Personal data protection and privacy policy at Radio France
Radio France, as a public service media, is committed to a policy of respecting and protecting privacy, and more specifically the personal data of its Users. Radio France pursues a proactive policy to ensure its compliance with regulations relating to the protection of personal data (hereinafter the "Regulations"), including in particular the General Regulation on the Protection of Personal Data (hereinafter the "GDPR") and the Data Protection Act of 1978 as amended (hereinafter the "Data Protection Act") as the Regulations evolve. It is important that the relationship of trust between Radio France and its listeners and Internet users (hereinafter the "Users") is based on strictly necessary, transparent and secure use of private data in the digital world.
This policy specifies the commitments made by Radio France and explains how Users can exercise their rights over their personal data.
Regulations
The RGPD, which came into force in 2018, has strengthened the requirements laid down by the French Data Protection Act (Loi Informatique et Libertés) for transparency of information and expression of consent, and has enabled data subjects to benefit from new rights.
The rights of individuals can be exercised whenever data, considered personal, is collected by a data controller.
Personal data is any information relating to an identified or identifiable natural person (in particular by reference to an identifier, location data or to several elements specific to his or her physical, mental, genetic, economic, cultural or social identity).
A data controller is a natural or legal person who implements the processing of personal data (by collection, storage or otherwise) for a specific purpose, and who controls the technical and/or human resources involved in implementing this processing. Responsibility for processing can also be shared with a third party (a service provider, a social network, etc.): in this case, we speak of co-controllers.
The Regulation adds to already existing texts, notably on Cookies with the 2002 ePrivacy Directive, which will be entirely revised by a new ePrivacy Regulation, whose adoption is still pending.
Our main principles
The principle of proportionality and transparency
By the present Radio France wishes to bring to the attention of Users clear, comprehensible and easily accessible information concerning all the conditions surrounding the processing of their personal data.
In accordance with the Regulations, Radio France collects personal data only when strictly necessary, and when the User has given his consent. However, certain processing operations do not require consent, in particular those based on the need to comply with legal obligations.
For each processing operation the purposes, the recipients of the data, as well as the conditions for storing personal data are detailed in the notices present under the forms and within article 7 of the General Conditions of Use of Radio France's sites and applications.
Concerning the specific case of Cookies, Users can go to the dedicated information page, here, and also express their consent for each purpose of processing by clicking on the "Cookie Management" tab, accessible from the footer of each page of the Radio France website.
The principle of data security, confidentiality and integrity
Radio France takes every precaution to ensure the security, integrity and confidentiality of Users' personal data. Radio France implements data protection reinforced by appropriate technical and organizational measures. These important and necessary measures are taken in order to guard in particular against any illicit or accidental access, any use (alteration, destruction, etc.), loss, unauthorized disclosure or modification and against any misappropriation of data.
Respect for purposes
Radio France processes Users' personal data only for a precise, legal and legitimate purpose.
In fact, personal data is processed for the purpose, in particular, of:
- Offer Users a personal space on Radio France's sites and applications or allow them to access their orders on the ticketing service,
- Personalize Users' experience, particularly in terms of content recommendations,
- Enable Users to participate in contests,
- Personalize advertising messages in order to increase their relevance,
- Add content directly to Users in the form of newsletters or notifications,
- Create statistics on visits to sites and applications in order to improve their reliability and simplify browsing paths.
Data collected by Radio France
Personal data is collected by Radio France following a positive, free and informed choice by the User according to the purposes pursued by the envisaged processing.
For each purpose, Radio France ensures that only strictly necessary data is requested or collected. As such, forms collecting personal data explicitly mention the data that must imperatively be communicated, and those that are optional (generally by affixing an asterisk).
Here is a non-exhaustive list of the various data that may be collected depending on the different features and services offered on Radio France's digital offerings:
- The e-mail address is regularly collected as it allows us to send Users newsletters, communications but also to inform them of the progress of a ticket order or the outcome of a game/contest;
- The last name, first name and telephone number are required for ticket reservations (paid or unpaid), in order to validate the reservation and to be able to alert the User in the event of a program change...;
- Sometimes, the full postal address may be required to take part in certain competitions;
- User browsing history on Radio France websites and certain declarative data may be collected to offer personalized recommendations;
- IP address and anonymous unique identifier are collected for analysis of connection data on our site (overall statistics, browsing paths, ...).
Duration of retention of data collected by Radio France
Personal data is kept only for the time reasonably necessary to provide the service, improve it and satisfy applicable legal requests or requests from the User. For example, Radio France may keep the User's data for the duration of the User's personal account created on Radio France's sites. Beyond the retention periods indicated within article 8 of the General Conditions of Use of Radio France sites or the periods recommended by the CNIL depending on the processing in question, Users' personal data is deleted from all our databases.
The retention periods practiced by Radio France therefore depend entirely on the purpose pursued by the processing in question.
Data recipients, storage and security
Only Radio France employees with a need-to-know in relation to their function are authorized to access the personal data collected.
Data is stored by Radio France or its subcontractors, depending on the processing considered, in compliance with the Regulations. In the event of subcontracting, the contract binding Radio France and the subcontractor ensures a high level of confidentiality and data security. This requires the subcontractor to continuously implement all the technical and organizational measures necessary to process and store personal data securely.
In addition, Radio France implements the following security measures:
- Limiting and controlling the people who may have access to Users' personal data by implementing appropriate access control devices (identity and authorization management);
- Awareness-raising among teams (employees and service providers) about the protection of personal data and Radio France's ethics;
- Strict selection of service providers with compliance with the Regulations as an imperative criterion.
Exercising the User's rights
Radio France undertakes to support the User as best it can in its requests to exercise its rights.
In fact, Radio France guarantees Users whose personal data is collected:
- A right to information: the User has the right to be informed in a concise, simple, transparent, understandable and easily accessible manner of how his or her personal data is processed;
- A right of access: The User may request communication of his/her personal data being processed by Radio France;
- A right of rectification: the User has the right to obtain the rectification of erroneous personal data or to obtain that incomplete personal data be completed;
- A right of opposition : the User has the right to object to his or her personal data being used for a specific purpose, but also to object to any fully automated decision, including profiling;
- A right to erasure: In certain cases, the User has the right to obtain the erasure of his or her personal data. This right is not, however, an absolute right and Radio France may have legal or legitimate reasons for retaining said data;
- A right to the limitation of processing: In certain cases, the User has the right to obtain the temporary freezing of the processing of his/her personal data;
- A right to portability: the User has the right to receive the personal data provided to Radio France, in a structured, commonly used and readable format, in order to transmit it to another data controller;
- A right to transmit instructions concerning the use of data after death: the User has the right to define directives concerning the conservation, deletion and communication of his/her data after his/her death. To this end, the User may choose a person to be responsible for carrying out these instructions. Failing this, it will be his/her heirs.
The User must address any request to exercise rights by e-mail or post to Radio France:
Radio France
Mission pour la protection des données personnelles
116 avenue du président Kennedy
75220 Paris Cedex 16
dpdp@radiofrance.com
The request will be processed within 30 days of receipt of the message.
For further information, Users may at any time consult the CNIL website
Contact
The Head of the Mission for the Protection of Personal Data (MPPDP) and the Personal Data Protection Officer (DPDP or DPO) are available to Users for any questions not covered on this page. Contact them at the following address: dpdp@radiofrance.com. They will take note of your messages during normal office hours and will endeavor to respond as quickly as possible (in the case of exercising a right, as mentioned above, processing of the request requires 30 days).
Special case of YouTube and Google
As part of the continuous improvement of its services, Radio France's digital teams use APIs from Google and YouTube in particular, enabling them to program and enrich the content visible on Radio France's sites and applications. Please refer to their Terms of Use, here and here.