"\">In this case, Ficha ensures that a legal framework compliant with Articles 44 et seq. of the GDPR is in place, including:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80dd-9a8f-c786062fb09a\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">a\u00a0<strong>suitability decision<\/strong>\u00a0of the European Commission (for example the\u00a0<strong>EU-US Data Privacy Framework<\/strong>\u00a0for certified American subcontractors);<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80e3-809f-ded5a1ab6693\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">THE\u00a0<strong>Standard Contractual Clauses<\/strong>\u00a0(CCT) of the European Commission adopted by Implementing Decision (EU) 2021\/914 of 4 June 2021;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8070-bdd8-d7714b9a7a82\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">of the\u00a0<strong>additional measures<\/strong>\u00a0when a transfer impact analysis (TIA) justifies it: enhanced encryption, pseudonymization, specific contractualization.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80fd-b86d-db2ec665dbd0\" class=\"\">You can obtain a copy of these safeguards upon request from the DPO.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-80f2-a319-ffdaeb4206e1\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-80ad-9602-ff5f85b01fe8\" class=\"\"><strong>9. Cookies and other trackers<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-8000-92b3-feb6f3fa7e07\" class=\"\"><strong>9.1 What is a cookie?<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-807b-b0c9-ed7e94b00a66\" class=\"\">A\u00a0<strong>cookie<\/strong>\u00a0is a small text file placed on your device (computer, tablet, smartphone) when you visit a website or use an application. It allows your device to be recognized during subsequent visits.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8040-a7fc-e193c00d599e\" class=\"\">Under the generic term of "\u00a0<strong>tracers<\/strong>\u00a0"This includes HTTP cookies, tracking pixels, web beacons, local storage, mobile analytics SDKs and any other equivalent device.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-80fb-a2f7-ce7d867ddc57\" class=\"\"><strong>9.2 Obtaining your consent<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-802a-b581-e18e5fc4885f\" class=\"\">In accordance with Article 82 of the French Data Protection Act, the deposit and reading of cookies that are not strictly necessary are\u00a0<strong>subject to your prior consent<\/strong>collected via a banner on first access to the site or application. You can at any time\u00a0<strong>withdraw your consent<\/strong>\u00a0by clicking on the "Manage my cookies" link accessible from our Products.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-806d-b5e9-dba15d0816ea\" class=\"\"><strong>9.3 List of cookies and trackers used<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-80c3-b837-d3a61aba5fee\" class=\"\"><strong>a) Showcase website ficha.fr<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"ltr\"><table id=\"350cccb0-c7b8-80ff-a883-f57da1fa4ffe\" class=\"simple-table\"><thead class=\"simple-table-header\"><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80c6-bec2-ce8109315301\"><th id=\"Gynh\" class=\"simple-table-header-color simple-table-header\" style=\"width:229px\">Name \/ Family<\/th><th id=\"bR:^\" class=\"simple-table-header-color simple-table-header\">Issuer<\/th><th id=\"MRTV\" class=\"simple-table-header-color simple-table-header\">Purpose<\/th><th id=\"?aJW\" class=\"simple-table-header-color simple-table-header\" style=\"width:101px\">Category<\/th><th id=\"_H[Y\" class=\"simple-table-header-color simple-table-header\">Legal basis<\/th><th id=\"YdMT\" class=\"simple-table-header-color simple-table-header\">Shelf life<\/th><\/tr><\/div><\/thead><tbody><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80bc-a100-efb76d8b9c78\"><td id=\"Gynh\" class=\"\" style=\"width:229px\">WordPress session cookies (<code>wordpress_*<\/code>,\u00a0<code>wp-settings-*<\/code>)<\/td><td id=\"bR:^\" class=\"\">File<\/td><td id=\"MRTV\" class=\"\">Site functionality, session management<\/td><td id=\"?aJW\" class=\"\" style=\"width:101px\">Strictly necessary<\/td><td id=\"_H[Y\" class=\"\">Exemption (cookie strictly necessary for the provision of the service, art. 82 LIL)<\/td><td id=\"YdMT\" class=\"\">Session or 1 year<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-802b-a953-e94312f83198\"><td id=\"Gynh\" class=\"\" style=\"width:229px\">Consent cookie (<code>cookie_consent<\/code>)<\/td><td id=\"bR:^\" class=\"\">File<\/td><td id=\"MRTV\" class=\"\">Remembering your cookie preferences<\/td><td id=\"?aJW\" class=\"\" style=\"width:101px\">Strictly necessary<\/td><td id=\"_H[Y\" class=\"\">Exemption (cookie strictly necessary for the operation of the consent collection service, CNIL guideline of September 17, 2020)<\/td><td id=\"YdMT\" class=\"\">6 months<\/td><\/tr><\/div><\/tbody><\/table><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-809c-836e-d927f5583120\" class=\"\"><strong>b) Trackers placed in the applications (Cocon, Camia Ambassador, Camia, Cocon Manager)<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-805e-973c-c849c1b63086\" class=\"\">Mobile and web applications do not use HTTP cookies in the strict sense, but rather...\u00a0<strong>technical identifiers<\/strong>\u00a0stored via SDKs (Firebase, device OS) and browser local storage. These trackers are also subject to Article 82 of the French Data Protection Act.<\/p><\/div><div style=\"display:contents\" dir=\"ltr\"><table id=\"350cccb0-c7b8-803a-bb7f-c37649a9b8b4\" class=\"simple-table\"><thead class=\"simple-table-header\"><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8062-b7d1-e8f690920a81\"><th id=\"]L[p\" class=\"simple-table-header-color simple-table-header\">Tracer<\/th><th id=\"fFuv\" class=\"simple-table-header-color simple-table-header\">Issuer<\/th><th id=\"q{`y\" class=\"simple-table-header-color simple-table-header\">Purpose<\/th><th id=\"eOoE\" class=\"simple-table-header-color simple-table-header\">Category<\/th><th id=\"]RGF\" class=\"simple-table-header-color simple-table-header\">Legal basis<\/th><th id=\"ObTH\" class=\"simple-table-header-color simple-table-header\">Shelf life<\/th><\/tr><\/div><\/thead><tbody><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-804e-97fe-f33b45a67bf2\"><td id=\"]L[p\" class=\"\">Firebase authentication tokens (ID tokens, refresh tokens)<\/td><td id=\"fFuv\" class=\"\">Firebase \/ Ficha<\/td><td id=\"q{`y\" class=\"\">Maintaining the authenticated session<\/td><td id=\"eOoE\" class=\"\">Strictly necessary<\/td><td id=\"]RGF\" class=\"\">Contract execution<\/td><td id=\"ObTH\" class=\"\">1-hour session; automatic renewal<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-80c5-8ddf-c13d4fe6f3d2\"><td id=\"]L[p\" class=\"\">Firebase Cloud Messaging, token push<\/td><td id=\"fFuv\" class=\"\">Firebase \/ Ficha<\/td><td id=\"q{`y\" class=\"\">Sending push notifications authorized by the User<\/td><td id=\"eOoE\" class=\"\">Strictly necessary for the requested functionality<\/td><td id=\"]RGF\" class=\"\">Consent (system authorization for notifications)<\/td><td id=\"ObTH\" class=\"\">As long as the token is valid<\/td><\/tr><\/div><div style=\"display:contents\" dir=\"ltr\"><tr id=\"350cccb0-c7b8-8030-be54-ef278e5e4ae3\"><td id=\"]L[p\" class=\"\">Firebase Crashlytics (if applicable)<\/td><td id=\"fFuv\" class=\"\">Firebase \/ Google<\/td><td id=\"q{`y\" class=\"\">Diagnosing application crashes<\/td><td id=\"eOoE\" class=\"\">Pseudonymized technical diagnosis<\/td><td id=\"]RGF\" class=\"\">Legitimate interest (security and stability of the service)<\/td><td id=\"ObTH\" class=\"\">90 days<\/td><\/tr><\/div><\/tbody><\/table><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-80c4-9375-c70e5558ceda\" class=\"\"><strong>9.4 Configuring your browser or device<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80a5-aa90-c48ca5403b39\" class=\"\">You can configure your browser or device at any time to:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-808d-8715-c9e8ca15ad6f\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">accept or reject cookies;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-802a-b089-d560afda6c51\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">delete cookies already stored.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-806d-b4ae-dfd563b9a15a\" class=\"\">The precise details are available on the CNIL website:\u00a0<a href=\"https:\/\/www.cnil.fr\/fr\/cookies-et-traceurs-comment-les-maitriser\">https:\/\/www.cnil.fr\/fr\/cookies-et-traceurs-comment-les-maitriser<\/a>.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-80b5-a78b-dd27d138771b\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"356cccb0-c7b8-80a8-9adb-cc95bb62ecca\" class=\"\">10. Data Security<\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"356cccb0-c7b8-8066-9c09-db92b1dd0373\" class=\"\">Ficha implements, in accordance with Article 32 of the GDPR, <strong>technical and organizational measures<\/strong> appropriate to guarantee a level of security adapted to the risk, based on the state of the art and the recommendations of the CNIL and the ANSSI.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"356cccb0-c7b8-8053-9c5f-dc6ebbf9f66e\" class=\"\">10.1 Technical Measures<\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"356cccb0-c7b8-8002-a3b7-c78889bc0576\" class=\"\">Without going into detail about the configurations that could be useful to an attacker, Ficha notably implements:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-8003-aab7-dc6974adaa3b\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">THE <strong>encryption<\/strong> Personal Data <strong>at rest<\/strong> And <strong>in transit<\/strong>, with secure key management;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-8027-8c92-f4f36ec8c0cd\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">L'<strong>multi-factor authentication (MFA)<\/strong> and a robust password policy for all access to environments processing Personal Data;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-80e7-b609-d1078335a6f6\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">A <strong>access control<\/strong> based on the principle of least privilege, with regular reviews of rights;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-8042-ab13-cc67046cd068\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">THE <strong>partitioning<\/strong> production, testing and development environments, as well as data between Clients;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-8091-a63e-c652e1499cad\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">there <strong>pseudonymization<\/strong> Users by means of technical identifiers distinct from identifying data;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-80f7-9704-d01bb8cfef37\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">of the <strong>protection mechanisms against attacks<\/strong> (application firewall, protection against distributed denial-of-service attacks, automatic vulnerability detection, code audits);<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-80e9-97ee-fe09336ec4c0\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">of the <strong>regular backups<\/strong>, redundant within the European Union, with restoration tests;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-80fe-847d-e8c0a76bec2d\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">there <strong>logging and monitoring<\/strong> sensitive access and operations, with automatic alerts on suspicious events;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-80f4-b5f1-defd8013cdb6\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">THE <strong>hardening<\/strong> IoT devices deployed in the field (minimal operating system, encrypted communications, no direct exposure to the Internet);<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-8041-b31a-f4a8c0a99176\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">there <strong>securing workstations<\/strong> collaborators and <strong>local<\/strong> (access control, video surveillance, centralized terminal management).<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"356cccb0-c7b8-8045-94f8-ff366f78b7b6\" class=\"\">10.2 Organizational Measures<\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-80c1-827f-df757c97392b\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">Approach <strong>Privacy by Design and by Default<\/strong> from the design of functionalities and validation of new processing by the DPO;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-8021-a339-cc089085c156\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">outfit of a <strong>processing activities register<\/strong> compliant with Article 30 of the GDPR;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-8019-a7d2-f325255f93ac\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">realization of<strong>Data protection impact assessments (DPIAs)<\/strong> for high-risk treatments;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-803e-84c2-d7672a95055d\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>subcontractor management policy<\/strong> (selection, contractualization in accordance with Article 28 GDPR, monitoring);<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-8080-bbff-cde21c5a40c9\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>documented procedure for managing incidents and data breaches<\/strong>, with qualification matrix, crisis unit and feedback from experience;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-804e-b9ec-f46ad704637c\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>internal information classification scale<\/strong> determining the applicable protection rules;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"356cccb0-c7b8-808c-9d9d-d3e62766906d\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">program of <strong>awareness and continuing education<\/strong> collaborators (GDPR, security, phishing), in accordance with the recommendations of the CNIL and the ANSSI.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"356cccb0-c7b8-8076-80d3-d9634f340053\" class=\"\">10.3 Detailed Documentation<\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"356cccb0-c7b8-8002-9155-db91e6487502\" class=\"\">There <strong>detailed documentation<\/strong> Our security system (information systems security policy, processing register, audit reports, subcontracting agreements, business continuity plan, etc.) is kept up to date and can be communicated, in the appropriate context, to our Clients, their authorized auditors and any competent supervisory authority.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"356cccb0-c7b8-80f5-84a5-d14e8ab8151e\" class=\"\">10.4 Limitations<\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"356cccb0-c7b8-8043-b1d7-ce693830e89a\" class=\"\">No data transmission over the Internet or storage system can be guaranteed to be 100% secure. Ficha employs reasonable and state-of-the-art measures to protect your Personal Data, but cannot guarantee the absolute absence of any incident.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-8001-98d0-ffc633ec85cc\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-8001-9bf4-ed8fc8f859e7\" class=\"\"><strong>11. Your rights<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-809d-ac7e-f6e12c42f582\" class=\"\">In accordance with Articles 12 to 23 of the GDPR and Articles 48 to 56 of the French Data Protection Act, you have the following rights regarding your Personal Data.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-80f1-a255-c6db926ee89c\" class=\"\"><strong>11.1 List of rights<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80b8-ae1b-cf26448b18e0\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Right of access<\/strong>\u00a0(Art. 15 GDPR): obtain confirmation that your Data is being processed and obtain a copy of it.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80b7-b298-ef16c884fe26\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Right of rectification<\/strong>\u00a0(Art. 16 GDPR): have your inaccurate data corrected or completed.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8025-bc34-ee284b07b51b\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Right to erasure<\/strong>\u00a0or "right to be forgotten" (art. 17 GDPR): obtain the deletion of your Data in the cases provided for by the GDPR.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80d5-8e67-eda743d44fe4\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Right to restriction of processing<\/strong>\u00a0(Art. 18 GDPR): obtain a temporary freeze on the use of your Data.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80ca-ae82-e4bc3f02cc92\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Right to portability<\/strong>\u00a0(Art. 20 GDPR): receive your Data in a structured, commonly used and machine-readable format (JSON or CSV), and where appropriate transmit it to another data controller.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80c7-ae40-cfd65522de7f\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Right to object<\/strong>\u00a0(Art. 21 GDPR): to object, on grounds relating to your particular situation, to processing based on legitimate interest; to object at any time to processing for direct marketing purposes.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-808a-b3af-e9ec59ca39b5\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Right to withdraw your consent<\/strong>\u00a0(art. 7.3 GDPR) at any time, without this calling into question the lawfulness of the processing carried out before the withdrawal.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8099-a646-f30cb9e3fe30\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Right to define guidelines<\/strong>\u00a0relating to the fate of your Data after your death (art. 85 of the Data Protection Act).<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8093-88ff-dc1ab29a87e4\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Right to lodge a complaint<\/strong>\u00a0with a supervisory authority (see 11.4).<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-8027-af3f-ccfe606e47fd\" class=\"\"><strong>11.2 Procedures for exercising<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8090-bad4-d0b56115036e\" class=\"\">You can exercise these rights:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80b4-a4ca-d392560c1815\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>directly from our Products<\/strong>, when the functionality exists (account settings: edit, delete, export);<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80a0-83b0-f10a2cdc876c\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>by email<\/strong>\u00a0at the address\u00a0<strong><a href=\"mailto:guillaume.dionisi@ficha.fr\">guillaume.dionisi@ficha.fr<\/a><\/strong>\u00a0;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80a3-8210-fba3619c1e9d\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>by mail<\/strong>\u00a0To: Ficha \u2013 For the attention of the DPO \u2013 12 rue Pierre Semard, 38000 Grenoble, France.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8060-8aeb-e7eca10ebb48\" class=\"\">To identify you and prevent any identity theft, we may ask you to verify your identity (identity document, the superfluous elements of which can be obscured).<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-80b7-9dab-f8063fafecee\" class=\"\"><strong>11.3 Response Times<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-807d-adfb-f5356145be5a\" class=\"\">Ficha is committed to responding to your request\u00a0<strong>within one month<\/strong>\u00a0The processing time is extended by two additional months from the date of receipt for complex or numerous requests. You will be notified of any extension within one month of receiving your request, along with the reasons for the extension. For number portability requests, Ficha strives to respond as quickly as possible, and always before the one-month deadline expires.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-8053-8940-e740f9d17e79\" class=\"\"><strong>11.4 Complaint to a supervisory authority<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8040-97bf-e621120e9c58\" class=\"\">If, after contacting us, you believe that your rights have not been respected, you can file a complaint with the\u00a0<strong>National Commission for Information Technology and Civil Liberties (CNIL)<\/strong>\u00a0or at the<strong>supervisory authority of the European Union member state in which you reside or work<\/strong>\u00a0or in which the alleged violation occurred (Article 77 GDPR).<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8077-8e9c-ea814b2718af\" class=\"\">CNIL:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8029-bac3-db6484686f9b\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">3 Place de Fontenoy \u2013 TSA 80715 \u2013 75334 Paris Cedex 07<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8020-b480-d56f302b5ea4\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">Telephone: +33 1 53 73 22 22<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8026-8d11-ce8a66861860\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">Site :\u00a0<a href=\"https:\/\/www.cnil.fr\/fr\/plaintes\">https:\/\/www.cnil.fr\/fr\/plaintes<\/a><\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8022-85ee-cabdcb0fdc63\" class=\"\">The list of European supervisory authorities is available on the website of the European Data Protection Board:\u00a0<a href=\"https:\/\/www.edpb.europa.eu\/about-edpb\/about-edpb\/members_fr\">https:\/\/www.edpb.europa.eu\/about-edpb\/about-edpb\/members_fr<\/a>.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><h3 id=\"350cccb0-c7b8-80d4-8aab-e5559e316b58\" class=\"\"><strong>11.5 Special case of Products used in the context of a professional mission<\/strong><\/h3><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80f1-ac81-c001f7cd2bdd\" class=\"\">If you use the Camia Ambassador application, the Camia Dashboard, or the Cocons Manager as part of your work on behalf of a Ficha Client (local authority, operator, landlord), your request to exercise rights may be forwarded to the relevant Client acting as\u00a0<strong>Data controller<\/strong>Ficha will tell you, if necessary, who to address your request to, and will facilitate its processing by providing the necessary data and tools.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-80bf-b96b-d00f3c94472a\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-801c-902f-efc4fd4fdd55\" class=\"\"><strong>12. Data concerning minors<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80e4-8e6f-f16bcbd6d7a2\" class=\"\">The Cocoon User application can be used by minors.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80e3-86e3-de2dc32b2ec7\" class=\"\">In accordance with Article 8 of the GDPR and Article 45 of the French Data Protection Act, the registration and processing of a minor's personal data are subject to the following rules:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8022-bfe5-c38599c2b07a\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Ages 15 and up<\/strong>The minor can consent alone to the processing of his or her personal data within the framework of information society services.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-801d-8449-fa85f8c17eaf\" class=\"bulleted-list\"><li style=\"list-style-type:disc\"><strong>Under 15 years old<\/strong>, consent must be given jointly by the minor and by one of the holders of parental authority.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80aa-b65c-f646649246f0\" class=\"\">Ficha takes reasonable steps to verify the declared age and obtain parental consent where required. If you are a parent or legal guardian and believe that a minor under your care has provided personal data without your consent, you can contact us at\u00a0<strong><a href=\"mailto:guillaume.dionisi@ficha.fr\">guillaume.dionisi@ficha.fr<\/a><\/strong>\u00a0so that we can proceed with the deletion of the account and associated data as soon as possible.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80bf-99aa-ffccc8c2a96b\" class=\"\">No targeted advertising is shown to minors identified as such.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-80f5-93d3-ceacfcc592a0\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-80a5-9529-d308ff5d72a4\" class=\"\"><strong>13. Automated decision-making and profiling<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8018-9233-c35aed2816f8\" class=\"\">Ficha implements certain operations that can be described as\u00a0<strong>profiling<\/strong>\u00a0within the meaning of Article 4.4 of the GDPR, such as:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80e1-a047-ef25628b597e\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">there\u00a0<strong>automatic recognition<\/strong>\u00a0contents of bins and sorting flows by embedded AI models (IoT sensors, Camia Ambassador application);<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-809c-b069-d24fbe2bf785\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">there\u00a0<strong>suggestions for rewards or partners<\/strong>\u00a0in Cocon depending on your postal code and your sorting activity;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-804b-8728-f0f5feeac60a\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">L'<strong>establishment of rankings and badges<\/strong>\u00a0in Cocoon (gamification).<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80a9-af66-eaafa403cd0a\" class=\"\">On the other hand, Ficha\u00a0<strong>does not implement purely automated decision-making<\/strong>\u00a0producing legal effects or significantly affecting individuals within the meaning of Article 22 of the GDPR. Algorithmic processing likely to have a significant effect (for example: classifying a sorting action as non-compliant) always gives rise to a\u00a0<strong>human intervention<\/strong>\u00a0in the final decision (validation by an ambassador, a Client agent or a member of the Ficha team).<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80e0-a78b-f5088fd2d90f\" class=\"\">You can at any time express your point of view, contest a result or request human intervention by contacting our DPO (see section 17).<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-8017-ad8c-e22d722ce9f2\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-80be-a4a3-ce4273a2168b\" class=\"\"><strong>14. Links to third-party sites<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-809b-866f-cd3d5000e30e\" class=\"\">Our Products may contain links to websites or applications published by third parties (partner merchants, authorities, institutional partners, etc.). Ficha has no control over these third-party sites and\u00a0<strong>is not responsible for their data protection practices<\/strong>We encourage you to review their own privacy policies before providing them with any personal data.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-80ea-afd3-e892165f9245\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-8012-b3d9-d9e7a7b791c1\" class=\"\"><strong>15. Notification of data breaches<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80c5-9daf-e0ec2fbe161c\" class=\"\">In accordance with Articles 33 and 34 of the GDPR, Ficha has implemented a formalized procedure for managing data breaches.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-805f-b5a6-c1a6a926ca5f\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">Incidents are classified according to a 4-level matrix (Low \/ Moderate \/ High \/ Critical), based on criteria of urgency and impact.<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80ee-999e-e6e254575a09\" class=\"bulleted-list\"><li style=\"list-style-type:disc\">For incidents classified as\u00a0<strong>High<\/strong>\u00a0or higher (leakage, alteration or loss of Personal Data), Ficha:<div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80e2-918f-df9ee825d046\" class=\"bulleted-list\"><li style=\"list-style-type:circle\">notifies the\u00a0<strong>Competent data controller<\/strong>\u00a0(the Client, when Ficha acts as a subcontractor) under\u00a0<strong>48 hours<\/strong>\u00a0;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-8004-a599-c2fd02ca5f60\" class=\"bulleted-list\"><li style=\"list-style-type:circle\">notifies the\u00a0<strong>CNIL<\/strong>\u00a0below\u00a0<strong>72 hours<\/strong>\u00a0when the violation is likely to pose a risk to the rights and freedoms of the persons concerned;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80ee-be06-f41d53540d2a\" class=\"bulleted-list\"><li style=\"list-style-type:circle\"><strong>informs the people concerned directly<\/strong>\u00a0when the violation is likely to result in a high risk to their rights and freedoms;<\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><ul id=\"350cccb0-c7b8-80e1-960e-d982caa41e62\" class=\"bulleted-list\"><li style=\"list-style-type:circle\">documents all violations in an internal register.<\/li><\/ul><\/div><\/li><\/ul><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-8034-a045-dcdbefc387be\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-8000-851c-e891d5dfe592\" class=\"\"><strong>16. Amendments to this Policy<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80b4-b6b1-dfdab68d4439\" class=\"\">Ficha may need to amend this Policy to reflect legal, regulatory, technical or organizational changes.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8065-8e5b-cb010905dd00\" class=\"\">Any changes will be indicated by updating the "Last Updated" date at the top of the document. For substantial changes, Ficha will inform you through an appropriate means (in-app notification, email, website banner, etc.).\u00a0<strong>Before<\/strong>\u00a0their entry into force.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80cd-923a-ddb043b2b7bc\" class=\"\">We encourage you to review this Policy regularly.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80bb-9ebe-fbca5f9a5cf4\" class=\"\">A version history is kept internally and can be consulted upon request to the DPO.<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-8061-83d7-e06788226add\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><h2 id=\"350cccb0-c7b8-8089-b550-d7fa6036956c\" class=\"\"><strong>17. Contact us<\/strong><\/h2><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-80cc-ad6a-d06a8a65a562\" class=\"\">For any questions, information requests, or requests to exercise rights related to this Policy:<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-8098-baba-e5b8edba0087\" class=\"\"><strong>Data Protection Officer \u2013 Ficha SAS<\/strong>\u00a0<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"351cccb0-c7b8-8073-8bc9-e555fd53e117\" class=\"\">Guillaume Dionisi <\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"351cccb0-c7b8-80ed-ac85-e037c90bf827\" class=\"\">12 rue Pierre Semard \u2013 38000 Grenoble, France <\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"351cccb0-c7b8-8078-b837-ef3634d5aa3d\" class=\"\">Email:\u00a0<a href=\"mailto:guillaume.dionisi@ficha.fr\">guillaume.dionisi@ficha.fr<\/a>\u00a0<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"351cccb0-c7b8-806d-8a4c-d31d38246fff\" class=\"\">General email:\u00a0<a href=\"mailto:contact@ficha.fr\">contact@ficha.fr<\/a>\u00a0<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"351cccb0-c7b8-8089-af89-c78bd63aa5bc\" class=\"\">Telephone: +33 6 69 21 81 34<\/p><\/div><div style=\"display:contents\" dir=\"auto\"><hr id=\"350cccb0-c7b8-80b5-973d-d94ed7714437\"\/><\/div><div style=\"display:contents\" dir=\"auto\"><p id=\"350cccb0-c7b8-805c-85f2-d91f9e1e25e3\" class=\"\">\n<\/p><\/div><\/div><\/article><span class=\"sans\" style=\"font-size:14px;padding-top:2em\"><\/span><\/body><\/html>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Politique de confidentialit\u00e9 Politique de confidentialit\u00e9 Derni\u00e8re mise \u00e0 jour : 28 avril 2026\u00a0 Version : 2.0 Pr\u00e9ambule La soci\u00e9t\u00e9\u00a0Ficha\u00a0(ci-apr\u00e8s \u00ab\u00a0Ficha\u00a0\u00bb, \u00ab\u00a0nous\u00a0\u00bb ou \u00ab\u00a0notre\u00a0\u00bb), Soci\u00e9t\u00e9 par actions simplifi\u00e9e (SAS) au capital social de [Capital social \u2013 \u00e0 compl\u00e9ter] euros, immatricul\u00e9e au Registre du commerce et des soci\u00e9t\u00e9s de Grenoble sous le num\u00e9ro\u00a0SIREN 881 734 800,… <a href=\"https:\/\/ficha.fr\/en\/privacy-policy\" class=\"\" rel=\"bookmark\">Read More \u00bb<span class=\"screen-reader-text\">Privacy policy<\/span><\/a><\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"neve_meta_sidebar":"full-width","neve_meta_container":"","neve_meta_enable_content_width":"on","neve_meta_content_width":100,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"on","neve_meta_disable_footer":"","neve_meta_disable_title":"on","footnotes":""},"class_list":["post-617","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Privacy policy - Ficha<\/title>\n<meta name=\"robots\" content=\"noindex, nofollow\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy policy - Ficha\" \/>\n<meta property=\"og:description\" content=\"Politique de confidentialit\u00e9 Politique de confidentialit\u00e9 Derni\u00e8re mise \u00e0 jour : 28 avril 2026\u00a0 Version : 2.0 Pr\u00e9ambule La soci\u00e9t\u00e9\u00a0Ficha\u00a0(ci-apr\u00e8s \u00ab\u00a0Ficha\u00a0\u00bb, \u00ab\u00a0nous\u00a0\u00bb ou \u00ab\u00a0notre\u00a0\u00bb), Soci\u00e9t\u00e9 par actions simplifi\u00e9e (SAS) au capital social de [Capital social \u2013 \u00e0 compl\u00e9ter] euros, immatricul\u00e9e au Registre du commerce et des soci\u00e9t\u00e9s de Grenoble sous le num\u00e9ro\u00a0SIREN 881 734 800,… Read More »Privacy policy\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ficha.fr\/en\/privacy-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Ficha\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-04T11:38:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ficha.fr\/wp-content\/uploads\/2020\/08\/all_screens_blue.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1366\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"27 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ficha.fr\/privacy-policy\",\"url\":\"https:\/\/ficha.fr\/privacy-policy\",\"name\":\"Privacy policy - Ficha\",\"isPartOf\":{\"@id\":\"https:\/\/ficha.fr\/#website\"},\"datePublished\":\"2020-10-22T09:25:36+00:00\",\"dateModified\":\"2026-05-04T11:38:52+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/ficha.fr\/privacy-policy#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ficha.fr\/privacy-policy\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ficha.fr\/privacy-policy#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/ficha.fr\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ficha.fr\/#website\",\"url\":\"https:\/\/ficha.fr\/\",\"name\":\"Ficha\",\"description\":\"C'est pas fichu!\",\"publisher\":{\"@id\":\"https:\/\/ficha.fr\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/ficha.fr\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/ficha.fr\/#organization\",\"name\":\"Ficha\",\"url\":\"https:\/\/ficha.fr\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/ficha.fr\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/ficha.fr\/wp-content\/uploads\/2021\/06\/logo_c_pas_fichu_pink.png\",\"contentUrl\":\"https:\/\/ficha.fr\/wp-content\/uploads\/2021\/06\/logo_c_pas_fichu_pink.png\",\"width\":229,\"height\":126,\"caption\":\"Ficha\"},\"image\":{\"@id\":\"https:\/\/ficha.fr\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy policy - Ficha","robots":{"index":"noindex","follow":"nofollow"},"og_locale":"en_GB","og_type":"article","og_title":"Privacy policy - Ficha","og_description":"Politique de confidentialit\u00e9 Politique de confidentialit\u00e9 Derni\u00e8re mise \u00e0 jour : 28 avril 2026\u00a0 Version : 2.0 Pr\u00e9ambule La soci\u00e9t\u00e9\u00a0Ficha\u00a0(ci-apr\u00e8s \u00ab\u00a0Ficha\u00a0\u00bb, \u00ab\u00a0nous\u00a0\u00bb ou \u00ab\u00a0notre\u00a0\u00bb), Soci\u00e9t\u00e9 par actions simplifi\u00e9e (SAS) au capital social de [Capital social \u2013 \u00e0 compl\u00e9ter] euros, immatricul\u00e9e au Registre du commerce et des soci\u00e9t\u00e9s de Grenoble sous le num\u00e9ro\u00a0SIREN 881 734 800,… Read More »Privacy policy","og_url":"https:\/\/ficha.fr\/en\/privacy-policy\/","og_site_name":"Ficha","article_modified_time":"2026-05-04T11:38:52+00:00","og_image":[{"width":1366,"height":768,"url":"https:\/\/ficha.fr\/wp-content\/uploads\/2020\/08\/all_screens_blue.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"27 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/ficha.fr\/privacy-policy","url":"https:\/\/ficha.fr\/privacy-policy","name":"Privacy policy - Ficha","isPartOf":{"@id":"https:\/\/ficha.fr\/#website"},"datePublished":"2020-10-22T09:25:36+00:00","dateModified":"2026-05-04T11:38:52+00:00","breadcrumb":{"@id":"https:\/\/ficha.fr\/privacy-policy#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ficha.fr\/privacy-policy"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ficha.fr\/privacy-policy#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/ficha.fr\/"},{"@type":"ListItem","position":2,"name":"Privacy policy"}]},{"@type":"WebSite","@id":"https:\/\/ficha.fr\/#website","url":"https:\/\/ficha.fr\/","name":"File","description":"It's not over!","publisher":{"@id":"https:\/\/ficha.fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ficha.fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/ficha.fr\/#organization","name":"File","url":"https:\/\/ficha.fr\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/ficha.fr\/#\/schema\/logo\/image\/","url":"https:\/\/ficha.fr\/wp-content\/uploads\/2021\/06\/logo_c_pas_fichu_pink.png","contentUrl":"https:\/\/ficha.fr\/wp-content\/uploads\/2021\/06\/logo_c_pas_fichu_pink.png","width":229,"height":126,"caption":"Ficha"},"image":{"@id":"https:\/\/ficha.fr\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/ficha.fr\/en\/wp-json\/wp\/v2\/pages\/617","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ficha.fr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ficha.fr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ficha.fr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ficha.fr\/en\/wp-json\/wp\/v2\/comments?post=617"}],"version-history":[{"count":5,"href":"https:\/\/ficha.fr\/en\/wp-json\/wp\/v2\/pages\/617\/revisions"}],"predecessor-version":[{"id":5145,"href":"https:\/\/ficha.fr\/en\/wp-json\/wp\/v2\/pages\/617\/revisions\/5145"}],"wp:attachment":[{"href":"https:\/\/ficha.fr\/en\/wp-json\/wp\/v2\/media?parent=617"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}