The purpose of this Charter is to describe the conditions under which the information provided by the organization that completes and submits the WeNR questionnaire (hereinafter the “RESPONDENT”) to the Institut du Numérique Responsable (hereinafter the “INR”) is processed in order to guarantee the confidentiality and security of this information.
The RESPONDENT is invited to voluntarily complete the information necessary for INR to carry out a report and a study to measure the footprint of its information system via a questionnaire allowing, on the one hand, to make an inventory of its equipment, data centers and their use, and its use of the Cloud in order to calculate the environmental footprint of the information system and, on the other hand, to evaluate the maturity of its organization on sustainable digital.
The “Collected Data” corresponds to all of the information completed by the RESPONDENT in the questionnaire and on the WeNR website relating to its organization, its equipment and professional practices.
Among the Collected Data, only the information relating to the surname, first name and professional contact details of the RESPONDENT constitute personal data (“Personal Data”) as defined in Article 4(1) of the European Regulation n°2016/69/UE on data protection (GPDR – General Data Protection Regulation).
These Personal Data is only necessary to allow INR to have a point of contact within the RESPONDENT’s organization for the purpose of conducting and returning the WeNR report and study.
In addition, all of the Collected Data is processed exclusively for the purposes set forth below.
The Collected Data is processed exclusively for the following purposes:
The calculation and analysis methods mentioned above will be made available to INR members during the year 2023.
INR agrees to make every effort to provide the results to RESPONDENTS within four (4) months of submission of the data from the time the data allow the study to be conducted.
The accuracy of the study delivered will depend on the number of responses provided. Furthermore, given the uncertainty of the available data, the results provided will not constitute a basis for the respondent’s carbon footprint.
The person in charge of processing the Data collected is: Institut du Numérique Responsable, represented by Vincent Courboulay, administrator, SIRET 848 096 111 00010, head office 23 boulevard Albert Einstein, 17000 La Rochelle.
The Collected Data will be communicated only to authorized persons within the INR and its duly authorized subcontractors for the realization of the report and the WENR STUDY. INR will not release, sell, or share unconsolidated Collected Data with third parties without the prior written consent of the RESPONDENT.
INR shall implement all appropriate measures to limit the risks of loss, deterioration or misuse of the data contained in WeNR.
INR undertakes to respect and ensure the secrecy of the Collected Data by all persons likely to work on these data and to take all necessary precautions to preserve the security of the Collected Data and in particular to prevent them from being communicated to unauthorized third parties.
INR undertakes not to publish the WENR STUDY, containing consolidated Collected Data, until it has received a sufficiently large number of responses to ensure that there is no link between the Collected Data and the RESPONDENTS through averages that prevent any identification of the RESPONDENTS.
Following its transfer to INR via the Useconnected service, the WeNR questionnaire file completed by the RESPONDENT will be hosted in France on the servers of Osinum and La Rochelle Université.
The Data collected will be kept for the time strictly necessary for the establishment of the RESPONDENT’s report and the realization of the WENR STUDY, on the one hand, and the optimisation of the WeNR tool as part of a thesis within La Rochelle Université, on the other hand, that is to say until 31 December 2025 at the latest.
After this date, the Respondent’s Collected Data will be anonymised so that the respondent can no longer be identified.
The RESPONDENT has a right to access, rectify and delete Personal Data. This request can be made by email to the following address Institut du Numérique Responsable, 23 boulevard Albert Einstein, 17000 La Rochelle or by email at firstname.lastname@example.org.