General Data Protection Regulation

Purpose of processing:

The STAC located in Bonneuil-sur-Marne (94380) - 31 Avenue du Maréchal Leclerc has set up an application accessible on the Internet allowing to:
  • consult an aircraft database (Ficav),
  • carry out pavement design calculations (DCA),
  • perform airfield condition index (French PCI) calculations.

The legal basis of this processing is the legitimate interest (see Chapter II article 6.1.f REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL).

The data will be used to:
  • identify the user and the company connecting to the application,
  • validate your account during registration,
  • compile statistics on the use of the various functionalities offered in the application,
  • contact the user by automated messaging for password changes or expiry of account validity.


Data recorded on visitors:

  • Identity: surname, first name, e-mail address
  • Professional life: company of belonging.
  • Data entered into the application: aircraft created and personalized by the user, airfield condition index (French PCI) data entered on aerodromes.
Note: the password chosen by the user during registration is not kept in plain text in the application. Therefore, it cannot be found in the event of loss, including by the technical administrators of the application. A password reset functionality is provided for this purpose in the application (by sending a message to their e-mail address).

All the actions performed on the application are logged for 2 years so that they can be analyzed in the event of malicious or fraudulent use of the application.

Recipients:

Three profiles are defined in the application:
  • the Ficav Manager profile cannot access users' personal data,
  • the IS Manager profile can access the identities and data of users who have entered information in the IS section,
  • the Administrator profile can access all the users of the application and their data.
The data entered will only be accessed following a request by a user for a malfunction encountered, in order to correct the anomaly encountered (examples: issue accessing the application, display problem, computational problem).

The duration of the conversation:

The visitor's identity and information are kept for 2 years from the dare of their last connection. After this period, his identity information, his company and all the information he has entered in the application will be permanently deleted. Information will be sent to his email address, 2 months before this deadline, suggesting that he logs in to the application to extend the life of his account, without losing the information entered in the application.

Rights of people:

You can access your data or request their erasure. You also have a right of opposition, rectification and limitation of the processing of your data (see cnil.fr for more information on your rights).

To exercise these rights or for any questions about the processing of your data in this system, you can contact the data processing officer. If you believe, after contacting us, that your IT rights and freedoms are not respected or that the access control system does not comply with data protection rules, you can send a complaint to the CNIL.

The site is declared to the CNIL under the number 2013429.