Data protection

Data collected

The public portal does not collect any personal data without visitors' knowledge. Three forms collect information that is provided voluntarily: newsletter subscription, feedback submitted in the community space, and requests for access to the workspace.

Purposes

The newsletter email address is used only to send the platform's publications. Feedback is used to improve the service and is published after review, without its author's contact details. Access requests are used to process the creation of institutional accounts.

Workspace data

Staff accounts include a name, an email address, an institution, a position and a territorial area of responsibility. Every action on the data is recorded in an audit log, with the author, the date and the connection address.

Retention period

Newsletter subscriptions are kept until the person unsubscribes. Rejected feedback is kept for as long as necessary to handle complaints. The audit log is kept for the lifetime of the platform, as it guarantees traceability.

Security

Exchanges are encrypted in transit. Passwords are stored in hashed, irreversible form. Credentials for external connectors are encrypted at rest.

Exercising your rights

Any request for access, rectification or deletion can be sent to the secretariat by email.

Mobile application

The PNISAN application, installed from Google Play or from the browser, presents the same content as the portal. Used without an account, it collects no personal data and contains no advertising and no advertising analytics. To work without a network, it keeps the pages and figures already viewed on the device.

Field data entry

Staff with an account can enter statistical data from the application, including without a network. Each entry carries the time of entry and an anonymous device identifier drawn at random. The device location is attached to an entry only if the staff member taps "Attach my location" and then allows it: it is used only to locate the collection point. Pending entries stay on the device until they are sent, then are removed from it. This data is neither sold nor shared for commercial or advertising purposes.

Closing an account

Staff can ask the secretariat to close their account, by email or from the Contact page. A closed account can no longer sign in. Transmitted statistical data and the audit log are kept, as they guarantee the traceability of public figures.