[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTCI5Eddo8IUJGpfKkZQD8nFB5A34DHIuSADpkQBnx2U":3},{"assets":4,"aiSystems":5,"attachments":6,"tags":7,"dataRetentionRules":21,"creatorUser":330,"creatorUserId":26,"updatedBy":331,"updatedById":26,"publishedBy":28,"publishedById":28,"areaOwnerId":28,"owners":332,"customFields":333,"area":334,"entity":338,"mergedFrom":28,"workflowStep":339,"accountables":345,"responsibles":346,"informedOwners":347,"securityMeasures":348,"personCategories":567,"id":36,"source":82,"label":37,"state":344,"versionDescription":28,"processingType":43,"parentId":28,"areaId":42,"mergeType":28,"readonly":29,"editable":343,"workflowStepId":340,"dateDeployment":28,"dateCreation":41,"dateArchived":28,"datePublication":28,"archived":29,"dateUpdate":40,"reviewDate":28,"nextReviewDate":28,"ref":28,"processingState":28,"description":38,"descriptionHtml":585,"subjectRightProcessDescription":28,"rightOfInformation":586,"rightOfAccess":587,"rightOfRectification":587,"rightOfErasure":587,"rightOfRestriction":587,"rightOfOpposition":586,"rightOfDataPortability":587,"advanceDirectives":587,"advanceDirectivesDescription":28,"rightOfInformationDescription":588,"rightOfAccessDescription":28,"rightOfRectificationDescription":28,"rightOfErasureDescription":28,"rightOfRestrictionDescription":28,"rightOfOppositionDescription":589,"rightOfDataPortabilityDescription":28,"stakeHolders":590,"assessmentScoring":29,"automaticDecision":29,"systematicMonitoring":29,"specialCategoryData":29,"largeScaleCollection":28,"crossReferencing":29,"vulnerablePeople":29,"isDPIARequired":29,"dpiaDate":28,"dpiaExemption":29,"dpiaExemptionJustification":28,"innovativeUse":29,"exclusionBenefitRightContract":29,"recipients":591,"dataControllers":655,"purposes":656,"progression":678,"quality":679,"sensitivity":680,"visible":343,"workspaceId":39,"nbReferences":31,"referenceId":28},[],[],[],[8,13,17],{"id":9,"label":10,"type":11,"color":12},"99e6f156-5bd7-4bc1-94c7-7f416665cf20","Organisme : Privé","DataProcessing","#64748B",{"id":14,"label":15,"type":11,"color":16},"6bc7b13d-ef28-4410-ee2f-08df38044b79","Secteur : Hôtellerie et tourisme","#0E7490",{"id":18,"label":19,"type":11,"color":20},"039e8266-e129-47c9-9989-f1878cbf9cf7","Fonction : Commercial et marketing","#B45309",[22,112,167,217,278],{"customFields":23,"tags":24,"creator":25,"readonly":29,"purposes":32,"dataProcessings":34,"dataFields":44,"asset":28,"subjectCategories":101,"id":102,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":103,"description":28,"dateCreation":104,"dateUpdate":105,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":106,"baseActiveLegalBasis":107,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":108,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":109,"destructionLegalBasis":28,"dataSetSource":110,"sourceDescription":111,"assetId":28,"source":82},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},1602,"bc4946f8-1de1-4b70-bb67-62a0ce536160",null,false,"#4DE034",0,[33],"33e1e7be-3bdd-4215-8b2e-1f1aa42f039b",[35],{"id":36,"label":37,"ref":28,"description":38,"workspaceId":39,"archived":29,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},"0c369183-6323-47f2-36c0-08df38010b74","Réservation hôtelière et accueil en hébergement touristique","Ce modèle de traitement est relatif à la réservation, à l'accueil et au séjour d'un client dans un hôtel ou un hébergement touristique, y compris le paiement, la fiche de police des clients étrangers et la facturation.",68,"2026-11-02T23:02:22.2979251","2026-11-02T23:02:21.2395395",354,"Default",[45,55,62,68,74,83,89,95],{"id":46,"customFields":47,"ref":28,"archivingPolicy":28,"required":29,"label":48,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":50,"dataType":28,"dateCreation":51,"dateUpdate":52,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},"b4c279e1-ca69-4958-3ef7-08d8d8ff078f",{},"Nom et prénom","Current","CivilStatus","2021-02-25T08:47:35.132248","2023-07-27T13:14:45.0770506",83451,"Intern",{"id":56,"customFields":57,"ref":28,"archivingPolicy":28,"required":29,"label":58,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":59,"dataType":28,"dateCreation":60,"dateUpdate":61,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},"36d1494c-ff89-45e3-862d-31d39bb87fe9",{},"Adresse électronique","PersonalLife","2021-09-22T14:53:24.9093394","2023-09-25T09:25:03.6711088",{"id":63,"customFields":64,"ref":28,"archivingPolicy":28,"required":29,"label":65,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":50,"dataType":28,"dateCreation":66,"dateUpdate":67,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},"44e9f3a5-5a51-4e26-bb2e-2719ec3af7bb",{},"numéro de téléphone","2021-01-18T22:33:53.2486652","2023-09-25T09:23:51.1379936",{"id":69,"customFields":70,"ref":28,"archivingPolicy":28,"required":29,"label":71,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":59,"dataType":28,"dateCreation":72,"dateUpdate":73,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},"b05d36ab-7b23-42c5-a659-b806b3b26050",{},"Adresse postale","2021-09-27T22:25:11.201927","2023-09-25T09:25:21.3319653",{"id":75,"customFields":76,"ref":28,"archivingPolicy":28,"required":29,"label":77,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":78,"dataType":28,"dateCreation":79,"dateUpdate":28,"creator":80,"workflowStepId":81,"workflowStep":28,"source":82},"2dcf6f65-417e-43a6-022c-08df38010ba5",{},"Dates d'arrivée et de départ","Other","2026-11-02T23:02:12.386621",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},83450,"Api",{"id":84,"customFields":85,"ref":28,"archivingPolicy":28,"required":29,"label":86,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":78,"dataType":28,"dateCreation":87,"dateUpdate":28,"creator":88,"workflowStepId":81,"workflowStep":28,"source":82},"7f4488ef-f077-4a06-022d-08df38010ba5",{},"Type de chambre et nombre de personnes","2026-11-02T23:02:12.622732",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":90,"customFields":91,"ref":28,"archivingPolicy":28,"required":29,"label":92,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":59,"dataType":28,"dateCreation":93,"dateUpdate":28,"creator":94,"workflowStepId":81,"workflowStep":28,"source":82},"82126d44-4746-482d-022e-08df38010ba5",{},"Demandes particulières (hors données de santé)","2026-11-02T23:02:12.8675054",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":96,"customFields":97,"ref":28,"archivingPolicy":28,"required":29,"label":98,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":78,"dataType":28,"dateCreation":99,"dateUpdate":28,"creator":100,"workflowStepId":81,"workflowStep":28,"source":82},"87994139-b358-430a-022f-08df38010ba5",{},"Numéro de réservation et canal de réservation","2026-11-02T23:02:13.0958765",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"7d855ae7-59e6-4b0b-def2-08df38010b98","Réservation et séjour","2026-11-02T23:02:17.4785639","2026-11-02T23:02:18.0154221","Durée de la réservation et du séjour.","Référentiel CNIL gestion des activités commerciales : données du contrat conservées pendant la relation contractuelle, puis archivage intermédiaire dans la limite de la prescription.","Conservation en archivage intermédiaire pour la durée utile en cas de litige, dans la limite du délai de prescription.","À l'issue de la durée de conservation, les données sont supprimées de manière sécurisée ou anonymisées de façon irréversible.","Direct","Durée recommandée par le référentiel de la CNIL (durée de la relation contractuelle, puis archivage limité à la prescription), sans chiffre imposé par un texte : fixée par le responsable de traitement.",{"customFields":113,"tags":114,"creator":115,"readonly":29,"purposes":116,"dataProcessings":118,"dataFields":120,"asset":28,"subjectCategories":158,"id":159,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":160,"description":28,"dateCreation":161,"dateUpdate":162,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":163,"baseActiveLegalBasis":164,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":165,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":109,"destructionLegalBasis":28,"dataSetSource":110,"sourceDescription":166,"assetId":28,"source":82},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[117],"6538c1de-4a92-41c1-b914-b0097f5f7304",[119],{"id":36,"label":37,"ref":28,"description":38,"workspaceId":39,"archived":29,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},[121,128,134,140,146,152],{"id":122,"customFields":123,"ref":28,"archivingPolicy":28,"required":29,"label":124,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":125,"dataType":28,"dateCreation":126,"dateUpdate":28,"creator":127,"workflowStepId":81,"workflowStep":28,"source":82},"c4c6c341-ab3c-4e54-0230-08df38010ba5",{},"Numéro de carte bancaire (garantie ou paiement)","EconomicFinancialData","2026-11-02T23:02:13.3472824",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":129,"customFields":130,"ref":28,"archivingPolicy":28,"required":29,"label":131,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":125,"dataType":28,"dateCreation":132,"dateUpdate":28,"creator":133,"workflowStepId":81,"workflowStep":28,"source":82},"c035765d-81e2-4a7d-0231-08df38010ba5",{},"Date de validité de la carte","2026-11-02T23:02:13.8028894",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":135,"customFields":136,"ref":28,"archivingPolicy":28,"required":29,"label":137,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":125,"dataType":28,"dateCreation":138,"dateUpdate":28,"creator":139,"workflowStepId":81,"workflowStep":28,"source":82},"a1d61d07-ee1c-4ada-0232-08df38010ba5",{},"Montant payé et acompte","2026-11-02T23:02:14.0488654",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":141,"customFields":142,"ref":28,"archivingPolicy":28,"required":29,"label":143,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":125,"dataType":28,"dateCreation":144,"dateUpdate":28,"creator":145,"workflowStepId":81,"workflowStep":28,"source":82},"abf2f021-c718-428a-0233-08df38010ba5",{},"Moyen de paiement","2026-11-02T23:02:14.3040884",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":147,"customFields":148,"ref":28,"archivingPolicy":28,"required":29,"label":149,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":125,"dataType":28,"dateCreation":150,"dateUpdate":28,"creator":151,"workflowStepId":81,"workflowStep":28,"source":82},"9e38d561-6137-4d08-0234-08df38010ba5",{},"Cryptogramme visuel (supprimé après le paiement)","2026-11-02T23:02:14.542457",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":153,"customFields":154,"ref":28,"archivingPolicy":28,"required":29,"label":155,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":78,"dataType":28,"dateCreation":156,"dateUpdate":28,"creator":157,"workflowStepId":81,"workflowStep":28,"source":82},"d4210251-540e-4b6b-0235-08df38010ba5",{},"Date du paiement","2026-11-02T23:02:14.8097769",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"a2d91424-0d18-4474-def3-08df38010b98","Paiement","2026-11-02T23:02:18.266252","2026-11-02T23:02:18.7825602","Le temps de la transaction ; le cryptogramme est supprimé dès le règlement finalisé.","Référentiel CNIL gestion des activités commerciales, section 7 : suppression du cryptogramme visuel dès que le règlement est finalisé.","","Règle de la CNIL pour le cryptogramme visuel (suppression dès le règlement finalisé) ; pour les autres données de paiement, durée indicative, non imposée par un texte : fixée par le responsable de traitement selon la finalité (art. 5.1.e du RGPD).",{"customFields":168,"tags":169,"creator":170,"readonly":29,"purposes":171,"dataProcessings":172,"dataFields":174,"asset":28,"subjectCategories":207,"id":208,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":209,"description":28,"dateCreation":210,"dateUpdate":211,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":212,"baseActiveLegalBasis":213,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":214,"intermediateArchivingRetentionDuration":215,"intermediateArchivingMinMax":28,"destructionDescription":109,"destructionLegalBasis":28,"dataSetSource":110,"sourceDescription":216,"assetId":28,"source":82},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[117],[173],{"id":36,"label":37,"ref":28,"description":38,"workspaceId":39,"archived":29,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},[175,181,186,192,198,201],{"id":176,"customFields":177,"ref":28,"archivingPolicy":28,"required":29,"label":178,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":50,"dataType":28,"dateCreation":179,"dateUpdate":28,"creator":180,"workflowStepId":81,"workflowStep":28,"source":82},"2c922c1f-8b2c-48b6-0236-08df38010ba5",{},"Nom et prénom ou raison sociale","2026-11-02T23:02:15.1190902",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":182,"customFields":183,"ref":28,"archivingPolicy":28,"required":29,"label":184,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":59,"dataType":28,"dateCreation":185,"dateUpdate":28,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},"c093004a-3d8e-4a86-8570-f80f425a62d2",{},"Adresse de facturation","2021-12-29T11:41:47.5419124",{"id":187,"customFields":188,"ref":28,"archivingPolicy":28,"required":29,"label":189,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":78,"dataType":28,"dateCreation":190,"dateUpdate":28,"creator":191,"workflowStepId":81,"workflowStep":28,"source":82},"d1a8ad89-0447-4ed0-0237-08df38010ba5",{},"Numéro et date de facture","2026-11-02T23:02:15.32679",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":193,"customFields":194,"ref":28,"archivingPolicy":28,"required":29,"label":195,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":125,"dataType":28,"dateCreation":196,"dateUpdate":28,"creator":197,"workflowStepId":81,"workflowStep":28,"source":82},"dec4775a-8867-4173-0238-08df38010ba5",{},"Montant du séjour et taxe de séjour","2026-11-02T23:02:15.4888945",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":141,"customFields":199,"ref":28,"archivingPolicy":28,"required":29,"label":143,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":125,"dataType":28,"dateCreation":144,"dateUpdate":28,"creator":200,"workflowStepId":81,"workflowStep":28,"source":82},{},{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":202,"customFields":203,"ref":28,"archivingPolicy":28,"required":29,"label":204,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":78,"dataType":28,"dateCreation":205,"dateUpdate":28,"creator":206,"workflowStepId":81,"workflowStep":28,"source":82},"21b14476-78e5-4682-0239-08df38010ba5",{},"Numéro de réservation","2026-11-02T23:02:15.7049516",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"28b8846f-5526-4965-def4-08df38010b98","Facturation et comptabilité","2026-11-02T23:02:19.0250368","2026-11-02T23:02:19.482584","Exercice comptable en cours.","Article L123-22 du Code de commerce : conservation des documents comptables et pièces justificatives 10 ans.","10 ans à compter de la clôture de l'exercice.",5256000,"Obligation de conserver les livres, registres et pièces justificatives comptables 10 ans à compter de la clôture de l'exercice (article L123-22 du Code de commerce, tel que rappelé par service-public.gouv.fr).",{"customFields":218,"tags":219,"creator":220,"readonly":29,"purposes":221,"dataProcessings":223,"dataFields":225,"asset":28,"subjectCategories":269,"id":270,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":271,"description":28,"dateCreation":272,"dateUpdate":273,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":274,"baseActiveLegalBasis":275,"baseActiveRetentionDuration":276,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":165,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":109,"destructionLegalBasis":28,"dataSetSource":110,"sourceDescription":277,"assetId":28,"source":82},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[222],"5f287ae6-44c3-4f05-84c9-4c6f3cf04a28",[224],{"id":36,"label":37,"ref":28,"description":38,"workspaceId":39,"archived":29,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},[226,232,238,244,250,256,258,264],{"id":227,"customFields":228,"ref":28,"archivingPolicy":28,"required":29,"label":229,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":50,"dataType":28,"dateCreation":230,"dateUpdate":28,"creator":231,"workflowStepId":81,"workflowStep":28,"source":82},"2da3609d-f86c-40a4-023a-08df38010ba5",{},"Nom et prénoms","2026-11-02T23:02:15.9718423",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":233,"customFields":234,"ref":28,"archivingPolicy":28,"required":29,"label":235,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":50,"dataType":28,"dateCreation":236,"dateUpdate":237,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},"c7b132f0-2138-4c6d-abe4-05f9b5ef332e",{},"Date et lieu de naissance","2021-05-10T14:16:45.9770431","2021-10-04T20:23:58.7667554",{"id":239,"customFields":240,"ref":28,"archivingPolicy":28,"required":29,"label":241,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":50,"dataType":28,"dateCreation":242,"dateUpdate":243,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},"fdfdac32-153e-43f9-bec3-2d1a14a1fa65",{},"Nationalité","2023-06-21T08:12:27.0588799","2023-09-11T07:57:39.2044138",{"id":245,"customFields":246,"ref":28,"archivingPolicy":28,"required":29,"label":247,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":50,"dataType":28,"dateCreation":248,"dateUpdate":249,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},"c0d3a2c8-c37f-4445-b411-101db996eb25",{},"Domicile habituel","2021-12-29T11:38:32.7596118","2026-11-02T20:29:21.5332987",{"id":251,"customFields":252,"ref":28,"archivingPolicy":28,"required":29,"label":253,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":50,"dataType":28,"dateCreation":254,"dateUpdate":255,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},"0dd75d95-d147-4e81-ac1a-a695516ef441",{},"Numéro de téléphone mobile","2021-12-29T11:43:03.385321","2026-11-02T20:25:33.8078893",{"id":56,"customFields":257,"ref":28,"archivingPolicy":28,"required":29,"label":58,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":59,"dataType":28,"dateCreation":60,"dateUpdate":61,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},{},{"id":259,"customFields":260,"ref":28,"archivingPolicy":28,"required":29,"label":261,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":78,"dataType":28,"dateCreation":262,"dateUpdate":28,"creator":263,"workflowStepId":81,"workflowStep":28,"source":82},"d736f6fd-9a3b-4f55-023b-08df38010ba5",{},"Dates d'arrivée et de départ prévue","2026-11-02T23:02:16.185139",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":265,"customFields":266,"ref":28,"archivingPolicy":28,"required":29,"label":267,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":50,"dataType":28,"dateCreation":268,"dateUpdate":28,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},"d3ada35f-3795-4c4e-bfb3-f5aa442e156f",{},"Signature","2021-12-15T14:07:10.7575313",[],"d069eaa0-0153-492a-def5-08df38010b98","Fiche individuelle de police","2026-11-02T23:02:19.681387","2026-11-02T23:02:20.2019174","6 mois à compter de l'arrivée du client, puis suppression.","Article R814-3 du CESEDA : fiches conservées 6 mois et remises sur demande aux services de police et de gendarmerie.",262800,"Durée imposée : 6 mois, article R814-3 du CESEDA (collecte prévue aux articles R814-1 et R814-2), tel que relevé sur Légifrance.",{"customFields":279,"tags":280,"creator":281,"readonly":29,"purposes":282,"dataProcessings":284,"dataFields":286,"asset":28,"subjectCategories":321,"id":322,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":323,"description":28,"dateCreation":324,"dateUpdate":325,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":326,"baseActiveLegalBasis":327,"baseActiveRetentionDuration":328,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":165,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":109,"destructionLegalBasis":28,"dataSetSource":110,"sourceDescription":329,"assetId":28,"source":82},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[283],"7133dcea-8bdb-456c-943a-d83aa467fa76",[285],{"id":36,"label":37,"ref":28,"description":38,"workspaceId":39,"archived":29,"dateUpdate":40,"dateCreation":41,"areaId":42,"processingType":43},[287,289,291,297,303,309,315],{"id":46,"customFields":288,"ref":28,"archivingPolicy":28,"required":29,"label":48,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":50,"dataType":28,"dateCreation":51,"dateUpdate":52,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},{},{"id":56,"customFields":290,"ref":28,"archivingPolicy":28,"required":29,"label":58,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":59,"dataType":28,"dateCreation":60,"dateUpdate":61,"creator":28,"workflowStepId":53,"workflowStep":28,"source":54},{},{"id":292,"customFields":293,"ref":28,"archivingPolicy":28,"required":29,"label":294,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":59,"dataType":28,"dateCreation":295,"dateUpdate":28,"creator":296,"workflowStepId":81,"workflowStep":28,"source":82},"3d914dc9-85ec-4529-023c-08df38010ba5",{},"Historique des séjours","2026-11-02T23:02:16.3712449",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":298,"customFields":299,"ref":28,"archivingPolicy":28,"required":29,"label":300,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":59,"dataType":28,"dateCreation":301,"dateUpdate":28,"creator":302,"workflowStepId":81,"workflowStep":28,"source":82},"e020b108-6af0-431a-023d-08df38010ba5",{},"Préférences de séjour","2026-11-02T23:02:16.5874507",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":304,"customFields":305,"ref":28,"archivingPolicy":28,"required":29,"label":306,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":59,"dataType":28,"dateCreation":307,"dateUpdate":28,"creator":308,"workflowStepId":81,"workflowStep":28,"source":82},"6a518ab3-c97c-4c45-023e-08df38010ba5",{},"Avis et réponses aux enquêtes de satisfaction","2026-11-02T23:02:16.8396601",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":310,"customFields":311,"ref":28,"archivingPolicy":28,"required":29,"label":312,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":78,"dataType":28,"dateCreation":313,"dateUpdate":28,"creator":314,"workflowStepId":81,"workflowStep":28,"source":82},"9a61f054-c4ea-4212-023f-08df38010ba5",{},"Numéro de carte de fidélité","2026-11-02T23:02:17.081979",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":316,"customFields":317,"ref":28,"archivingPolicy":28,"required":29,"label":318,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":49,"personalDataCategory":78,"dataType":28,"dateCreation":319,"dateUpdate":28,"creator":320,"workflowStepId":81,"workflowStep":28,"source":82},"6e3cbc05-5980-4946-0240-08df38010ba5",{},"Points de fidélité","2026-11-02T23:02:17.288401",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"cbbe8778-5a84-4e39-def6-08df38010b98","Relation client et fidélisation","2026-11-02T23:02:20.4562782","2026-11-02T23:02:20.9760446","Pendant la relation commerciale, puis 3 ans à compter du dernier séjour ou du dernier contact du client.","Référentiel CNIL gestion des activités commerciales, section 7 : données de prospection conservées 3 ans après la fin de la relation commerciale.",1576800,"Durée recommandée par la CNIL (3 ans après la fin de la relation commerciale), non imposée par un texte : fixée par le responsable de traitement.",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],{},{"dpo":28,"referent":28,"owner":28,"representative":28,"dataProtectionAuthority":28,"id":42,"type":335,"parentId":28,"ref":28,"label":336,"description":28,"logoUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"countryCode":337,"immatriculationNumber":28,"phoneNumber":28,"mailAddress":28,"dpoId":28,"referentId":28,"ownerId":28,"representativeId":28,"dataProtectionAuthorityId":28},"Entity","Entité","FR",{"dpo":28,"referent":28,"owner":28,"representative":28,"dataProtectionAuthority":28,"id":42,"type":335,"parentId":28,"ref":28,"label":336,"description":28,"logoUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"countryCode":337,"immatriculationNumber":28,"phoneNumber":28,"mailAddress":28,"dpoId":28,"referentId":28,"ownerId":28,"representativeId":28,"dataProtectionAuthorityId":28},{"id":340,"label":341,"color":342,"order":31,"itemLimit":28,"type":11,"finalStep":29,"initialStep":343,"authorizedRole":28,"authorizedRoleId":28,"descriptionHtml":28,"mappedState":344},9439,"A compléter","#CCCCCC",true,"Draft",[],[],[],[349,363,375,386,399,410,421,431,441,452,463,473,483,494,505,516,526,536,547,557],{"date":350,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":352,"id":353,"ref":28,"label":354,"type":355,"description":356,"relatedRisk":28,"moreDetailsUrl":357,"dateCreation":358,"dateUpdate":28,"tags":359,"attachments":360,"creatorUser":361,"workflowStepId":362,"workflowStep":28},"2026-11-03T11:40:01.2811526Z","Done",{},"beba9da4-69b2-451b-69b0-08df38010b92","Pilotage de la sécurité des données","Organizational","L’intégration de la protection des données personnelles dans les processus de décision de l’organisme permet d’en assurer la prise en compte dans la durée et aux moments clés d’arbitrages des budgets et des projets. Les précautions élémentaires Impliquer la direction et formaliser des objectifs généraux en matière de sécurité et de protection des données personnelles, validés par la direction de l’organisme.","https://www.cnil.fr/fr/securite-piloter-la-securite-des-donnees","2026-11-02T20:57:37.2709862",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},90384,{"date":364,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":365,"id":366,"ref":28,"label":367,"type":355,"description":368,"relatedRisk":28,"moreDetailsUrl":369,"dateCreation":370,"dateUpdate":371,"tags":372,"attachments":373,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.2811568Z",{},"cde1cad2-4195-4ffe-9406-08dd823909d1","Cadre d'usage des utilisateurs","La charte doit rappeler les règles de protection des données et les sanctions possibles, définir son champ d’application (interventions informatiques, moyens d’authentification) et énoncer les règles de sécurité : signaler toute tentative d’intrusion, garder ses identifiants secrets, ne pas installer ni modifier de logiciels sans autorisation, verrouiller son poste en cas d’absence, n’accéder qu’aux informations utiles et respecter la procédure pour copier des données sur supports amovibles. Elle précise aussi les conditions d’usage des équipements informatiques et télécoms (poste de travail, matériels nomades, stockage, réseaux, appareils personnels, Internet, messagerie, téléphonie), les modalités d’administration du système (filtrage, traçabilité, gestion des postes) ainsi que les responsabilités et sanctions en cas de manquement.","https://www.cnil.fr/fr/securite-definir-un-cadre-pour-les-utilisateurs","2025-04-25T07:14:13.031896","2026-11-02T20:57:14.658541",[],[],90385,{"date":376,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":377,"id":378,"ref":28,"label":379,"type":355,"description":380,"relatedRisk":28,"moreDetailsUrl":381,"dateCreation":382,"dateUpdate":383,"tags":384,"attachments":385,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.2811575Z",{},"d77a94b8-cd42-409c-a02e-323ffad3924a","Sensibilisation et formation des utilisateurs","Les erreurs humaines et les attaques par ingénierie sociale sont à l’origine d’un nombre important d’incidents de sécurité. Les solutions techniques ne sont pas suffisantes pour assurer la protection des données personnelles détenues par un organisme.","https://www.cnil.fr/fr/securite-impliquer-et-former-les-utilisateurs","2019-01-01T00:00:00","2026-11-02T20:57:16.1776695",[],[],{"date":387,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":388,"id":389,"ref":28,"label":390,"type":391,"description":392,"relatedRisk":393,"moreDetailsUrl":394,"dateCreation":395,"dateUpdate":396,"tags":397,"attachments":398,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.2811583Z",{},"6c2ddc74-6750-4e76-bdad-317c6c0305ce","Authentification des utilisateurs","Technical","Avant toute utilisation des moyens informatiques, un utilisateur doit être doté d’un identifiant qui lui est propre et doit s’authentifier afin de permettre de contrôler son identité et ses accès aux données dont il a besoin. Les mécanismes permettant de réaliser l’authentification des personnes sont catégorisés selon qu’ils font intervenir :","Accès non autorisé, mots de passe partagés.","https://www.cnil.fr/fr/securite-authentifier-les-utilisateurs","2021-10-19T15:35:32.3166158","2026-11-02T20:57:18.0371731",[],[],{"date":400,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":401,"id":402,"ref":28,"label":403,"type":355,"description":404,"relatedRisk":28,"moreDetailsUrl":405,"dateCreation":406,"dateUpdate":407,"tags":408,"attachments":409,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.2811591Z",{},"f54ac346-ee7b-45de-9cc0-39506032df7e","Gestion des habilitations","Respecter le principe de moindre privilège, à travers la gestion des profils d’habilitation, permet de limiter les conséquences d’une usurpation de comptes ou d’une erreur de manipulation.","https://www.cnil.fr/fr/securite-gerer-les-habilitations","2021-10-19T15:35:32.1054015","2026-11-02T20:57:19.3398542",[],[],{"date":411,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":412,"id":413,"ref":28,"label":414,"type":391,"description":415,"relatedRisk":28,"moreDetailsUrl":416,"dateCreation":417,"dateUpdate":418,"tags":419,"attachments":420,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.28116Z",{},"f748340f-fe32-47c4-983c-135130915929","Sécurité des postes de travail","Les risques d’intrusion dans les systèmes informatiques sont multiples et les postes de travail constituent un des principaux points d’entrée.","https://www.cnil.fr/fr/securite-securiser-les-postes-de-travail","2021-12-15T14:06:35.2861825","2026-11-02T20:57:20.9746731",[],[],{"date":422,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":423,"id":424,"ref":28,"label":425,"type":391,"description":426,"relatedRisk":28,"moreDetailsUrl":427,"dateCreation":382,"dateUpdate":428,"tags":429,"attachments":430,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.2811608Z",{},"ac192187-f8f9-42aa-9111-814f4a321407","Protection du réseau informatique","Le réseau interne interconnecte l’ensemble des composants des systèmes d’information d’un organisme et dispose souvent de points de connexion avec l’extérieur. Il s’agit tout autant d’un point d’entrée que d’un support de propagation des attaques. Il est donc primordial de sécuriser le réseau interne.","https://www.cnil.fr/fr/securite-proteger-le-reseau-informatique","2026-11-02T20:57:22.9977424",[],[],{"date":432,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":433,"id":434,"ref":28,"label":435,"type":391,"description":436,"relatedRisk":28,"moreDetailsUrl":437,"dateCreation":382,"dateUpdate":438,"tags":439,"attachments":440,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.281162Z",{},"ed9bf5c2-97d3-4505-9b42-adabf6e7bd1d","Sécurité des serveurs","La sécurité des serveurs doit être une priorité car ils centralisent un grand nombre de données et hébergent les services permettant d’y accéder et de les manipuler. Les précautions élémentaires Désinstaller ou désactiver les services et interfaces inutiles. Limiter l’accès aux outils et interfaces d’administration aux seules personnes habilitées. Utiliser des comptes de moindres privilèges pour les opérations courantes.","https://www.cnil.fr/fr/securite-securiser-les-serveurs","2026-11-02T20:57:24.1598199",[],[],{"date":442,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":443,"id":444,"ref":28,"label":445,"type":446,"description":447,"relatedRisk":28,"moreDetailsUrl":448,"dateCreation":382,"dateUpdate":449,"tags":450,"attachments":451,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.2811627Z",{},"56e975ff-1611-4612-b85c-c7efcdd47c2c","Protection des locaux","Physical","L’accès aux locaux doit être contrôlé pour éviter ou ralentir un accès direct, non autorisé, que ce soit aux fichiers papier ou aux matériels informatiques, notamment aux serveurs. Les locaux doivent également être protégés contre les autres types de menaces (ex. : incendie, inondation). Les précautions élémentaires Restreindre les accès aux locaux au moyen de portes verrouillées. Installer des alarmes anti-intrusion et les vérifier périodiquement leur bon fonctionnement périodiquement.","https://www.cnil.fr/fr/securite-proteger-les-locaux","2026-11-02T20:57:28.139351",[],[],{"date":453,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":454,"id":455,"ref":28,"label":456,"type":355,"description":457,"relatedRisk":28,"moreDetailsUrl":458,"dateCreation":459,"dateUpdate":28,"tags":460,"attachments":461,"creatorUser":462,"workflowStepId":362,"workflowStep":28},"2026-11-03T11:40:01.2811634Z",{},"637227f2-e809-4991-69b1-08df38010b92","Encadrement de la maintenance et de la fin de vie des matériels et logiciels","Les opérations de support doivent être encadrées pour maitriser l’accès aux données par les prestataires. Les données doivent être préalablement effacées des matériels destinés à être mis au rebut.","https://www.cnil.fr/fr/securite-encadrer-la-maintenance-et-la-fin-de-vie-des-materiels-et-logiciels","2026-11-02T20:57:38.8686714",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":464,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":465,"id":466,"ref":28,"label":467,"type":391,"description":468,"relatedRisk":28,"moreDetailsUrl":469,"dateCreation":382,"dateUpdate":470,"tags":471,"attachments":472,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.281164Z",{},"c8b527e2-07bc-4677-8c00-d222be26d357","Traçabilité des opérations","Afin de pouvoir identifier un accès frauduleux ou une utilisation abusive de données personnelles, ou de déterminer l’origine d’un incident, il convient d’enregistrer certaines des actions effectuées sur les systèmes informatiques. Les traces alors collectées sont également des éléments de preuve utiles pour la démonstration de la conformité.","https://www.cnil.fr/fr/securite-tracer-les-operations","2026-11-02T20:57:33.4681365",[],[],{"date":474,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":475,"id":476,"ref":28,"label":477,"type":391,"description":478,"relatedRisk":28,"moreDetailsUrl":479,"dateCreation":382,"dateUpdate":480,"tags":481,"attachments":482,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.2811646Z",{},"cae348c2-e9f2-4e49-8d60-ab56e438d5a4","Sauvegarde","Des copies de sauvegarde doivent être réalisées et testées régulièrement pour être disponibles en cas de besoin. Les précautions élémentaires S’agissant de la sauvegarde des données","https://www.cnil.fr/fr/securite-sauvegarder","2026-11-02T20:57:34.7827534",[],[],{"date":484,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":485,"id":486,"ref":28,"label":487,"type":391,"description":488,"relatedRisk":28,"moreDetailsUrl":489,"dateCreation":490,"dateUpdate":28,"tags":491,"attachments":492,"creatorUser":493,"workflowStepId":362,"workflowStep":28},"2026-11-03T11:40:01.2811652Z",{},"6eddff0a-1378-4160-69b2-08df38010b92","Continuité et reprise d'activité","Pour limiter le temps d’indisponibilité du système, il faut anticiper les incidents les plus courants. Assurer la continuité d’activité consiste à prévoir des moyens de continuer de fonctionner, en général de manière dégradée, malgré des dysfonctionnements. La reprise d’activité, quant à elle, englobe toutes les actions nécessaires pour relancer un système arrêté.","https://www.cnil.fr/fr/securite-prevoir-la-continuite-et-la-reprise-dactivite","2026-11-02T20:57:39.8112993",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":495,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":496,"id":497,"ref":28,"label":498,"type":355,"description":499,"relatedRisk":28,"moreDetailsUrl":500,"dateCreation":501,"dateUpdate":28,"tags":502,"attachments":503,"creatorUser":504,"workflowStepId":362,"workflowStep":28},"2026-11-03T11:40:01.281166Z",{},"10c6151c-c44c-46df-69b3-08df38010b92","Gestion des incidents et des violations","Il convient d’être préparé à l’éventualité d’un incident pour intervenir à temps et de manière appropriée, en intégrant l’objectif de limiter les effets pour les personnes dont les données sont concernées. Le responsable de traitement peut être amené à notifier la CNIL ou informer les personnes concernées de l’incident en fonction du risque pour celles-ci.","https://www.cnil.fr/fr/securite-gerer-les-incidents-et-les-violations","2026-11-02T20:57:40.7676498",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":506,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":507,"id":508,"ref":28,"label":509,"type":355,"description":510,"relatedRisk":28,"moreDetailsUrl":511,"dateCreation":512,"dateUpdate":28,"tags":513,"attachments":514,"creatorUser":515,"workflowStepId":362,"workflowStep":28},"2026-11-03T11:40:01.2811667Z",{},"e064565b-514e-4755-69b4-08df38010b92","Analyse de risques","En parallèle de la mise en conformité aux précautions élémentaires présentées dans ce guide, il est pertinent, voire obligatoire selon la criticité des traitements, de réaliser des analyses de risques relative à la protection des données. Ces analyses permettent de décider des mesures de sécurité complémentaires, adaptées au contexte, permettant de limiter l’impact sur les personnes concernées par le traitement.","https://www.cnil.fr/fr/securite-analyse-de-risques","2026-11-02T20:57:42.2940193",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":517,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":518,"id":519,"ref":28,"label":520,"type":391,"description":521,"relatedRisk":28,"moreDetailsUrl":522,"dateCreation":382,"dateUpdate":523,"tags":524,"attachments":525,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.2811677Z",{},"43ba60c3-6739-4e15-bc7b-bc80cad63155","Sécurité des sites web","Tout site web doit garantir son identité aux terminaux s’y connectant et la confidentialité des informations transmises. Les précautions élémentaires Sécuriser les flux d’échange de données par l’utilisation de TLS :","https://www.cnil.fr/fr/securite-securiser-les-sites-web","2026-11-02T20:57:25.0515414",[],[],{"date":527,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":528,"id":529,"ref":28,"label":530,"type":355,"description":531,"relatedRisk":28,"moreDetailsUrl":532,"dateCreation":382,"dateUpdate":533,"tags":534,"attachments":535,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.2811684Z",{},"5c75cb90-f2b8-43c2-8bcf-808d92f00aa6","Encadrement des développements informatiques","La protection des données à caractère personnel doit être intégrée dans le cycle de développement informatique dès les phases de conception et pour les configurations par défaut afin d’offrir aux personnes concernées une meilleure maîtrise de leurs données et de limiter les erreurs, pertes, modifications non autorisée, ou mauvais usages de celles-ci dans les applications.","https://www.cnil.fr/fr/securite-encadrer-les-developpements-informatiques","2026-11-02T20:57:27.2009232",[],[],{"date":537,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":538,"id":539,"ref":28,"label":540,"type":355,"description":541,"relatedRisk":28,"moreDetailsUrl":542,"dateCreation":543,"dateUpdate":28,"tags":544,"attachments":545,"creatorUser":546,"workflowStepId":362,"workflowStep":28},"2026-11-03T11:40:01.2811691Z",{},"c74c6dac-044c-4c94-69b5-08df38010b92","Sécurité du cloud (informatique en nuage)","Le recours à l’informatique en nuage (cloud) est perçu comme un moyen plus rapide et flexible de déployer des nouveaux services. Cependant, les risques spécifiques liés au recours au cloud doivent être pris en compte lors de la mise en œuvre d’un traitement de données. Le fournisseur du service cloud doit présenter des garanties suffisantes pour assurer la mise en œuvre de mesures de sécurité.","https://www.cnil.fr/fr/securite-cloud-informatique-en-nuage","2026-11-02T20:57:43.1387689",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":548,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":549,"id":550,"ref":28,"label":551,"type":355,"description":552,"relatedRisk":28,"moreDetailsUrl":553,"dateCreation":382,"dateUpdate":554,"tags":555,"attachments":556,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.2811698Z",{},"47c52bcb-a6e9-487b-a958-f027b20dbd87","Encadrement de la sous-traitance","Les traitements de données réalisés par un sous-traitant pour le compte du responsable de traitement doivent bénéficier de garanties suffisantes, notamment en matière de sécurité.","https://www.cnil.fr/fr/securite-gerer-la-sous-traitance","2026-11-02T20:57:31.4211019",[],[],{"date":558,"state":351,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":559,"id":560,"ref":28,"label":561,"type":355,"description":562,"relatedRisk":28,"moreDetailsUrl":563,"dateCreation":382,"dateUpdate":564,"tags":565,"attachments":566,"creatorUser":28,"workflowStepId":374,"workflowStep":28},"2026-11-03T11:40:01.2811705Z",{},"49230bff-1cd3-46bd-85f5-e43809136dc9","Sécurité des échanges avec l'extérieur","Sans mesure complémentaire, les canaux de transmission de données grand public (ex. : messagerie électronique, messagerie instantanée, plateforme de dépôt de fichiers) constituent rarement un moyen de communication sûr pour transmettre des données personnelles. Une simple erreur d’inattention peut conduire des personnes non habilitées à prendre connaissance de données personnelles, ce qui porte atteinte au droit à la vie privée des personnes concernées.","https://www.cnil.fr/fr/securite-securiser-les-echanges-avec-lexterieur","2026-11-02T20:57:29.3610605",[],[],[568,577],{"subjectCategory":569,"displayName":571,"id":575,"subjectCategoryId":570,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":576},{"id":570,"label":571,"ref":28,"dateCreation":572,"dateUpdate":28,"creatorUserId":28,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":573,"workflowStep":28,"dataRetentionRules":574},"983407ad-24f5-48b6-268b-08dac757bbf1","Clients","2022-11-15T22:21:36.912217",97319,[],"aa92e9bd-badb-4bdb-e6be-08df38010be0",[],{"subjectCategory":578,"displayName":580,"id":583,"subjectCategoryId":579,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":584},{"id":579,"label":580,"ref":28,"dateCreation":581,"dateUpdate":28,"creatorUserId":28,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":573,"workflowStep":28,"dataRetentionRules":582},"cfe84374-765b-44fd-268c-08dac757bbf1","Anciens clients","2022-11-15T22:21:37.4944855",[],"9d622a3e-04cb-4b35-e6bf-08df38010be0",[],"\u003Cblockquote>\u003Cp>\u003Cstrong>Modèle à adapter\u003C/strong>\u003C/p>\u003Cp>Modèle de traitement fourni à titre indicatif, à adapter à votre organisation. Les finalités, les données, les durées de conservation, les destinataires, les mesures de sécurité et l'analyse d'impact y sont des valeurs de départ, établies à partir des textes et référentiels cités ci-dessous. \u003Cstrong>Ce modèle ne constitue pas un avis juridique\u003C/strong> : faites-le valider par votre DPO ou votre conseil.\u003C/p>\u003C/blockquote>\u003Cblockquote>\u003Cp>\u003Cstrong>Point d'attention\u003C/strong> : Les articles du CESEDA sur la fiche individuelle de police ont été lus via un résumé : à confirmer sur Légifrance.\u003C/p>\u003C/blockquote>\u003Ch3>Sources\u003C/h3>\u003Cp>\u003Cem>Classement selon le guide pratique CNIL « Les durées de conservation ».\u003C/em>\u003C/p>\u003Cul>\u003Cli>\u003Cstrong>Texte légal ou réglementaire (durée obligatoire)\u003C/strong> : \u003Ca href=\"https://www.legifrance.gouv.fr/codes/section_lc/LEGITEXT000006070158/LEGISCTA000042804992/\">CESEDA, articles R814-1 à R814-3 (fiche individuelle de police)\u003C/a>. Obligation de la fiche pour les clients étrangers, données collectées, conservation 6 mois\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (durée recommandée)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/sites/cnil/files/atoms/files/referentiel_traitements-donnees-caractere-personnel_gestion-activites-commerciales.pdf\">CNIL, Référentiel relatif aux traitements de données à caractère personnel mis en oeuvre aux fins de gestion des activités commerciales\u003C/a>. Finalités, bases légales, durées recommandées (relation contractuelle, 3 ans prospection, cryptogramme)\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/cnil-direct/question/774?visiteur=part\">CNIL, Fiche individuelle de police pour les clients étrangers d'un établissement de tourisme\u003C/a>. Établissements concernés, finalités, transmission aux seules autorités sur demande\u003C/li>\u003Cli>\u003Cstrong>Référence sectorielle (durée obligatoire)\u003C/strong> : \u003Ca href=\"https://www.service-public.gouv.fr/particuliers/vosdroits/F33458\">Service-Public, Fiche individuelle de police à faire remplir par un touriste étranger\u003C/a>. Hébergements concernés, données de la fiche, conservation 6 mois\u003C/li>\u003Cli>\u003Cstrong>Référence sectorielle (durée obligatoire)\u003C/strong> : \u003Ca href=\"https://entreprendre.service-public.gouv.fr/vosdroits/F10029\">Entreprendre.Service-Public, conservation des documents comptables (rappel de l'article L123-22 du Code de commerce)\u003C/a>. Conservation 10 ans des livres comptables et pièces justificatives\u003C/li>\u003C/ul>","Automatic","ManualOrOnDemand","Les personnes sont informées au moment de la collecte (art. 13 du RGPD) ou, en cas de collecte indirecte, au plus tard dans un délai d'un mois (art. 14).","Lien de désinscription dans chaque message de prospection (art. 21.2 et 21.3 du RGPD).",[],[592,600,606,612,627,634,641,648],{"purposes":593,"dataRetentionRules":28,"parentId":28,"children":594,"displayName":595,"label":595,"transfers":596,"recipientType":597,"type":598,"jobTitle":28,"id":599,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Réception et service des réservations",[],"InternalService","Recipient","87a17236-6e72-455f-a0b7-08df38010bcb",{"purposes":601,"dataRetentionRules":28,"parentId":28,"children":602,"displayName":603,"label":603,"transfers":604,"recipientType":597,"type":598,"jobTitle":28,"id":605,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Service comptabilité",[],"d25ab48e-98fa-4ab9-a0b8-08df38010bcb",{"purposes":607,"dataRetentionRules":28,"parentId":28,"children":608,"displayName":609,"label":609,"transfers":610,"recipientType":597,"type":598,"jobTitle":28,"id":611,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Service commercial et marketing",[],"1e82adae-9d7f-40b6-a0b9-08df38010bcb",{"purposes":613,"dataRetentionRules":28,"parentId":28,"children":614,"displayName":615,"label":616,"transfers":617,"recipientType":618,"type":598,"jobTitle":28,"id":619,"actorId":620,"actor":621,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Sous-traitant à préciser","Éditeur du logiciel de gestion hôtelière",[],"Vendor","b4170e30-42da-4fa5-a0ba-08df38010bcb","1af96d46-eb9e-45f3-64bc-08df38010bd1",{"label":615,"id":620,"ref":28,"dateCreation":622,"dateUpdate":28,"reviewDate":28,"nextReviewDate":28,"logoUrl":28,"state":623,"actorType":624,"description":625,"countryCode":28,"readonly":29,"email":28,"phoneNumber":28,"contactName":28,"contactPosition":28,"immatriculationNumber":28,"websiteUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"workflowStepId":626,"areaId":28,"source":82},"2026-11-02T20:57:51.2801474","New","Morale","Acteur générique des modèles de traitement : à remplacer par le prestataire retenu (sous-traitant au sens de l'article 28 du RGPD).",76516,{"purposes":628,"dataRetentionRules":28,"parentId":28,"children":629,"displayName":615,"label":630,"transfers":631,"recipientType":618,"type":598,"jobTitle":28,"id":632,"actorId":620,"actor":633,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Prestataire de paiement et banque",[],"e1d23e7e-5b9c-470e-a0bb-08df38010bcb",{"label":615,"id":620,"ref":28,"dateCreation":622,"dateUpdate":28,"reviewDate":28,"nextReviewDate":28,"logoUrl":28,"state":623,"actorType":624,"description":625,"countryCode":28,"readonly":29,"email":28,"phoneNumber":28,"contactName":28,"contactPosition":28,"immatriculationNumber":28,"websiteUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"workflowStepId":626,"areaId":28,"source":82},{"purposes":635,"dataRetentionRules":28,"parentId":28,"children":636,"displayName":637,"label":637,"transfers":638,"recipientType":639,"type":598,"jobTitle":28,"id":640,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Plateformes de réservation en ligne",[],"JointController","b822d5f3-8b5f-4c3a-a0bc-08df38010bcb",{"purposes":642,"dataRetentionRules":28,"parentId":28,"children":643,"displayName":644,"label":644,"transfers":645,"recipientType":646,"type":598,"jobTitle":28,"id":647,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Services de police et unités de gendarmerie (fiches de police, sur demande)",[],"AuthorizedThirdParty","ab02d719-0c7d-4162-a0bd-08df38010bcb",{"purposes":649,"dataRetentionRules":28,"parentId":28,"children":650,"displayName":615,"label":651,"transfers":652,"recipientType":618,"type":598,"jobTitle":28,"id":653,"actorId":620,"actor":654,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Expert-comptable",[],"2ca61661-fc04-45d9-a0be-08df38010bcb",{"label":615,"id":620,"ref":28,"dateCreation":622,"dateUpdate":28,"reviewDate":28,"nextReviewDate":28,"logoUrl":28,"state":623,"actorType":624,"description":625,"countryCode":28,"readonly":29,"email":28,"phoneNumber":28,"contactName":28,"contactPosition":28,"immatriculationNumber":28,"websiteUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"workflowStepId":626,"areaId":28,"source":82},[],[657,663,669,673],{"id":658,"key":33,"label":659,"description":660,"legalBasis":661,"legalBasisText":662,"legalBasisDescription":28,"readonly":29},"e81edb33-5bc7-40a4-1088-08df38010b80","Gestion des réservations et du séjour","Enregistrement de la réservation, accueil du client, attribution de la chambre, demandes particulières, service pendant le séjour.","Contract","Contrat ou mesures précontractuelles",{"id":664,"key":117,"label":665,"description":666,"legalBasis":667,"legalBasisText":668,"legalBasisDescription":28,"readonly":29},"35308d91-b9ef-4915-1089-08df38010b80","Paiement, facturation et comptabilité","Encaissement du séjour, émission des factures, tenue de la comptabilité.","LegalCommitment","Obligation légale",{"id":670,"key":222,"label":671,"description":672,"legalBasis":667,"legalBasisText":668,"legalBasisDescription":28,"readonly":29},"fc66fea7-7915-4f15-108a-08df38010b80","Fiche individuelle de police des clients étrangers","Remplissage et conservation de la fiche demandée à chaque client de nationalité étrangère à son arrivée, remise aux forces de l'ordre sur demande.",{"id":674,"key":283,"label":323,"description":675,"legalBasis":676,"legalBasisText":677,"legalBasisDescription":28,"readonly":29},"130da83d-c0d5-4e94-108b-08df38010b80","Suivi de la relation, enquêtes de satisfaction, programme de fidélité, informations commerciales.","LegitimateInterest","Intérêts légitimes du responsable du traitement ou d'un tiers",100,67,5]