Privacy and Data Protection Charter

The purpose of this Charter is to describe the conditions under which the information provided by the organization that completes and submits the WeNR questionnaire (hereinafter the “RESPONDENT”) to the Institut du Numérique Responsable (hereinafter the “INR”) is processed in order to guarantee the confidentiality and security of this information.

The RESPONDENT is invited to voluntarily complete the information necessary for INR to carry out a report and a study to measure the footprint of its information system via a questionnaire allowing, on the one hand, to make an inventory of its equipment, data centers and their use, and its use of the Cloud in order to calculate the environmental footprint of the information system and, on the other hand, to evaluate the maturity of its organization on sustainable digital.

1. Collected Data

The “Collected Data” corresponds to all of the information completed by the RESPONDENT in the questionnaire and on the WeNR website relating to its organization, its equipment and professional practices.

Among the Collected Data, only the information relating to the surname, first name and professional contact details of the RESPONDENT constitute personal data (“Personal Data”) as defined in Article 4(1) of the European Regulation n°2016/69/UE on data protection (GPDR – General Data Protection Regulation).

These Personal Data is only necessary to allow INR to have a point of contact within the RESPONDENT’s organization for the purpose of conducting and returning the WeNR report and study.

In addition, all of the Collected Data is processed exclusively for the purposes set forth below.

2. Purposes of processing the Collected Data

The Collected Data is processed exclusively for the following purposes:

The calculation and analysis methods mentioned above will be made available to INR members during the year 2023.

INR agrees to make every effort to provide the results to RESPONDENTS within four (4) months of submission of the data from the time the data allow the study to be conducted.

The accuracy of the study delivered will depend on the number of responses provided. Furthermore, given the uncertainty of the available data, the results provided will not constitute a basis for the respondent’s carbon footprint.

3. Person in charge of processing

The person in charge of processing the Data collected is: Institut du Numérique Responsable, represented by Vincent Courboulay, administrator, SIRET 848 096 111 00010, head office 23 boulevard Albert Einstein, 17000 La Rochelle.

4. Recipients of the collected data

The Collected Data will be communicated only to authorized persons within the INR and its duly authorized subcontractors for the realization of the report and the WENR STUDY. INR will not release, sell, or share unconsolidated Collected Data with third parties without the prior written consent of the RESPONDENT.

In addition, the transfer of the completed WeNR questionnaire from the RESPONDENT to INR will be operated via Useconnected. The purpose of using this tool is to allow the WeNR questionnaire to be sent to INR in a secure manner. These third party services are governed by the Useconnected privacy policy and the terms of use of their service, which the RESPONDENT is responsible for consulting.

5. Confidentiality and Security of Collected Data

INR shall implement all appropriate measures to limit the risks of loss, deterioration or misuse of the data contained in WeNR.

INR undertakes to respect and ensure the secrecy of the Collected Data by all persons likely to work on these data and to take all necessary precautions to preserve the security of the Collected Data and in particular to prevent them from being communicated to unauthorized third parties.

INR undertakes not to publish the WENR STUDY, containing consolidated Collected Data, until it has received a sufficiently large number of responses to ensure that there is no link between the Collected Data and the RESPONDENTS through averages that prevent any identification of the RESPONDENTS.

6. Data storage

Following its transfer to INR via the Useconnected service, the WeNR questionnaire file completed by the RESPONDENT will be hosted in France on the servers of Osinum and La Rochelle Université.

The Data collected will be kept for the time strictly necessary for the establishment of the RESPONDENT’s report and the realization of the WENR STUDY, on the one hand, and the optimisation of the WeNR tool as part of a thesis within La Rochelle Université, on the other hand, that is to say until 31 December 2025 at the latest.

After this date, the Respondent’s Collected Data will be anonymised so that the respondent can no longer be identified.

7. Rights on Personal Data

The RESPONDENT has a right to access, rectify and delete Personal Data. This request can be made by email to the following address Institut du Numérique Responsable, 23 boulevard Albert Einstein, 17000 La Rochelle or by email at contact@institutnr.org.


LEGAL TERMS
Copyright © 2023 INR - European network of Institutes for Sustainable IT