Key Benefits:
Minister of Defence,
Vu la Act No. 78-17 of 6 January 1978 amended on computer science, files and freedoms, including article 23;
Vu le Decree No. 2005-850 of 27 July 2005 bearing delegation of signature of members of the Government;
Vu le Decree No. 2007-663 of 2 May 2007 taken for application Act No. 2004-575 of 21 June 2004 for confidence in the digital economy and on the means and services of cryptology;
Having regard to the receipt No. 1307811 of the National Commission on Informatics and Freedoms of 18 August 2008,
Stop it!
It is created in the Ministry of Defence, the General Delegation for Arming, an automated processing of personal data called the "Management of Authorizations and Certifications" implemented by the Quality and Progress Directorate and whose purposes are:
- administrative management of access rights to certain information systems related to certifications and recognitions (of engagement, responsibility...) and/or training;
- administrative management of the exercise of the rights of persons, including authorizations or oppositions for the collection and dissemination of photography;
- administrative management of the endowment of products, software, hardware (removable supports, etc.).
The personal data categories recorded are those relating to:
- identity (name, first name, professional address, professional telephone number, registration number)
- professional life (service or assignment, location);
- training (object and date of awareness or training);
― the use of the media and means of communication (authorisation or certification of persons [object of the charter, agreement or authorization, date of signature, agreement/refus, observations, restrictions in the authorization granted...]), media endowment and means of communication (date of delivery of the computer tool, identification of the computer tool [type, references, characteristics], date of restitution of the computer tool).
The personal data thus recorded shall be retained until the person leaves, with the exception of information relating to media holdings and means of communication, which shall be retained for up to 1 year after restitution.
The recipients of recorded personal data are, depending on their respective responsibilities and the need to know:
– Manager services;
- IT service;
- security officers of information systems;
- hierarchical authorities.
The right of opposition provided forArticle 38 of the Act of 6 January 1978 referred to above cannot be invoked as part of this treatment.
The rights of access and rectification provided for in sections 39 et seq. of the Act of 6 January 1978 referred to above shall be exercised with the managerial service of the institutions implementing the treatment.
The Deputy Director of Quality and Progress Management Information Systems is responsible for the execution of this Order, which will be published in the Official Journal of the French Republic.
Done in Paris, 9 October 2008.
For the Minister and by delegation:
Deputy Director of Information Systems
to the General Delegation for Arms,
F. Bénatre
