Personal data processing

The Directorate General for Enterprise (DGE) is committed to ensuring that the data it receives from the entreprises.gouv.fr portal and its sub-domains is collected and processed in compliance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Each form limits the collection of personal data to what is strictly necessary (data minimisation) and indicates:

• The reason why the data is being collected (what it will be used for)
• Whether the data is mandatory or optional for the purposes of processing your request

Secure protocols are used to process the personal data collected as part of the services provided by the entreprises.gouv.fr portal and its sub-domains. This data is used by the DGE to manage the requests it receives via its online applications (conference registrations, inquiry forms, etc.).

Purpose of data processing

What your data is used for

The DGE collects data for the purposes of managing its websites and handling online requests.

It is used for:

• Content preparation and publishing
• Online contact forms and calls for contributions (consultations)
• Technical administration of website services (third-party application maintenance, hosting, domain name registration, certification)
• Website security management (security equipment and logs)
• Production of statistics on audience figures and use of DGE online services

Legal basis

Article 6 (1)(e) of European Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) concerning data processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the DGE pursuant to amended Decree 2009-37 of 12 January 2009.

Who receives your data

Recipient categories

Depending on their respective needs, the following recipients may receive your data, in whole or in part:

• DGE staff assigned to content publishing and technical website administration, and their hierarchy
• DGE staff in charge of processing request forms
• Ministers’ private offices and private office staff for the purposes of processing requests sent to ministers
• Service provider staff
• Users of the websites administered by the DGE
• Staff in charge of supervising DGE IT systems security

Data transferred outside of the European Union

Posts or publications may be accessible outside of the European Union due to their presence on the internet.

How long your personal data is kept

• Event registration forms: one month after the event
• Questions submitted using the form on the Contact page: three years
• Other data: two years

Special case of indirect cost compensation claims

Businesses are required to create an account to apply for compensation for indirect costs. The personal data collected when the account is created is kept as long as the account is active for the sole purpose of processing claims. Any account inactive for 18 months and one day is deleted from the system.

Exercising your rights 

Under the provisions of the French Data Protection Act of 6 January 1978, you have the right to access, correct, amend and delete data about you. You may exercise this right by:

• Sending an email to the webmaster:

internaute.dge[ @ ]finances.gouv.fr

• Sending a letter to:

Direction Générale des Entreprises
Bureau de la Communication
Secrétariat Général
61 boulevard Vincent Auriol
75703 Paris Cedex 13

If you have any questions or wish to exercise your data protection and privacy rights with respect to personal data processed by the DGE, you may contact the DGE’s Data Protection Officer (DPO) by:

• Sending an email to the webmaster:

le-delegue-a-la-protection-des-donnees-personnelles[ @  ]finances.gouv.fr

• Sending a letter to:

Le délégué à la protection des données des ministères économique et financier
139, rue de Bercy
75572 Paris Cedex 12

The DGE’s Communication Bureau will be your contact for any requests to exercise your rights.

Filing a complaint with the French Data Protection Authority (CNIL)

If, after contacting us, you consider that your rights with respect to your data are not being respected, you may file a complaint with the CNIL.

About cookies

As a rule, cookies are exempt from consent for the provision of public services. However, you may accept or reject them in the cookies banner or from the panel on the bottom left-hand side of the screen.

Internal cookies required for the website to work properly

Cookie name	Purpose	Retention period
dge	Saves the user’s choice regarding cookies	6 months

Analytics cookies

Cookie name	Purpose	Retention period
_gat_gtag_UA_41292125_1	Web analytics (fast tracks the response rate)	1 minute
_gid	Web analytics (distinguishes between users )	24 hours
_ga	Web analytics (distinguishes between users )	24 months
__utmc	Web analytics (length of visit)	Session
__utma	Web analytics (distinguishes between users/sessions)	2 years
__utmb	Web analytics (identifies a new visit/session)	Session
__utmz	Web analytics (identifies how the user arrived at the website)	6 months

Third-party cookies to improve website interactivity

The DGE website uses third-party services when it:

• Includes share buttons for social media (Twitter, Facebook, LinkedIn)
• Embeds videos (YouTube, Dailymotion)

In order to function correctly, these services use cookies that you can either reject or accept:

• In the cookie banner when you visit the website for the first time
• From the cookie management panel at any time thereafter (on the bottom left-hand side of the DGE homepage)