1. Home
  2. Personal data protection policy

Personal data protection policy

When using any of the French National Radioactive Waste Management Agency (Andra)’s websites, Andra, acting as a data controller as defined in the regulations on personal data protection, may collect, use and manage your personal data (hereinafter collectively referred to as “processing”). 

This policy specifies the conditions for processing personal data carried out on Andra’s websites, as well as the rights of website users.
Andra is committed to respecting the privacy of the users of its websites. As such, Andra commits to ensuring that the processing of your data, carried out on Andra’s websites, complies with the applicable regulations on personal data protection and in particular with the provisions of the French Data Protection Act of 6 January 1978 as amended and the General Data Protection Regulation (GDPR) - Regulation (EU) 2016/679, hereinafter referred to as “regulations”.
In order to ensure that these rules are applied correctly, Andra has appointed a Data Protection Officer (DPD - Délégué à la protection des données) who is in charge of all issues relating to personal data protection at Andra. If you have any questions about the protection of your personal data, you can contact the DPD by email at the following address: dpd@andra.fr.
With regard more specifically to processing carried out by Andra as part of the management of subscriptions to its newsletter, we invite you to consult our specific policy (in French). 

Which categories of personal data may be processed by Andra?

Depending on the circumstances, Andra may process some of the personal data listed below:

  • Surname and first name
  • E-mail address
  • Postal address 

Andra also uses Google Analytics to produce statistics on the number of visitors to its website. Google Analytics is a web analytics tool by Google. It may use cookies to collect information and create reports on website usage statistics without individual users being personally identified by Google. Learn more about analytical cookies and confidentiality.

How is this data collected?

When you browse our websites, your personal data may be communicated to us by various means, in particular when you fill in a form (newsletter subscription, ordering publications, etc.), when you share a link to an article or section of Andra’s website, or when you contact Andra.

Why does Andra collect your personal data? (Purpose of processing)

The purpose is to enable you to browse Andra’s websites, to respond to your requests, to facilitate procedures with Andra and to enable you to access the various services offered on Andra’s websites (newsletter, etc.).
Andra processes your personal data with your consent. As such, you are free to revoke your consent at any time (see Section 5 of this policy). 

Who does Andra share your personal data with?

The data processed on Andra’s websites may be accessed by Andra staff in charge of processing data and authorised by Andra, by the service provider responsible for managing its database and by its storage operator for the purpose of sending publication orders. 
No data is transferred outside the European Union. 

How long is your personal data stored?

In order to achieve the purposes for which they are processed, Andra keeps your personal data only for the time strictly necessary, i.e. 30 days for data (surname, first name, postal and e-mail address) related to orders made on Andra’s websites.
These durations are defined according to the purposes of the processing carried out by Andra and take into account any applicable legal and regulatory provisions, as well as the recommendations of the French data protection authority (CNIL) that apply to the data and/or processing concerned.
At the end of the storage period or following a request that you have made, your personal data will be deleted from the active databases and some data may be stored in an archive for the purpose of proving a right, fulfilling a legal requirement or performing a contract.
 

What rights do you have over your personal data?

In accordance with applicable regulations, you can: 

(1)    access and obtain a copy of your personal data (Right of Access, Article 15 of the GDPR),
(2)    object to the processing of your data (Right to Object, Article 21 of the GDPR), 
(3)    have your data rectified (Right to Rectification, Article 16 of the GDPR), 
(4)    have your data erased (Right to Erasure or “Right to be Forgotten”, Article 17 of the GDPR),
(5)    exercise your right to restrict the processing of your data (Right to Restriction of Processing, Article 18 of the GDPR),
(6)    withdraw your consent at any time, it being understood that exercising this right will not affect the lawfulness of any processing carried out before the effective date of withdrawal.

These rights may be exercised by contacting Andra’s DPD directly in writing, addressed either: 

  • by e-mail to: dpd@andra.fr 
  • or by post to the following address:     

Délégué à la protection des données
Andra
1-7 rue Jean Monnet
92290 Châtenay-Malabry
FRANCE 

The request must be accompanied by any information or document enabling the person making the request to be identified accurately.

If you feel, after having contacted us, that your data protection rights are not being respected, you can send a complaint to the French data protection authority (CNIL - Commission Nationale de l’Informatique et des Libertés).

Information regarding cookies

When you visit Andra’s websites, cookies are placed on your computer, mobile phone or tablet. Their purpose is to measure visitor numbers and keep the website running smoothly. 

Interaction with social media

The social media buttons that appear on various pages of Andra’s websites allow you to share a link to a section or article on Andra’s website, thereby generating interactions with certain social networks, which may deposit cookies on your device via our website.

Andra does not participate in placing or reading these cookies and has no knowledge of the information collected through these cookies. 

We therefore invite you more generally to take note of the cookie policies implemented by the various social networks:

Changes

Andra reserves the right to modify this personal data protection policy and undertakes to inform you of any changes or additions on its website.