JORF n ° 0048 February 26, 2008 text no. 32 order of February 6, 2008 on the establishment of treatment automated of personal data relating to the access management, schedules and catering for staff and visitors to the Délégation Générale for armament NOR: DEFD0804029A ELI: https://www.legifrance.gouv.fr/eli/arrete/2008/2/6/DEFD0804029A/jo/texte the Minister of defence , Having regard to Act No. 78-17 of 6 January 1978 amended relative to computers, files and freedoms;
Pursuant to Decree No. 2005 - 850 of 27 July 2005 on signature of the members of the Government delegation.
Mindful of Decree No. 2005-1309 of 20 October 2005, amended by Decree No. 2007-451 of 25 March 2007, taken for the purposes of Act No. 78-17 of 6 January 1978 relative to information technology, files and freedoms;
Having regard to the receipt of the National Commission of data processing and freedoms dated January 9, 2008, no. 1268631, stop: Article 1 more on this article...
It is created at the Ministry of defence, the General delegation for armaments, automated processing of personal data referred to as "access management, schedules and restoration" developed by the technical centre information systems and whose purposes are: ― the follow-up of schedules;
― the control and management of access;
― the recovery management of personnel and visitors in institutions of the General delegation for armaments.
Article 2 more on this article...
The categories of personal data recorded are those for: i. ― for working time tracking: ― to the identity (name, first name, sex, date and place of birth, photography, business phone number, serial number);
― to family status (marital status, number of children and year of birth);
― in professional life (body employer, service or assignment, status, category, level, grade, level, administrative position, body, date of entry in the administration, date of entry to the Ministry of defence, badge number, schedule plan, various leave);
― in the work activity (daily tracking of working hours, time of presence, number of the code activity, characteristic of activities, time spent per activity, overtime, forecasts of actual overtime, absences and reasons, forecasts of absences, individual periodic assessments, management of compensation depending on the type and working time, credit card, date and week number situation).
The duration of retention of personal data concerning identity, family and professional life is ten-year maximum, with the exception of those relating to the activity of work, which are held a year.
II. ― for the control and management of access: 1. staff of the Délégation Générale pour l'Armement: ― to the identity (name, maiden name, first name, date and place of birth, nationality, address, photograph);
― to employment status (service or assignment, rank or function, level, business address, business phone number, enabling [type and date], presence/absence on site).
2 personal of companies: ― to the identity (name, maiden name, first name, date and place of birth, nationality, address, photograph);
― in professional life (rank or function, index, name of company, address professional, business phone number, name of regular contact, contract [number, validity or end date], empowerment, authorized slots).
3 visitors: ― to the identity (name, maiden name, forename, civility, nationality, date and place of birth, status [optional], [optional] home address);
― in professional life ([optional] function, organization or company belonging, SIRET number, professional address, dates of beginning and end of visit, time of arrival and departure);
― to the mobility of persons (the badge or number of passes, creation date and period of validity, color and/or authorized traffic areas, visited person [name, first name, business phone number, parent organization, telephone number of the secretariat, name and telephone number of another possible contact], incidents (date, loss, theft or damage to the badge or pass);)
― in the identification of vehicles (number badge or pass, private or corporate, brand and type, registration number, holder of the authorization, the authorization number access, location of yardage allowed, date of establishment);
― to the caution of the visitors (name, civility, nationality, date and place of birth, organization or society of belonging, function, to keep).
The personal data thus recorded are kept one year after the expiry date of the authorization, with the exception of warning that is maintained until its emergence, data relating to the mobility of persons who are destroyed as soon as recovery and incidents that are kept 48 hours.
III. ― for the management of the restoration: ― to the identity (name, first names, photography);
― in professional life (body, employer, rank, service or assignment, group, level, serial number, phone number, badge number, compensation index);
― to restore (tariff with or without subsidy, passenger defence or non-defence, dates and times of transition to caisses, summary of consumption, account balance).
The registered personal data are kept one year after the departure of the person concerned as regards to identity and career data and three months for those concerning the grant and consumption summary. Variable information (date and time, the customer account balance) are an instant update with each pass to the Fund. However, in case of dispute, the information may be retained until the settlement of the latter.
Article 3 read more on this article...
The recipients of the personal data recorded are, according to their respective functions and the need to know: i. - for working time tracking: ― the hierarchical authorities;
― Administration and accounting;
― services managing the remuneration of staff.
II. ― for the control and management of access: ― security services;
― the commandant of the institutions concerned;
― the gendarmerie brigade of armaments.
III. ― for the management of the restoration: ― the persons managing the catering service;
― restore service customers.
Article 4 more on this article...
The right of opposition referred to in article 38 of the above-mentioned law of January 6, 1978 cannot be invoked in the context of this treatment.
Article 5 read more on this article...
The rights of access and rectification under articles 39 et seq. of the above-mentioned law of January 6, 1978 are: ― for the monitoring of working time to the service of the human resources of institutions that have implemented treatment;
― for the control and management of the access to the officer of security of the institutions having put implementation of the treatment;
― for the management of the restoration with the catering service of the institutions that have implemented treatment.
Article 6 read more on this article...
The Deputy Director of management of the quality and progress information systems is responsible for the execution of this order, which will be published in the Official Journal of the French Republic.
Done at Paris, February 6, 2008.
For the Minister and by delegation: the Deputy Director of the information systems Directorate of quality and progress in the General delegation for armament, Y. Deepak