[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhhmH8hJEkSYlyCsAqijq9WGybg7hAT03oIFvQ5KRBiM":3},{"assets":4,"aiSystems":5,"attachments":6,"tags":7,"dataRetentionRules":20,"creatorUser":203,"creatorUserId":25,"updatedBy":204,"updatedById":25,"publishedBy":27,"publishedById":27,"areaOwnerId":27,"owners":205,"customFields":206,"area":207,"entity":211,"mergedFrom":27,"workflowStep":212,"accountables":218,"responsibles":219,"informedOwners":220,"securityMeasures":221,"personCategories":431,"id":37,"source":55,"label":38,"state":217,"versionDescription":27,"processingType":44,"parentId":27,"areaId":43,"mergeType":27,"readonly":28,"editable":216,"workflowStepId":213,"dateDeployment":27,"dateCreation":42,"dateArchived":27,"datePublication":27,"archived":28,"dateUpdate":41,"reviewDate":27,"nextReviewDate":27,"ref":27,"processingState":27,"description":39,"descriptionHtml":449,"subjectRightProcessDescription":27,"rightOfInformation":450,"rightOfAccess":451,"rightOfRectification":451,"rightOfErasure":451,"rightOfRestriction":451,"rightOfOpposition":451,"rightOfDataPortability":452,"advanceDirectives":451,"advanceDirectivesDescription":27,"rightOfInformationDescription":453,"rightOfAccessDescription":27,"rightOfRectificationDescription":27,"rightOfErasureDescription":27,"rightOfRestrictionDescription":27,"rightOfOppositionDescription":27,"rightOfDataPortabilityDescription":454,"stakeHolders":455,"assessmentScoring":216,"automaticDecision":27,"systematicMonitoring":28,"specialCategoryData":28,"largeScaleCollection":28,"crossReferencing":28,"vulnerablePeople":216,"isDPIARequired":216,"dpiaDate":27,"dpiaExemption":28,"dpiaExemptionJustification":27,"innovativeUse":216,"exclusionBenefitRightContract":216,"recipients":456,"dataControllers":514,"purposes":515,"progression":539,"quality":540,"sensitivity":541,"visible":216,"workspaceId":40,"nbReferences":30,"referenceId":27},[],[],[],[8,13,16],{"id":9,"label":10,"type":11,"color":12},"99e6f156-5bd7-4bc1-94c7-7f416665cf20","Organisme : Privé","DataProcessing","#64748B",{"id":14,"label":15,"type":11,"color":12},"5494cd34-13e6-4954-81cd-000195723eb0","Organisme : Public",{"id":17,"label":18,"type":11,"color":19},"a680bc18-6adc-4655-ba78-cbc42b58e390","Fonction : Ressources humaines","#B45309",[21,87,125,167],{"customFields":22,"tags":23,"creator":24,"readonly":28,"purposes":31,"dataProcessings":35,"dataFields":45,"asset":27,"subjectCategories":75,"id":76,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":77,"description":27,"dateCreation":78,"dateUpdate":79,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":80,"baseActiveLegalBasis":81,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":82,"intermediateArchivingRetentionDuration":83,"intermediateArchivingMinMax":27,"destructionDescription":84,"destructionLegalBasis":27,"dataSetSource":85,"sourceDescription":86,"assetId":27,"source":55},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},1602,"bc4946f8-1de1-4b70-bb67-62a0ce536160",null,false,"#4DE034",0,[32,33,34],"927e1a91-7ac8-45c2-9e1a-c22313a28bc0","6a5d422f-8aaa-48dd-bf34-48cfb30b983e","a98fd1f2-6315-4134-a6da-e83f15d6e8a4",[36],{"id":37,"label":38,"ref":27,"description":39,"workspaceId":40,"archived":28,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},"2cec5f87-7fa3-47ec-36e1-08df38010b74","Tests de personnalité et d'évaluation en recrutement","Ce modèle de traitement est relatif à l'évaluation des candidats par des questionnaires, tests d'aptitude, mises en situation, entretiens vidéo différés et outils algorithmiques d'aide au tri ou au classement des candidatures.",68,"2026-11-03T07:53:17.5373389","2026-11-03T07:53:16.271275",354,"Default",[46,56,63,69],{"id":47,"customFields":48,"ref":27,"archivingPolicy":27,"required":28,"label":49,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":51,"dataType":27,"dateCreation":52,"dateUpdate":27,"creator":53,"workflowStepId":54,"workflowStep":27,"source":55},"798ff7c7-e1da-4631-0389-08df38010ba5",{},"Identité du candidat et poste visé","Current","CivilStatus","2026-11-03T07:53:10.4599054",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},83450,"Api",{"id":57,"customFields":58,"ref":27,"archivingPolicy":27,"required":28,"label":59,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":60,"dataType":27,"dateCreation":61,"dateUpdate":27,"creator":62,"workflowStepId":54,"workflowStep":27,"source":55},"e95981f6-3570-46d9-038a-08df38010ba5",{},"Réponses au test ou au questionnaire","ProfessionalLife","2026-11-03T07:53:10.6759982",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":64,"customFields":65,"ref":27,"archivingPolicy":27,"required":28,"label":66,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":60,"dataType":27,"dateCreation":67,"dateUpdate":27,"creator":68,"workflowStepId":54,"workflowStep":27,"source":55},"a4c52cb9-4589-4d5a-038b-08df38010ba5",{},"Score, profil ou classement obtenu","2026-11-03T07:53:10.8905081",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":70,"customFields":71,"ref":27,"archivingPolicy":27,"required":28,"label":72,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":60,"dataType":27,"dateCreation":73,"dateUpdate":27,"creator":74,"workflowStepId":54,"workflowStep":27,"source":55},"5511fda0-5e27-4e9d-038c-08df38010ba5",{},"Observations du recruteur sur une mise en situation","2026-11-03T07:53:11.1128711",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"873f1c51-8d50-46ad-df67-08df38010b98","Résultats des tests d'aptitude et de personnalité","2026-11-03T07:53:13.5746423","2026-11-03T07:53:14.1015102","Le temps de la procédure de recrutement, jusqu'au résultat de la candidature","Article L1134-5 du code du travail (cité par le référentiel CNIL de 2026) ; guide CNIL du recrutement (recommandation).","5 ans à compter de la date à laquelle le poste a été pourvu, à des fins probatoires en cas d'action en discrimination (candidats non retenus)",2628000,"À l'issue de la durée de conservation, les données sont supprimées de manière sécurisée ou anonymisées de façon irréversible.","Direct","Durée du référentiel CNIL « durées de conservation, gestion des ressources humaines » (2 avril 2026, mis à jour le 20 mai 2026), rubrique Recrutement : base active le temps de la procédure, puis 5 ans de conservation à des fins probatoires pour les candidats non retenus. Le référentiel classe cette durée comme obligation en citant l'article L1134-5, qui fixe en réalité un délai de prescription : la durée est un plafond de conservation probatoire, non une obligation de conserver. Pour le candidat retenu, les données sont réutilisées pour la gestion du personnel.",{"customFields":88,"tags":89,"creator":90,"readonly":28,"purposes":91,"dataProcessings":93,"dataFields":95,"asset":27,"subjectCategories":116,"id":117,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":118,"description":27,"dateCreation":119,"dateUpdate":120,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":121,"baseActiveLegalBasis":122,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":123,"intermediateArchivingRetentionDuration":27,"intermediateArchivingMinMax":27,"destructionDescription":84,"destructionLegalBasis":27,"dataSetSource":85,"sourceDescription":124,"assetId":27,"source":55},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[92],"69c1c2b1-a026-416c-9187-037af5dc0485",[94],{"id":37,"label":38,"ref":27,"description":39,"workspaceId":40,"archived":28,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},[96,103,110],{"id":97,"customFields":98,"ref":27,"archivingPolicy":27,"required":28,"label":99,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":100,"dataType":27,"dateCreation":101,"dateUpdate":27,"creator":102,"workflowStepId":54,"workflowStep":27,"source":55},"ee7b5024-ca41-4993-038d-08df38010ba5",{},"Enregistrement vidéo et audio des réponses du candidat","Other","2026-11-03T07:53:11.3393086",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":104,"customFields":105,"ref":27,"archivingPolicy":27,"required":28,"label":106,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":107,"dataType":27,"dateCreation":108,"dateUpdate":27,"creator":109,"workflowStepId":54,"workflowStep":27,"source":55},"8056312a-32fd-4146-038e-08df38010ba5",{},"Données de connexion à la session (identité, date, heure, durée)","ConnectionData","2026-11-03T07:53:11.5692058",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":111,"customFields":112,"ref":27,"archivingPolicy":27,"required":28,"label":113,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":60,"dataType":27,"dateCreation":114,"dateUpdate":27,"creator":115,"workflowStepId":54,"workflowStep":27,"source":55},"932a34b8-d339-44f4-038f-08df38010ba5",{},"Notes et appréciations du recruteur","2026-11-03T07:53:11.8620752",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"4709a539-63ad-46de-df68-08df38010b98","Entretiens vidéo différés","2026-11-03T07:53:14.3609878","2026-11-03T07:53:14.7461402","Aucune conservation des flux vidéo et son sauf justification du besoin ; au plus jusqu'à la décision d'embauche","Guide CNIL du recrutement, fiche 12 (recommandation).","","Recommandation du guide CNIL du recrutement (janvier 2023), fiche 12 : aucune conservation nécessaire des flux vidéo et son sauf justification, et sans justification particulière pas au-delà de la date de décision d'embauche. Pas de nombre de mois fixé.",{"customFields":126,"tags":127,"creator":128,"readonly":28,"purposes":129,"dataProcessings":131,"dataFields":133,"asset":27,"subjectCategories":158,"id":159,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":160,"description":27,"dateCreation":161,"dateUpdate":162,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":163,"baseActiveLegalBasis":164,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":165,"intermediateArchivingRetentionDuration":83,"intermediateArchivingMinMax":27,"destructionDescription":84,"destructionLegalBasis":27,"dataSetSource":85,"sourceDescription":166,"assetId":27,"source":55},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[130,34],"a83aa465-70db-4fe4-b736-d633b77b3efc",[132],{"id":37,"label":38,"ref":27,"description":39,"workspaceId":40,"archived":28,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},[134,140,146,152],{"id":135,"customFields":136,"ref":27,"archivingPolicy":27,"required":28,"label":137,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":60,"dataType":27,"dateCreation":138,"dateUpdate":27,"creator":139,"workflowStepId":54,"workflowStep":27,"source":55},"6c4bc270-dd19-4463-0390-08df38010ba5",{},"CV et informations de candidature analysés","2026-11-03T07:53:12.0694773",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":141,"customFields":142,"ref":27,"archivingPolicy":27,"required":28,"label":143,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":60,"dataType":27,"dateCreation":144,"dateUpdate":27,"creator":145,"workflowStepId":54,"workflowStep":27,"source":55},"70de08ae-3bce-4bef-0391-08df38010ba5",{},"Note de correspondance ou rang attribué par l'outil","2026-11-03T07:53:12.2827632",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":147,"customFields":148,"ref":27,"archivingPolicy":27,"required":28,"label":149,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":100,"dataType":27,"dateCreation":150,"dateUpdate":27,"creator":151,"workflowStepId":54,"workflowStep":27,"source":55},"33c309f1-9549-4849-0392-08df38010ba5",{},"Critères de tri paramétrés par le recruteur","2026-11-03T07:53:12.4788064",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":153,"customFields":154,"ref":27,"archivingPolicy":27,"required":28,"label":155,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":60,"dataType":27,"dateCreation":156,"dateUpdate":27,"creator":157,"workflowStepId":54,"workflowStep":27,"source":55},"e1f1e664-683b-4ae6-0393-08df38010ba5",{},"Décision finale et intervention humaine (date, auteur)","2026-11-03T07:53:12.6921066",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"af4b028f-323a-4f1b-df69-08df38010b98","Évaluation algorithmique des candidatures","2026-11-03T07:53:14.956878","2026-11-03T07:53:15.3915107","Le temps de la procédure de recrutement","Article L1134-5 du code du travail (cité par le référentiel CNIL de 2026).","5 ans à compter de la date à laquelle le poste a été pourvu, à des fins probatoires (candidats non retenus)","Même durée que les résultats de tests, selon le référentiel CNIL de 2026 (rubrique Recrutement). Aucune durée spécifique aux scores d'outils algorithmiques n'a été retrouvée.",{"customFields":168,"tags":169,"creator":170,"readonly":28,"purposes":171,"dataProcessings":172,"dataFields":174,"asset":27,"subjectCategories":193,"id":194,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":195,"description":27,"dateCreation":196,"dateUpdate":197,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":198,"baseActiveLegalBasis":199,"baseActiveRetentionDuration":200,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":201,"intermediateArchivingRetentionDuration":83,"intermediateArchivingMinMax":27,"destructionDescription":84,"destructionLegalBasis":27,"dataSetSource":85,"sourceDescription":202,"assetId":27,"source":55},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[32],[173],{"id":37,"label":38,"ref":27,"description":39,"workspaceId":40,"archived":28,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},[175,181,187],{"id":176,"customFields":177,"ref":27,"archivingPolicy":27,"required":28,"label":178,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":60,"dataType":27,"dateCreation":179,"dateUpdate":27,"creator":180,"workflowStepId":54,"workflowStep":27,"source":55},"3d96ce4e-0df3-4e77-0394-08df38010ba5",{},"Profil et résultats conservés pour de futures offres","2026-11-03T07:53:12.8948863",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":182,"customFields":183,"ref":27,"archivingPolicy":27,"required":28,"label":184,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":100,"dataType":27,"dateCreation":185,"dateUpdate":27,"creator":186,"workflowStepId":54,"workflowStep":27,"source":55},"499ed461-f469-4b91-0395-08df38010ba5",{},"Date du dernier contact avec le candidat","2026-11-03T07:53:13.1235783",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":188,"customFields":189,"ref":27,"archivingPolicy":27,"required":28,"label":190,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":50,"personalDataCategory":100,"dataType":27,"dateCreation":191,"dateUpdate":27,"creator":192,"workflowStepId":54,"workflowStep":27,"source":55},"d443a7c8-9a43-4a84-0396-08df38010ba5",{},"Accord du candidat à la conservation dans le vivier","2026-11-03T07:53:13.3447592",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"4797aa72-1236-4a70-df6a-08df38010b98","Vivier de candidats","2026-11-03T07:53:15.6094578","2026-11-03T07:53:16.0498372","Jusqu'à 2 ans à compter du dernier contact avec le candidat non retenu","Guide CNIL du recrutement (recommandation) ; article L1134-5 du code du travail pour l'archivage probatoire.",1051200,"5 ans à compter de la date à laquelle le poste a été pourvu, à des fins probatoires","Recommandation du référentiel CNIL de 2026 et du guide du recrutement : jusqu'à 2 ans à compter du dernier contact pour les candidats dont le profil intéresse l'employeur et sauf opposition de leur part (CV-thèque), puis archivage probatoire de 5 ans. Le candidat doit être informé de cette conservation.",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],{},{"dpo":27,"referent":27,"owner":27,"representative":27,"dataProtectionAuthority":27,"id":43,"type":208,"parentId":27,"ref":27,"label":209,"description":27,"logoUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"countryCode":210,"immatriculationNumber":27,"phoneNumber":27,"mailAddress":27,"dpoId":27,"referentId":27,"ownerId":27,"representativeId":27,"dataProtectionAuthorityId":27},"Entity","Entité","FR",{"dpo":27,"referent":27,"owner":27,"representative":27,"dataProtectionAuthority":27,"id":43,"type":208,"parentId":27,"ref":27,"label":209,"description":27,"logoUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"countryCode":210,"immatriculationNumber":27,"phoneNumber":27,"mailAddress":27,"dpoId":27,"referentId":27,"ownerId":27,"representativeId":27,"dataProtectionAuthorityId":27},{"id":213,"label":214,"color":215,"order":30,"itemLimit":27,"type":11,"finalStep":28,"initialStep":216,"authorizedRole":27,"authorizedRoleId":27,"descriptionHtml":27,"mappedState":217},9439,"A compléter","#CCCCCC",true,"Draft",[],[],[],[222,236,248,259,272,283,294,304,314,325,336,346,356,367,378,389,400,410,420],{"date":223,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":225,"id":226,"ref":27,"label":227,"type":228,"description":229,"relatedRisk":27,"moreDetailsUrl":230,"dateCreation":231,"dateUpdate":27,"tags":232,"attachments":233,"creatorUser":234,"workflowStepId":235,"workflowStep":27},"2026-11-03T12:38:16.6666214Z","Done",{},"beba9da4-69b2-451b-69b0-08df38010b92","Pilotage de la sécurité des données","Organizational","L’intégration de la protection des données personnelles dans les processus de décision de l’organisme permet d’en assurer la prise en compte dans la durée et aux moments clés d’arbitrages des budgets et des projets. Les précautions élémentaires Impliquer la direction et formaliser des objectifs généraux en matière de sécurité et de protection des données personnelles, validés par la direction de l’organisme.","https://www.cnil.fr/fr/securite-piloter-la-securite-des-donnees","2026-11-02T20:57:37.2709862",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},90384,{"date":237,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":238,"id":239,"ref":27,"label":240,"type":228,"description":241,"relatedRisk":27,"moreDetailsUrl":242,"dateCreation":243,"dateUpdate":244,"tags":245,"attachments":246,"creatorUser":27,"workflowStepId":247,"workflowStep":27},"2026-11-03T12:38:16.6666261Z",{},"cde1cad2-4195-4ffe-9406-08dd823909d1","Cadre d'usage des utilisateurs","La charte doit rappeler les règles de protection des données et les sanctions possibles, définir son champ d’application (interventions informatiques, moyens d’authentification) et énoncer les règles de sécurité : signaler toute tentative d’intrusion, garder ses identifiants secrets, ne pas installer ni modifier de logiciels sans autorisation, verrouiller son poste en cas d’absence, n’accéder qu’aux informations utiles et respecter la procédure pour copier des données sur supports amovibles. Elle précise aussi les conditions d’usage des équipements informatiques et télécoms (poste de travail, matériels nomades, stockage, réseaux, appareils personnels, Internet, messagerie, téléphonie), les modalités d’administration du système (filtrage, traçabilité, gestion des postes) ainsi que les responsabilités et sanctions en cas de manquement.","https://www.cnil.fr/fr/securite-definir-un-cadre-pour-les-utilisateurs","2025-04-25T07:14:13.031896","2026-11-02T20:57:14.658541",[],[],90385,{"date":249,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":250,"id":251,"ref":27,"label":252,"type":228,"description":253,"relatedRisk":27,"moreDetailsUrl":254,"dateCreation":255,"dateUpdate":256,"tags":257,"attachments":258,"creatorUser":27,"workflowStepId":247,"workflowStep":27},"2026-11-03T12:38:16.6666268Z",{},"d77a94b8-cd42-409c-a02e-323ffad3924a","Sensibilisation et formation des utilisateurs","Les erreurs humaines et les attaques par ingénierie sociale sont à l’origine d’un nombre important d’incidents de sécurité. Les solutions techniques ne sont pas suffisantes pour assurer la protection des données personnelles détenues par un organisme.","https://www.cnil.fr/fr/securite-impliquer-et-former-les-utilisateurs","2019-01-01T00:00:00","2026-11-02T20:57:16.1776695",[],[],{"date":260,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":261,"id":262,"ref":27,"label":263,"type":264,"description":265,"relatedRisk":266,"moreDetailsUrl":267,"dateCreation":268,"dateUpdate":269,"tags":270,"attachments":271,"creatorUser":27,"workflowStepId":247,"workflowStep":27},"2026-11-03T12:38:16.6666277Z",{},"6c2ddc74-6750-4e76-bdad-317c6c0305ce","Authentification des utilisateurs","Technical","Avant toute utilisation des moyens informatiques, un utilisateur doit être doté d’un identifiant qui lui est propre et doit s’authentifier afin de permettre de contrôler son identité et ses accès aux données dont il a besoin. Les mécanismes permettant de réaliser l’authentification des personnes sont catégorisés selon qu’ils font intervenir :","Accès non autorisé, mots de passe partagés.","https://www.cnil.fr/fr/securite-authentifier-les-utilisateurs","2021-10-19T15:35:32.3166158","2026-11-02T20:57:18.0371731",[],[],{"date":273,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":274,"id":275,"ref":27,"label":276,"type":228,"description":277,"relatedRisk":27,"moreDetailsUrl":278,"dateCreation":279,"dateUpdate":280,"tags":281,"attachments":282,"creatorUser":27,"workflowStepId":247,"workflowStep":27},"2026-11-03T12:38:16.6666284Z",{},"f54ac346-ee7b-45de-9cc0-39506032df7e","Gestion des habilitations","Respecter le principe de moindre privilège, à travers la gestion des profils d’habilitation, permet de limiter les conséquences d’une usurpation de comptes ou d’une erreur de manipulation.","https://www.cnil.fr/fr/securite-gerer-les-habilitations","2021-10-19T15:35:32.1054015","2026-11-02T20:57:19.3398542",[],[],{"date":284,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":285,"id":286,"ref":27,"label":287,"type":264,"description":288,"relatedRisk":27,"moreDetailsUrl":289,"dateCreation":290,"dateUpdate":291,"tags":292,"attachments":293,"creatorUser":27,"workflowStepId":247,"workflowStep":27},"2026-11-03T12:38:16.6666304Z",{},"f748340f-fe32-47c4-983c-135130915929","Sécurité des postes de travail","Les risques d’intrusion dans les systèmes informatiques sont multiples et les postes de travail constituent un des principaux points d’entrée.","https://www.cnil.fr/fr/securite-securiser-les-postes-de-travail","2021-12-15T14:06:35.2861825","2026-11-02T20:57:20.9746731",[],[],{"date":295,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":296,"id":297,"ref":27,"label":298,"type":264,"description":299,"relatedRisk":27,"moreDetailsUrl":300,"dateCreation":255,"dateUpdate":301,"tags":302,"attachments":303,"creatorUser":27,"workflowStepId":247,"workflowStep":27},"2026-11-03T12:38:16.6666311Z",{},"ac192187-f8f9-42aa-9111-814f4a321407","Protection du réseau informatique","Le réseau interne interconnecte l’ensemble des composants des systèmes d’information d’un organisme et dispose souvent de points de connexion avec l’extérieur. Il s’agit tout autant d’un point d’entrée que d’un support de propagation des attaques. Il est donc primordial de sécuriser le réseau interne.","https://www.cnil.fr/fr/securite-proteger-le-reseau-informatique","2026-11-02T20:57:22.9977424",[],[],{"date":305,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":306,"id":307,"ref":27,"label":308,"type":264,"description":309,"relatedRisk":27,"moreDetailsUrl":310,"dateCreation":255,"dateUpdate":311,"tags":312,"attachments":313,"creatorUser":27,"workflowStepId":247,"workflowStep":27},"2026-11-03T12:38:16.6666316Z",{},"ed9bf5c2-97d3-4505-9b42-adabf6e7bd1d","Sécurité des serveurs","La sécurité des serveurs doit être une priorité car ils centralisent un grand nombre de données et hébergent les services permettant d’y accéder et de les manipuler. Les précautions élémentaires Désinstaller ou désactiver les services et interfaces inutiles. Limiter l’accès aux outils et interfaces d’administration aux seules personnes habilitées. Utiliser des comptes de moindres privilèges pour les opérations courantes.","https://www.cnil.fr/fr/securite-securiser-les-serveurs","2026-11-02T20:57:24.1598199",[],[],{"date":315,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":316,"id":317,"ref":27,"label":318,"type":319,"description":320,"relatedRisk":27,"moreDetailsUrl":321,"dateCreation":255,"dateUpdate":322,"tags":323,"attachments":324,"creatorUser":27,"workflowStepId":247,"workflowStep":27},"2026-11-03T12:38:16.6666322Z",{},"56e975ff-1611-4612-b85c-c7efcdd47c2c","Protection des locaux","Physical","L’accès aux locaux doit être contrôlé pour éviter ou ralentir un accès direct, non autorisé, que ce soit aux fichiers papier ou aux matériels informatiques, notamment aux serveurs. Les locaux doivent également être protégés contre les autres types de menaces (ex. : incendie, inondation). Les précautions élémentaires Restreindre les accès aux locaux au moyen de portes verrouillées. Installer des alarmes anti-intrusion et les vérifier périodiquement leur bon fonctionnement périodiquement.","https://www.cnil.fr/fr/securite-proteger-les-locaux","2026-11-02T20:57:28.139351",[],[],{"date":326,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":327,"id":328,"ref":27,"label":329,"type":228,"description":330,"relatedRisk":27,"moreDetailsUrl":331,"dateCreation":332,"dateUpdate":27,"tags":333,"attachments":334,"creatorUser":335,"workflowStepId":235,"workflowStep":27},"2026-11-03T12:38:16.6666329Z",{},"637227f2-e809-4991-69b1-08df38010b92","Encadrement de la maintenance et de la fin de vie des matériels et logiciels","Les opérations de support doivent être encadrées pour maitriser l’accès aux données par les prestataires. Les données doivent être préalablement effacées des matériels destinés à être mis au rebut.","https://www.cnil.fr/fr/securite-encadrer-la-maintenance-et-la-fin-de-vie-des-materiels-et-logiciels","2026-11-02T20:57:38.8686714",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":337,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":338,"id":339,"ref":27,"label":340,"type":264,"description":341,"relatedRisk":27,"moreDetailsUrl":342,"dateCreation":255,"dateUpdate":343,"tags":344,"attachments":345,"creatorUser":27,"workflowStepId":247,"workflowStep":27},"2026-11-03T12:38:16.6666335Z",{},"c8b527e2-07bc-4677-8c00-d222be26d357","Traçabilité des opérations","Afin de pouvoir identifier un accès frauduleux ou une utilisation abusive de données personnelles, ou de déterminer l’origine d’un incident, il convient d’enregistrer certaines des actions effectuées sur les systèmes informatiques. Les traces alors collectées sont également des éléments de preuve utiles pour la démonstration de la conformité.","https://www.cnil.fr/fr/securite-tracer-les-operations","2026-11-02T20:57:33.4681365",[],[],{"date":347,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":348,"id":349,"ref":27,"label":350,"type":264,"description":351,"relatedRisk":27,"moreDetailsUrl":352,"dateCreation":255,"dateUpdate":353,"tags":354,"attachments":355,"creatorUser":27,"workflowStepId":247,"workflowStep":27},"2026-11-03T12:38:16.666635Z",{},"cae348c2-e9f2-4e49-8d60-ab56e438d5a4","Sauvegarde","Des copies de sauvegarde doivent être réalisées et testées régulièrement pour être disponibles en cas de besoin. Les précautions élémentaires S’agissant de la sauvegarde des données","https://www.cnil.fr/fr/securite-sauvegarder","2026-11-02T20:57:34.7827534",[],[],{"date":357,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":358,"id":359,"ref":27,"label":360,"type":264,"description":361,"relatedRisk":27,"moreDetailsUrl":362,"dateCreation":363,"dateUpdate":27,"tags":364,"attachments":365,"creatorUser":366,"workflowStepId":235,"workflowStep":27},"2026-11-03T12:38:16.6666356Z",{},"6eddff0a-1378-4160-69b2-08df38010b92","Continuité et reprise d'activité","Pour limiter le temps d’indisponibilité du système, il faut anticiper les incidents les plus courants. Assurer la continuité d’activité consiste à prévoir des moyens de continuer de fonctionner, en général de manière dégradée, malgré des dysfonctionnements. La reprise d’activité, quant à elle, englobe toutes les actions nécessaires pour relancer un système arrêté.","https://www.cnil.fr/fr/securite-prevoir-la-continuite-et-la-reprise-dactivite","2026-11-02T20:57:39.8112993",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":368,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":369,"id":370,"ref":27,"label":371,"type":228,"description":372,"relatedRisk":27,"moreDetailsUrl":373,"dateCreation":374,"dateUpdate":27,"tags":375,"attachments":376,"creatorUser":377,"workflowStepId":235,"workflowStep":27},"2026-11-03T12:38:16.6666365Z",{},"10c6151c-c44c-46df-69b3-08df38010b92","Gestion des incidents et des violations","Il convient d’être préparé à l’éventualité d’un incident pour intervenir à temps et de manière appropriée, en intégrant l’objectif de limiter les effets pour les personnes dont les données sont concernées. Le responsable de traitement peut être amené à notifier la CNIL ou informer les personnes concernées de l’incident en fonction du risque pour celles-ci.","https://www.cnil.fr/fr/securite-gerer-les-incidents-et-les-violations","2026-11-02T20:57:40.7676498",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":379,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":380,"id":381,"ref":27,"label":382,"type":228,"description":383,"relatedRisk":27,"moreDetailsUrl":384,"dateCreation":385,"dateUpdate":27,"tags":386,"attachments":387,"creatorUser":388,"workflowStepId":235,"workflowStep":27},"2026-11-03T12:38:16.6666372Z",{},"e064565b-514e-4755-69b4-08df38010b92","Analyse de risques","En parallèle de la mise en conformité aux précautions élémentaires présentées dans ce guide, il est pertinent, voire obligatoire selon la criticité des traitements, de réaliser des analyses de risques relative à la protection des données. Ces analyses permettent de décider des mesures de sécurité complémentaires, adaptées au contexte, permettant de limiter l’impact sur les personnes concernées par le traitement.","https://www.cnil.fr/fr/securite-analyse-de-risques","2026-11-02T20:57:42.2940193",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":390,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":391,"id":392,"ref":27,"label":393,"type":228,"description":394,"relatedRisk":27,"moreDetailsUrl":395,"dateCreation":396,"dateUpdate":27,"tags":397,"attachments":398,"creatorUser":399,"workflowStepId":235,"workflowStep":27},"2026-11-03T12:38:16.6666378Z",{},"c74c6dac-044c-4c94-69b5-08df38010b92","Sécurité du cloud (informatique en nuage)","Le recours à l’informatique en nuage (cloud) est perçu comme un moyen plus rapide et flexible de déployer des nouveaux services. Cependant, les risques spécifiques liés au recours au cloud doivent être pris en compte lors de la mise en œuvre d’un traitement de données. Le fournisseur du service cloud doit présenter des garanties suffisantes pour assurer la mise en œuvre de mesures de sécurité.","https://www.cnil.fr/fr/securite-cloud-informatique-en-nuage","2026-11-02T20:57:43.1387689",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":401,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":402,"id":403,"ref":27,"label":404,"type":228,"description":405,"relatedRisk":27,"moreDetailsUrl":406,"dateCreation":255,"dateUpdate":407,"tags":408,"attachments":409,"creatorUser":27,"workflowStepId":247,"workflowStep":27},"2026-11-03T12:38:16.6666387Z",{},"47c52bcb-a6e9-487b-a958-f027b20dbd87","Encadrement de la sous-traitance","Les traitements de données réalisés par un sous-traitant pour le compte du responsable de traitement doivent bénéficier de garanties suffisantes, notamment en matière de sécurité.","https://www.cnil.fr/fr/securite-gerer-la-sous-traitance","2026-11-02T20:57:31.4211019",[],[],{"date":411,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":412,"id":413,"ref":27,"label":414,"type":228,"description":415,"relatedRisk":27,"moreDetailsUrl":416,"dateCreation":255,"dateUpdate":417,"tags":418,"attachments":419,"creatorUser":27,"workflowStepId":247,"workflowStep":27},"2026-11-03T12:38:16.6666393Z",{},"49230bff-1cd3-46bd-85f5-e43809136dc9","Sécurité des échanges avec l'extérieur","Sans mesure complémentaire, les canaux de transmission de données grand public (ex. : messagerie électronique, messagerie instantanée, plateforme de dépôt de fichiers) constituent rarement un moyen de communication sûr pour transmettre des données personnelles. Une simple erreur d’inattention peut conduire des personnes non habilitées à prendre connaissance de données personnelles, ce qui porte atteinte au droit à la vie privée des personnes concernées.","https://www.cnil.fr/fr/securite-securiser-les-echanges-avec-lexterieur","2026-11-02T20:57:29.3610605",[],[],{"date":421,"state":224,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":422,"id":423,"ref":27,"label":424,"type":228,"description":425,"relatedRisk":27,"moreDetailsUrl":426,"dateCreation":427,"dateUpdate":27,"tags":428,"attachments":429,"creatorUser":430,"workflowStepId":235,"workflowStep":27},"2026-11-03T12:38:16.6666399Z",{},"eba73701-684c-4de3-69ba-08df38010b92","RGS : référentiel général de sécurité des autorités administratives","Appliquer le référentiel général de sécurité (RGS) de l'ANSSI : homologation de sécurité des systèmes d'information des autorités administratives (ordonnance n° 2005-1516).","https://cyber.gouv.fr/le-referentiel-general-de-securite-rgs","2026-11-02T20:57:48.3845718",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[432,441],{"subjectCategory":433,"displayName":435,"id":439,"subjectCategoryId":434,"comment":27,"dataSubjectVolumeMax":27,"readonly":28,"purposes":440},{"id":434,"label":435,"ref":27,"dateCreation":436,"dateUpdate":27,"creatorUserId":27,"creatorUser":27,"description":27,"minorConcerned":28,"workflowStepId":437,"workflowStep":27,"dataRetentionRules":438},"be18d8e6-b1fb-49b6-26aa-08dac757bbf1","Candidats","2022-11-15T22:22:53.3555663",97319,[],"a4e15527-43bb-4bc9-e737-08df38010be0",[],{"subjectCategory":442,"displayName":444,"id":447,"subjectCategoryId":443,"comment":27,"dataSubjectVolumeMax":27,"readonly":28,"purposes":448},{"id":443,"label":444,"ref":27,"dateCreation":445,"dateUpdate":27,"creatorUserId":27,"creatorUser":27,"description":27,"minorConcerned":28,"workflowStepId":437,"workflowStep":27,"dataRetentionRules":446},"8b9dd7e2-2eb8-4ef5-2689-08dac757bbf1","Employés","2022-11-15T22:21:35.8123871",[],"147ae38a-1c9d-499b-e738-08df38010be0",[],"\u003Cblockquote>\u003Cp>\u003Cstrong>Modèle à adapter\u003C/strong>\u003C/p>\u003Cp>Modèle de traitement fourni à titre indicatif, à adapter à votre organisation. Les finalités, les données, les durées de conservation, les destinataires, les mesures de sécurité et l'analyse d'impact y sont des valeurs de départ, établies à partir des textes et référentiels cités ci-dessous. \u003Cstrong>Ce modèle ne constitue pas un avis juridique\u003C/strong> : faites-le valider par votre DPO ou votre conseil.\u003C/p>\u003C/blockquote>\u003Cblockquote>\u003Cp>\u003Cstrong>Point d'attention\u003C/strong> : Le modèle « Recrutement » couvre déjà la gestion générale des candidatures ; ce modèle ajoute les outils d'évaluation (tests, vidéo différée, algorithmes). Les recommandations CNIL spécifiques sur l'IA n'ont pas été consultées, le référentiel RH de 2023 déclare ces outils hors de son champ.\u003C/p>\u003C/blockquote>\u003Ch3>Sources\u003C/h3>\u003Cp>\u003Cem>Classement selon le guide pratique CNIL « Les durées de conservation ».\u003C/em>\u003C/p>\u003Cul>\u003Cli>\u003Cstrong>Doctrine CNIL (durée recommandée)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/sites/cnil/files/atoms/files/guide_-_recrutement.pdf\">CNIL, Le recrutement : guide pratique (janvier 2023), fiches 11, 12 et 13\u003C/a>. Fiche 11 : tests de personnalité admis seulement avec un lien objectif, direct et nécessaire avec l'emploi, information préalable expresse des candidats, intérêt légitime comme base, AIPD recommandée, information du CSE. Fiche 12 : entretien vidéo, pas de conservation des flux sauf justification et pas au-delà de la décision d'embauche, analyse des émotions à justifier. Fiche 13 : outils de tri et de classement, article 22 du RGPD, droit à une intervention humaine, AIPD.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (durée recommandée)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/recrutement-et-donnees-personnelles-dans-les-tpepme-cinq-questions-incontournables-se-poser\">CNIL, Recrutement et données personnelles dans les TPE/PME : cinq questions incontournables\u003C/a>. Vivier de candidats non excédant en principe deux ans avec information du candidat ; information du CSE avant l'usage de méthodes d'aide au recrutement ; information des candidats sur une éventuelle décision automatisée ; interdiction de filmer sans informer.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (durée obligatoire)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/sites/default/files/2026-04/referentiel_durees_de_conservation_gestion_des_ressources_humaines.pdf\">CNIL, Les durées de conservation des données personnelles : gestion des ressources humaines (2 avril 2026, mise à jour du 20 mai 2026)\u003C/a>. Rubrique Recrutement : base active le temps de la procédure, archivage probatoire de 5 ans à compter du pourvoi du poste (art. L1134-5), CV-thèque jusqu'à 2 ans après le dernier contact.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/sites/cnil/files/2023-09/referentiel_gestion_des_ressources_humaines.pdf\">CNIL, Référentiel relatif aux traitements de données personnelles mis en œuvre aux fins de gestion du personnel (2023)\u003C/a>. Le référentiel exclut de son champ les outils innovants tels que la psychométrie et les traitements algorithmiques de profilage. Sa liste d'AIPD cite les traitements établissant des profils de personnes à des fins de gestion des ressources humaines.\u003C/li>\u003C/ul>","Automatic","ManualOrOnDemand","NonApplicable","Les personnes sont informées au moment de la collecte (art. 13 du RGPD) ou, en cas de collecte indirecte, au plus tard dans un délai d'un mois (art. 14).","Droit à la portabilité non applicable : il ne vise que les traitements automatisés fondés sur le consentement ou un contrat (art. 20 du RGPD).",[],[457,465,471,486,493,500,507],{"purposes":458,"dataRetentionRules":27,"parentId":27,"children":459,"displayName":460,"label":460,"transfers":461,"recipientType":462,"type":463,"jobTitle":27,"id":464,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Service des ressources humaines et recruteurs",[],"InternalService","Recipient","a10a0143-4d79-47af-a195-08df38010bcb",{"purposes":466,"dataRetentionRules":27,"parentId":27,"children":467,"displayName":468,"label":468,"transfers":469,"recipientType":462,"type":463,"jobTitle":27,"id":470,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Managers participant au recrutement",[],"39cebc12-bd09-47e7-a196-08df38010bcb",{"purposes":472,"dataRetentionRules":27,"parentId":27,"children":473,"displayName":474,"label":475,"transfers":476,"recipientType":477,"type":463,"jobTitle":27,"id":478,"actorId":479,"actor":480,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Sous-traitant à préciser","Éditeur de la plateforme de tests ou d'entretien vidéo différé",[],"Vendor","888721a9-b401-4b0d-a197-08df38010bcb","1af96d46-eb9e-45f3-64bc-08df38010bd1",{"label":474,"id":479,"ref":27,"dateCreation":481,"dateUpdate":27,"reviewDate":27,"nextReviewDate":27,"logoUrl":27,"state":482,"actorType":483,"description":484,"countryCode":27,"readonly":28,"email":27,"phoneNumber":27,"contactName":27,"contactPosition":27,"immatriculationNumber":27,"websiteUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"workflowStepId":485,"areaId":27,"source":55},"2026-11-02T20:57:51.2801474","New","Morale","Acteur générique des modèles de traitement : à remplacer par le prestataire retenu (sous-traitant au sens de l'article 28 du RGPD).",76516,{"purposes":487,"dataRetentionRules":27,"parentId":27,"children":488,"displayName":474,"label":489,"transfers":490,"recipientType":477,"type":463,"jobTitle":27,"id":491,"actorId":479,"actor":492,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Éditeur de l'outil algorithmique de tri des candidatures",[],"cc4cd846-b55b-411e-a198-08df38010bcb",{"label":474,"id":479,"ref":27,"dateCreation":481,"dateUpdate":27,"reviewDate":27,"nextReviewDate":27,"logoUrl":27,"state":482,"actorType":483,"description":484,"countryCode":27,"readonly":28,"email":27,"phoneNumber":27,"contactName":27,"contactPosition":27,"immatriculationNumber":27,"websiteUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"workflowStepId":485,"areaId":27,"source":55},{"purposes":494,"dataRetentionRules":27,"parentId":27,"children":495,"displayName":474,"label":496,"transfers":497,"recipientType":477,"type":463,"jobTitle":27,"id":498,"actorId":479,"actor":499,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Cabinet de recrutement ou d'évaluation",[],"ff43503c-309e-4a2f-a199-08df38010bcb",{"label":474,"id":479,"ref":27,"dateCreation":481,"dateUpdate":27,"reviewDate":27,"nextReviewDate":27,"logoUrl":27,"state":482,"actorType":483,"description":484,"countryCode":27,"readonly":28,"email":27,"phoneNumber":27,"contactName":27,"contactPosition":27,"immatriculationNumber":27,"websiteUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"workflowStepId":485,"areaId":27,"source":55},{"purposes":501,"dataRetentionRules":27,"parentId":27,"children":502,"displayName":503,"label":503,"transfers":504,"recipientType":505,"type":463,"jobTitle":27,"id":506,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Comité social et économique (information sur les méthodes utilisées)",[],"AuthorizedThirdParty","73fba62d-350b-472a-a19a-08df38010bcb",{"purposes":508,"dataRetentionRules":27,"parentId":27,"children":509,"displayName":510,"label":510,"transfers":511,"recipientType":512,"type":463,"jobTitle":27,"id":513,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Candidat (résultats et explications)",[],"DataSubject","485a1348-34f3-4e49-a19b-08df38010bcb",[],[516,522,526,529,533],{"id":517,"key":32,"label":518,"description":519,"legalBasis":520,"legalBasisText":521,"legalBasisDescription":27,"readonly":28},"81eee63c-ad83-4e6f-1110-08df38010b80","Évaluation des aptitudes et des compétences des candidats","Faire passer des tests d'aptitude, de raisonnement ou de langue et des mises en situation ayant un lien direct et nécessaire avec le poste (art. L1221-6 à L1221-9 du code du travail). Le guide CNIL du recrutement retient l'intérêt légitime comme base possible, le consentement et les mesures précontractuelles étant en général écartés.","LegitimateInterest","Intérêts légitimes du responsable du traitement ou d'un tiers",{"id":523,"key":33,"label":524,"description":525,"legalBasis":520,"legalBasisText":521,"legalBasisDescription":27,"readonly":28},"5c2ec729-a470-4224-1111-08df38010b80","Évaluation de la personnalité des candidats","Utiliser des questionnaires de personnalité ou des jeux d'évaluation uniquement si les traits mesurés ont un lien objectif, direct et nécessaire avec le poste et si la méthode est scientifiquement fondée. Les candidats sont informés expressément avant le test (art. L1221-9). Base retenue : intérêt légitime, selon le guide CNIL.",{"id":527,"key":92,"label":118,"description":528,"legalBasis":520,"legalBasisText":521,"legalBasisDescription":27,"readonly":28},"679320d6-eaa6-4252-1112-08df38010b80","Proposer au candidat d'enregistrer des réponses vidéo à des questions, qui sont visionnées plus tard par le recruteur. Le guide CNIL demande d'informer les candidats des modalités d'enregistrement et de visionnage en différé et de privilégier les solutions respectueuses de la minimisation. Base retenue : intérêt légitime.",{"id":530,"key":130,"label":531,"description":532,"legalBasis":520,"legalBasisText":521,"legalBasisDescription":27,"readonly":28},"d6846338-eea0-4dfe-1113-08df38010b80","Tri, classement et aide à la décision par outil algorithmique","Utiliser un logiciel qui trie, note ou classe les candidatures. Si l'outil écarte seul des candidats, il s'agit d'une décision entièrement automatisée soumise à l'article 22 du RGPD, que le guide CNIL juge difficile à justifier en recrutement. Le modèle suppose une décision finale prise par une personne. Base retenue : intérêt légitime.",{"id":534,"key":34,"label":535,"description":536,"legalBasis":537,"legalBasisText":538,"legalBasisDescription":27,"readonly":28},"baeb103f-4de5-433e-1114-08df38010b80","Restitution des résultats et information des candidats","Informer les candidats des méthodes utilisées, leur communiquer leurs résultats avec une grille de lecture et traiter leurs demandes d'accès, de contestation ou de réexamen par une personne. Base retenue : obligation légale d'information (RGPD, art. L1221-9 du code du travail).","LegalCommitment","Obligation légale",100,56,23]