Privacy and Cookie Policy
Personal data
ERAFP is committed to ensuring that its processing of personal data complies, in particular, with Law No. 78-17 of 6 January 1978 (as amended) on data processing, data files and individual liberties, and with Regulation (EU) 2016/679 of 27 April 2016 (GDPR).
The management of the rafp.fr website constitutes a personal data processing operation carried out by the Établissement de retraite additionnelle de la fonction publique (ERAFP).
Purpose of the processing
The processing enables:
- the publication of content;
- the provision of contact forms as well as the ability to respond to published job offers;
- the provision of online services, such as a scheme points calculator and a benefits simulator;
- technical site administration in conjunction with ERAFP service providers (site operation and hosting, domain name registrar);
- management of website security;
- the provision of useful links to other public sector platforms, including the "Ma retraite publique" website administered by Caisse des Dépôts;
- the assessment of information needs and the monitoring of usage regarding the online services offered by ERAFP.
Legal basis
The processing is part of a task carried out in the public interest by the ERAFP and does not involve automated decision-making or profiling.
Personal data processed
- Identity, job functions, contact details;
- Professional background, organizational chart;
- Interviews, videos;
- Photographs, CVs (where applicable);
- Other personal data provided by users via contact forms;
- Data relating to website browsing (timestamp, user IP address, technical data regarding the equipment and browser used, cookies) and to browsing on digital platforms via media (trackers);
- Data relating to the management of user contacts (timestamp and subject of the request, follow-up, actions taken, statistics);
- Data relating to the management of publications (subject, deliverable, follow-up, statistics);
- Data relating to the management of technical services (timestamp and subject of requests, follow-up, actions taken, statistics);
- Audience statistics for websites (where applicable) and usage statistics for online services offered by ERAFP.
Data collected during browsing—specifically cookies that are not essential for the site's operation—are provided on an optional basis.
Personal data collected for other purposes are mandatory. In contact forms, mandatory fields are marked with an asterisk.
Affected persons
The processing concerns ERAFP communications department staff responsible for publishing content and the technical administration of the site. Also affected are ERAFP personnel and third parties identified in publications, site users, and the staff of relevant service providers.
Data recipients
Each online service limits the collection of personal data to what is strictly necessary, and the personal data collected are processed with the utmost confidentiality.
Depending on their respective areas of activity, the recipients of all or part of the personal data include: ERAFP communications staff and their supervisors; ERAFP personnel responsible for processing requests received via contact forms; Caisse des Dépôts staff acting as the scheme’s administrative manager; website users; and personnel from relevant service providers (specifically the website host and the provider responsible for conducting penetration tests on the site).
Security
Data is processed using secure protocols, and the confidentiality of transmitted information is guaranteed. Site users have control over the activation of cookies.
Please note that the website is hosted in France. However, certain content may be accessible outside the European Union due to its availability on the Internet.
Data retention period
- Data relating to publications (orders, tracking, editorial content) are retained for 5 years from the date they are published online;
- Data relating to interactions with service providers are retained for 5 years following the conclusion of the relevant contract;
- Data collected via contact forms are retained for a maximum period of five years from the date of receipt, after which they are automatically destroyed;
- Log data are retained for 6 months;
- Retention periods for data related to cookie usage are detailed in the "About Cookies" section below.
For any information regarding the processing of personal data managed by ERAFP, or to exercise your data protection rights concerning your data (specifically the rights of access, rectification, erasure, objection, and restriction of processing), you may contact its Data Protection Officer (DPO) using the methods described below.
Exercising your rights to information and freedom
- By email: delegueprotectiondonnees@erafp.fr
- or by mail at the following address:
ERAFP
To the attention of the Data Protection Officer
12 rue Portalis – CS 40007
75 381 Paris Cedex 08.
In addition, it is specified that any request for the exercise of data-processing rights and Freedoms can relate only to the data concerning you and that it will be advisable to specify your name, first name, your address of e-mail or your telephone number and to join a proof of identity to it, except if the elements communicated within the framework of your request make it possible to identify you in a certain way.
Finally, if, after contacting us, you believe that your data protection rights are not being respected, you have the right to lodge a complaint with the CNIL:
- via the online complaint service: https://www.cnil.fr/fr/plaintes
- by postal mail to the following address:
CNIL
3 place de Fontenoy – TSA 80715
75334 Paris cedex 07