[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fz69b6zdi9bm4Cwq40K4hUo88bscD3ifXp0u208_sWYU":3},{"assets":4,"aiSystems":5,"attachments":6,"tags":7,"dataRetentionRules":20,"creatorUser":177,"creatorUserId":25,"updatedBy":178,"updatedById":25,"publishedBy":27,"publishedById":27,"areaOwnerId":27,"owners":179,"customFields":180,"area":181,"entity":185,"mergedFrom":27,"workflowStep":186,"accountables":192,"responsibles":193,"informedOwners":194,"securityMeasures":195,"personCategories":404,"id":35,"source":53,"label":36,"state":191,"versionDescription":27,"processingType":42,"parentId":27,"areaId":41,"mergeType":27,"readonly":28,"editable":190,"workflowStepId":187,"dateDeployment":27,"dateCreation":40,"dateArchived":27,"datePublication":27,"archived":28,"dateUpdate":39,"reviewDate":27,"nextReviewDate":27,"ref":27,"processingState":27,"description":37,"descriptionHtml":431,"subjectRightProcessDescription":27,"rightOfInformation":432,"rightOfAccess":433,"rightOfRectification":433,"rightOfErasure":433,"rightOfRestriction":433,"rightOfOpposition":433,"rightOfDataPortability":433,"advanceDirectives":433,"advanceDirectivesDescription":27,"rightOfInformationDescription":434,"rightOfAccessDescription":27,"rightOfRectificationDescription":27,"rightOfErasureDescription":27,"rightOfRestrictionDescription":27,"rightOfOppositionDescription":27,"rightOfDataPortabilityDescription":27,"stakeHolders":435,"assessmentScoring":28,"automaticDecision":28,"systematicMonitoring":28,"specialCategoryData":27,"largeScaleCollection":28,"crossReferencing":28,"vulnerablePeople":190,"isDPIARequired":28,"dpiaDate":27,"dpiaExemption":28,"dpiaExemptionJustification":27,"innovativeUse":28,"exclusionBenefitRightContract":28,"recipients":436,"dataControllers":493,"purposes":494,"progression":517,"quality":518,"sensitivity":519,"visible":190,"workspaceId":38,"nbReferences":30,"referenceId":27},[],[],[],[8,13,16],{"id":9,"label":10,"type":11,"color":12},"99e6f156-5bd7-4bc1-94c7-7f416665cf20","Organisme : Privé","DataProcessing","#64748B",{"id":14,"label":15,"type":11,"color":12},"5494cd34-13e6-4954-81cd-000195723eb0","Organisme : Public",{"id":17,"label":18,"type":11,"color":19},"a680bc18-6adc-4655-ba78-cbc42b58e390","Fonction : Ressources humaines","#B45309",[21,84,132],{"customFields":22,"tags":23,"creator":24,"readonly":28,"purposes":31,"dataProcessings":33,"dataFields":43,"asset":27,"subjectCategories":74,"id":75,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":76,"description":27,"dateCreation":77,"dateUpdate":78,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":79,"baseActiveLegalBasis":80,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":80,"intermediateArchivingRetentionDuration":27,"intermediateArchivingMinMax":27,"destructionDescription":81,"destructionLegalBasis":27,"dataSetSource":82,"sourceDescription":83,"assetId":27,"source":53},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},1602,"bc4946f8-1de1-4b70-bb67-62a0ce536160",null,false,"#4DE034",0,[32],"30e2e52a-6921-44d9-b1f3-1d2c1dc590a0",[34],{"id":35,"label":36,"ref":27,"description":37,"workspaceId":38,"archived":28,"dateUpdate":39,"dateCreation":40,"areaId":41,"processingType":42},"63ae42a9-8b6a-411a-36ce-08df38010b74","Gestion de la flotte de véhicules et des cartes carburant","Ce modèle de traitement est relatif à l'attribution des véhicules de l'organisme à ses salariés, à la gestion des cartes carburant et de télépéage, au suivi des coûts de la flotte et au traitement des infractions routières avec la désignation du conducteur.",68,"2026-11-03T07:47:29.0824412","2026-11-03T07:47:27.8315475",354,"Default",[44,54,61,67],{"id":45,"customFields":46,"ref":27,"archivingPolicy":27,"required":28,"label":47,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":49,"dataType":27,"dateCreation":50,"dateUpdate":27,"creator":51,"workflowStepId":52,"workflowStep":27,"source":53},"d0c4b01e-5a7c-4bf9-02c7-08df38010ba5",{},"Nom, prénom et service du salarié bénéficiaire","Current","ProfessionalLife","2026-11-03T07:47:08.1214904",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},83450,"Api",{"id":55,"customFields":56,"ref":27,"archivingPolicy":27,"required":28,"label":57,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":58,"dataType":27,"dateCreation":59,"dateUpdate":27,"creator":60,"workflowStepId":52,"workflowStep":27,"source":53},"4746e3f5-9255-4fb1-02c8-08df38010ba5",{},"Immatriculation et caractéristiques du véhicule attribué","Other","2026-11-03T07:47:08.2804037",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":62,"customFields":63,"ref":27,"archivingPolicy":27,"required":28,"label":64,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":49,"dataType":27,"dateCreation":65,"dateUpdate":27,"creator":66,"workflowStepId":52,"workflowStep":27,"source":53},"2e1c130b-85b7-49f9-02c9-08df38010ba5",{},"Dates d'attribution, de maintenance et de restitution","2026-11-03T07:47:08.445058",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":68,"customFields":69,"ref":27,"archivingPolicy":27,"required":28,"label":70,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":71,"dataType":27,"dateCreation":72,"dateUpdate":27,"creator":73,"workflowStepId":52,"workflowStep":27,"source":53},"517ce9e5-fabf-4a7a-02ca-08df38010ba5",{},"Type de permis de conduire détenu et date de validité","PersonalLife","2026-11-03T07:47:08.6172146",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"b9a8debf-9888-4cff-df28-08df38010b98","Attribution des véhicules","2026-11-03T07:47:26.0545867","2026-11-03T07:47:26.4833002","Durée de la mise à disposition du véhicule","","À l'issue de la durée de conservation, les données sont supprimées de manière sécurisée ou anonymisées de façon irréversible.","Direct","Durée indicative, non imposée par un texte : fixée par le responsable de traitement selon la finalité (art. 5.1.e du RGPD). Aucune source officielle retrouvée. Le référentiel CNIL de 2026 ne donne pas de durée pour la gestion des véhicules, hors désignation des conducteurs et géolocalisation.",{"customFields":85,"tags":86,"creator":87,"readonly":28,"purposes":88,"dataProcessings":91,"dataFields":93,"asset":27,"subjectCategories":126,"id":127,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":128,"description":27,"dateCreation":129,"dateUpdate":130,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":80,"baseActiveLegalBasis":80,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":80,"intermediateArchivingRetentionDuration":27,"intermediateArchivingMinMax":27,"destructionDescription":81,"destructionLegalBasis":27,"dataSetSource":82,"sourceDescription":131,"assetId":27,"source":53},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[89,90],"70d211bf-d800-4e80-8b9c-7dfd4f5fe288","1938d67b-c7b8-4e2b-96aa-ef5f9ade0411",[92],{"id":35,"label":36,"ref":27,"description":37,"workspaceId":38,"archived":28,"dateUpdate":39,"dateCreation":40,"areaId":41,"processingType":42},[94,100,107,114,120],{"id":95,"customFields":96,"ref":27,"archivingPolicy":27,"required":28,"label":97,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":49,"dataType":27,"dateCreation":98,"dateUpdate":27,"creator":99,"workflowStepId":52,"workflowStep":27,"source":53},"97a88f3a-25d7-412c-02cb-08df38010ba5",{},"Numéro de la carte carburant ou du badge de télépéage et salarié titulaire","2026-11-03T07:47:08.8598868",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":101,"customFields":102,"ref":27,"archivingPolicy":27,"required":28,"label":103,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":104,"dataType":27,"dateCreation":105,"dateUpdate":27,"creator":106,"workflowStepId":52,"workflowStep":27,"source":53},"7b17a13b-8974-44c2-02cc-08df38010ba5",{},"Date, lieu et montant de chaque achat de carburant","EconomicFinancialData","2026-11-03T07:47:09.035167",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":108,"customFields":109,"ref":27,"archivingPolicy":27,"required":28,"label":110,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":111,"dataType":27,"dateCreation":112,"dateUpdate":27,"creator":113,"workflowStepId":52,"workflowStep":27,"source":53},"716fafd9-c677-41a9-02cd-08df38010ba5",{},"Passages au péage (date, gare, montant)","GeoLocationData","2026-11-03T07:47:09.2472526",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":115,"customFields":116,"ref":27,"archivingPolicy":27,"required":28,"label":117,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":58,"dataType":27,"dateCreation":118,"dateUpdate":27,"creator":119,"workflowStepId":52,"workflowStep":27,"source":53},"133f8a3f-35c0-4bbe-02ce-08df38010ba5",{},"Kilométrage déclaré et type de carburant","2026-11-03T07:47:09.4943357",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":121,"customFields":122,"ref":27,"archivingPolicy":27,"required":28,"label":123,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":49,"dataType":27,"dateCreation":124,"dateUpdate":27,"creator":125,"workflowStepId":52,"workflowStep":27,"source":53},"af07ca10-5bf0-4a9b-02cf-08df38010ba5",{},"Plafonds, blocages et signalements de perte ou d'usage anormal","2026-11-03T07:47:09.7082088",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"950d9405-afb8-456a-df29-08df38010b98","Cartes carburant et de télépéage","2026-11-03T07:47:26.6841292","2026-11-03T07:47:27.0499572","Durée indicative, non imposée par un texte : fixée par le responsable de traitement selon la finalité (art. 5.1.e du RGPD). Aucune source officielle retrouvée. Les relevés servant de pièces comptables peuvent relever d'obligations comptables non vérifiées ici.",{"customFields":133,"tags":134,"creator":135,"readonly":28,"purposes":136,"dataProcessings":138,"dataFields":140,"asset":27,"subjectCategories":167,"id":168,"ref":27,"externalId":27,"externalLastSyncDate":27,"externalSource":27,"label":169,"description":27,"dateCreation":170,"dateUpdate":171,"baseActiveOverride":28,"intermediateArchivingOverride":28,"destructionOverride":28,"baseActiveDescription":172,"baseActiveLegalBasis":173,"baseActiveRetentionDuration":27,"baseActiveMinMax":27,"intermediateArchivingLegalBasis":27,"intermediateArchivingDescription":174,"intermediateArchivingRetentionDuration":175,"intermediateArchivingMinMax":27,"destructionDescription":81,"destructionLegalBasis":27,"dataSetSource":82,"sourceDescription":176,"assetId":27,"source":53},{},[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[137],"dc246c34-0bc6-4d8a-b99f-0086546c2899",[139],{"id":35,"label":36,"ref":27,"description":37,"workspaceId":38,"archived":28,"dateUpdate":39,"dateCreation":40,"areaId":41,"processingType":42},[141,148,154,161],{"id":142,"customFields":143,"ref":27,"archivingPolicy":27,"required":28,"label":144,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":145,"dataType":27,"dateCreation":146,"dateUpdate":27,"creator":147,"workflowStepId":52,"workflowStep":27,"source":53},"794917b2-3dbc-4b00-02d0-08df38010ba5",{},"Référence, date, lieu et nature de l'infraction","CriminalConvictions","2026-11-03T07:47:25.2313184",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":149,"customFields":150,"ref":27,"archivingPolicy":27,"required":28,"label":151,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":58,"dataType":27,"dateCreation":152,"dateUpdate":27,"creator":153,"workflowStepId":52,"workflowStep":27,"source":53},"3fd9b8b7-20cd-4eb5-02d1-08df38010ba5",{},"Immatriculation du véhicule concerné","2026-11-03T07:47:25.443418",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":155,"customFields":156,"ref":27,"archivingPolicy":27,"required":28,"label":157,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":158,"dataType":27,"dateCreation":159,"dateUpdate":27,"creator":160,"workflowStepId":52,"workflowStep":27,"source":53},"52c417dc-55ee-4086-02d2-08df38010ba5",{},"Nom, prénom, adresse et référence du permis du conducteur désigné","CivilStatus","2026-11-03T07:47:25.6798241",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":162,"customFields":163,"ref":27,"archivingPolicy":27,"required":28,"label":164,"definition":27,"technicalDefinition":27,"sensitiveDataFieldLegalJustification":27,"sensitiveDataFieldLegalJustificationDescription":27,"sensitiveData":28,"sensitivityClassification":48,"personalDataCategory":58,"dataType":27,"dateCreation":165,"dateUpdate":27,"creator":166,"workflowStepId":52,"workflowStep":27,"source":53},"8b45d373-d301-40e7-02d3-08df38010ba5",{},"Date de réception de l'avis et date de désignation","2026-11-03T07:47:25.8527501",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],"5ad2f02f-9b92-401b-df2a-08df38010b98","Infractions routières et désignation du conducteur","2026-11-03T07:47:27.2657492","2026-11-03T07:47:27.6316865","45 jours maximum à compter de la réception de l'avis de contravention (désignation via le site de l'ANTAI ou par lettre recommandée)","Article L121-6 du code de la route ; référentiel CNIL relatif à la désignation des conducteurs ayant commis une infraction (durées citées par le référentiel CNIL de 2026).","Uniquement si l'organisme y est obligé ou souhaite se constituer une preuve en cas de contentieux, dans la limite du délai de prescription applicable (exemple du référentiel : 12 mois maximum en matière contraventionnelle)",525600,"Durée du référentiel CNIL « durées de conservation, gestion des ressources humaines » (2 avril 2026, mis à jour le 20 mai 2026), ligne désignation via l'ANTAI ou par lettre recommandée : 45 jours en base active (durée classée obligation, art. L121-6), archivage de preuve recommandé (12 mois cité en exemple pour les contraventions). Avec une convention ANTAI de désignation automatique, les traces des requêtes de l'ANTAI sont détruites après le retour d'information et l'employeur ne peut ni les garder ni les archiver.",{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[],{},{"dpo":27,"referent":27,"owner":27,"representative":27,"dataProtectionAuthority":27,"id":41,"type":182,"parentId":27,"ref":27,"label":183,"description":27,"logoUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"countryCode":184,"immatriculationNumber":27,"phoneNumber":27,"mailAddress":27,"dpoId":27,"referentId":27,"ownerId":27,"representativeId":27,"dataProtectionAuthorityId":27},"Entity","Entité","FR",{"dpo":27,"referent":27,"owner":27,"representative":27,"dataProtectionAuthority":27,"id":41,"type":182,"parentId":27,"ref":27,"label":183,"description":27,"logoUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"countryCode":184,"immatriculationNumber":27,"phoneNumber":27,"mailAddress":27,"dpoId":27,"referentId":27,"ownerId":27,"representativeId":27,"dataProtectionAuthorityId":27},{"id":187,"label":188,"color":189,"order":30,"itemLimit":27,"type":11,"finalStep":28,"initialStep":190,"authorizedRole":27,"authorizedRoleId":27,"descriptionHtml":27,"mappedState":191},9439,"A compléter","#CCCCCC",true,"Draft",[],[],[],[196,210,222,233,246,257,268,278,288,299,310,320,330,341,352,363,373,383,393],{"date":197,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":199,"id":200,"ref":27,"label":201,"type":202,"description":203,"relatedRisk":27,"moreDetailsUrl":204,"dateCreation":205,"dateUpdate":27,"tags":206,"attachments":207,"creatorUser":208,"workflowStepId":209,"workflowStep":27},"2026-11-03T11:39:38.8104116Z","Done",{},"beba9da4-69b2-451b-69b0-08df38010b92","Pilotage de la sécurité des données","Organizational","L’intégration de la protection des données personnelles dans les processus de décision de l’organisme permet d’en assurer la prise en compte dans la durée et aux moments clés d’arbitrages des budgets et des projets. Les précautions élémentaires Impliquer la direction et formaliser des objectifs généraux en matière de sécurité et de protection des données personnelles, validés par la direction de l’organisme.","https://www.cnil.fr/fr/securite-piloter-la-securite-des-donnees","2026-11-02T20:57:37.2709862",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},90384,{"date":211,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":212,"id":213,"ref":27,"label":214,"type":202,"description":215,"relatedRisk":27,"moreDetailsUrl":216,"dateCreation":217,"dateUpdate":218,"tags":219,"attachments":220,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.8104162Z",{},"cde1cad2-4195-4ffe-9406-08dd823909d1","Cadre d'usage des utilisateurs","La charte doit rappeler les règles de protection des données et les sanctions possibles, définir son champ d’application (interventions informatiques, moyens d’authentification) et énoncer les règles de sécurité : signaler toute tentative d’intrusion, garder ses identifiants secrets, ne pas installer ni modifier de logiciels sans autorisation, verrouiller son poste en cas d’absence, n’accéder qu’aux informations utiles et respecter la procédure pour copier des données sur supports amovibles. Elle précise aussi les conditions d’usage des équipements informatiques et télécoms (poste de travail, matériels nomades, stockage, réseaux, appareils personnels, Internet, messagerie, téléphonie), les modalités d’administration du système (filtrage, traçabilité, gestion des postes) ainsi que les responsabilités et sanctions en cas de manquement.","https://www.cnil.fr/fr/securite-definir-un-cadre-pour-les-utilisateurs","2025-04-25T07:14:13.031896","2026-11-02T20:57:14.658541",[],[],90385,{"date":223,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":224,"id":225,"ref":27,"label":226,"type":202,"description":227,"relatedRisk":27,"moreDetailsUrl":228,"dateCreation":229,"dateUpdate":230,"tags":231,"attachments":232,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.8104168Z",{},"d77a94b8-cd42-409c-a02e-323ffad3924a","Sensibilisation et formation des utilisateurs","Les erreurs humaines et les attaques par ingénierie sociale sont à l’origine d’un nombre important d’incidents de sécurité. Les solutions techniques ne sont pas suffisantes pour assurer la protection des données personnelles détenues par un organisme.","https://www.cnil.fr/fr/securite-impliquer-et-former-les-utilisateurs","2019-01-01T00:00:00","2026-11-02T20:57:16.1776695",[],[],{"date":234,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":235,"id":236,"ref":27,"label":237,"type":238,"description":239,"relatedRisk":240,"moreDetailsUrl":241,"dateCreation":242,"dateUpdate":243,"tags":244,"attachments":245,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.8104174Z",{},"6c2ddc74-6750-4e76-bdad-317c6c0305ce","Authentification des utilisateurs","Technical","Avant toute utilisation des moyens informatiques, un utilisateur doit être doté d’un identifiant qui lui est propre et doit s’authentifier afin de permettre de contrôler son identité et ses accès aux données dont il a besoin. Les mécanismes permettant de réaliser l’authentification des personnes sont catégorisés selon qu’ils font intervenir :","Accès non autorisé, mots de passe partagés.","https://www.cnil.fr/fr/securite-authentifier-les-utilisateurs","2021-10-19T15:35:32.3166158","2026-11-02T20:57:18.0371731",[],[],{"date":247,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":248,"id":249,"ref":27,"label":250,"type":202,"description":251,"relatedRisk":27,"moreDetailsUrl":252,"dateCreation":253,"dateUpdate":254,"tags":255,"attachments":256,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.8104179Z",{},"f54ac346-ee7b-45de-9cc0-39506032df7e","Gestion des habilitations","Respecter le principe de moindre privilège, à travers la gestion des profils d’habilitation, permet de limiter les conséquences d’une usurpation de comptes ou d’une erreur de manipulation.","https://www.cnil.fr/fr/securite-gerer-les-habilitations","2021-10-19T15:35:32.1054015","2026-11-02T20:57:19.3398542",[],[],{"date":258,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":259,"id":260,"ref":27,"label":261,"type":238,"description":262,"relatedRisk":27,"moreDetailsUrl":263,"dateCreation":264,"dateUpdate":265,"tags":266,"attachments":267,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.8104187Z",{},"f748340f-fe32-47c4-983c-135130915929","Sécurité des postes de travail","Les risques d’intrusion dans les systèmes informatiques sont multiples et les postes de travail constituent un des principaux points d’entrée.","https://www.cnil.fr/fr/securite-securiser-les-postes-de-travail","2021-12-15T14:06:35.2861825","2026-11-02T20:57:20.9746731",[],[],{"date":269,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":270,"id":271,"ref":27,"label":272,"type":238,"description":273,"relatedRisk":27,"moreDetailsUrl":274,"dateCreation":229,"dateUpdate":275,"tags":276,"attachments":277,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.8104192Z",{},"ac192187-f8f9-42aa-9111-814f4a321407","Protection du réseau informatique","Le réseau interne interconnecte l’ensemble des composants des systèmes d’information d’un organisme et dispose souvent de points de connexion avec l’extérieur. Il s’agit tout autant d’un point d’entrée que d’un support de propagation des attaques. Il est donc primordial de sécuriser le réseau interne.","https://www.cnil.fr/fr/securite-proteger-le-reseau-informatique","2026-11-02T20:57:22.9977424",[],[],{"date":279,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":280,"id":281,"ref":27,"label":282,"type":238,"description":283,"relatedRisk":27,"moreDetailsUrl":284,"dateCreation":229,"dateUpdate":285,"tags":286,"attachments":287,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.8104197Z",{},"ed9bf5c2-97d3-4505-9b42-adabf6e7bd1d","Sécurité des serveurs","La sécurité des serveurs doit être une priorité car ils centralisent un grand nombre de données et hébergent les services permettant d’y accéder et de les manipuler. Les précautions élémentaires Désinstaller ou désactiver les services et interfaces inutiles. Limiter l’accès aux outils et interfaces d’administration aux seules personnes habilitées. Utiliser des comptes de moindres privilèges pour les opérations courantes.","https://www.cnil.fr/fr/securite-securiser-les-serveurs","2026-11-02T20:57:24.1598199",[],[],{"date":289,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":290,"id":291,"ref":27,"label":292,"type":293,"description":294,"relatedRisk":27,"moreDetailsUrl":295,"dateCreation":229,"dateUpdate":296,"tags":297,"attachments":298,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.8104205Z",{},"56e975ff-1611-4612-b85c-c7efcdd47c2c","Protection des locaux","Physical","L’accès aux locaux doit être contrôlé pour éviter ou ralentir un accès direct, non autorisé, que ce soit aux fichiers papier ou aux matériels informatiques, notamment aux serveurs. Les locaux doivent également être protégés contre les autres types de menaces (ex. : incendie, inondation). Les précautions élémentaires Restreindre les accès aux locaux au moyen de portes verrouillées. Installer des alarmes anti-intrusion et les vérifier périodiquement leur bon fonctionnement périodiquement.","https://www.cnil.fr/fr/securite-proteger-les-locaux","2026-11-02T20:57:28.139351",[],[],{"date":300,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":301,"id":302,"ref":27,"label":303,"type":202,"description":304,"relatedRisk":27,"moreDetailsUrl":305,"dateCreation":306,"dateUpdate":27,"tags":307,"attachments":308,"creatorUser":309,"workflowStepId":209,"workflowStep":27},"2026-11-03T11:39:38.810421Z",{},"637227f2-e809-4991-69b1-08df38010b92","Encadrement de la maintenance et de la fin de vie des matériels et logiciels","Les opérations de support doivent être encadrées pour maitriser l’accès aux données par les prestataires. Les données doivent être préalablement effacées des matériels destinés à être mis au rebut.","https://www.cnil.fr/fr/securite-encadrer-la-maintenance-et-la-fin-de-vie-des-materiels-et-logiciels","2026-11-02T20:57:38.8686714",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":311,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":312,"id":313,"ref":27,"label":314,"type":238,"description":315,"relatedRisk":27,"moreDetailsUrl":316,"dateCreation":229,"dateUpdate":317,"tags":318,"attachments":319,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.8104215Z",{},"c8b527e2-07bc-4677-8c00-d222be26d357","Traçabilité des opérations","Afin de pouvoir identifier un accès frauduleux ou une utilisation abusive de données personnelles, ou de déterminer l’origine d’un incident, il convient d’enregistrer certaines des actions effectuées sur les systèmes informatiques. Les traces alors collectées sont également des éléments de preuve utiles pour la démonstration de la conformité.","https://www.cnil.fr/fr/securite-tracer-les-operations","2026-11-02T20:57:33.4681365",[],[],{"date":321,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":322,"id":323,"ref":27,"label":324,"type":238,"description":325,"relatedRisk":27,"moreDetailsUrl":326,"dateCreation":229,"dateUpdate":327,"tags":328,"attachments":329,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.810422Z",{},"cae348c2-e9f2-4e49-8d60-ab56e438d5a4","Sauvegarde","Des copies de sauvegarde doivent être réalisées et testées régulièrement pour être disponibles en cas de besoin. Les précautions élémentaires S’agissant de la sauvegarde des données","https://www.cnil.fr/fr/securite-sauvegarder","2026-11-02T20:57:34.7827534",[],[],{"date":331,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":332,"id":333,"ref":27,"label":334,"type":238,"description":335,"relatedRisk":27,"moreDetailsUrl":336,"dateCreation":337,"dateUpdate":27,"tags":338,"attachments":339,"creatorUser":340,"workflowStepId":209,"workflowStep":27},"2026-11-03T11:39:38.8104223Z",{},"6eddff0a-1378-4160-69b2-08df38010b92","Continuité et reprise d'activité","Pour limiter le temps d’indisponibilité du système, il faut anticiper les incidents les plus courants. Assurer la continuité d’activité consiste à prévoir des moyens de continuer de fonctionner, en général de manière dégradée, malgré des dysfonctionnements. La reprise d’activité, quant à elle, englobe toutes les actions nécessaires pour relancer un système arrêté.","https://www.cnil.fr/fr/securite-prevoir-la-continuite-et-la-reprise-dactivite","2026-11-02T20:57:39.8112993",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":342,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":343,"id":344,"ref":27,"label":345,"type":202,"description":346,"relatedRisk":27,"moreDetailsUrl":347,"dateCreation":348,"dateUpdate":27,"tags":349,"attachments":350,"creatorUser":351,"workflowStepId":209,"workflowStep":27},"2026-11-03T11:39:38.8104228Z",{},"10c6151c-c44c-46df-69b3-08df38010b92","Gestion des incidents et des violations","Il convient d’être préparé à l’éventualité d’un incident pour intervenir à temps et de manière appropriée, en intégrant l’objectif de limiter les effets pour les personnes dont les données sont concernées. Le responsable de traitement peut être amené à notifier la CNIL ou informer les personnes concernées de l’incident en fonction du risque pour celles-ci.","https://www.cnil.fr/fr/securite-gerer-les-incidents-et-les-violations","2026-11-02T20:57:40.7676498",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":353,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":354,"id":355,"ref":27,"label":356,"type":202,"description":357,"relatedRisk":27,"moreDetailsUrl":358,"dateCreation":359,"dateUpdate":27,"tags":360,"attachments":361,"creatorUser":362,"workflowStepId":209,"workflowStep":27},"2026-11-03T11:39:38.8104232Z",{},"e064565b-514e-4755-69b4-08df38010b92","Analyse de risques","En parallèle de la mise en conformité aux précautions élémentaires présentées dans ce guide, il est pertinent, voire obligatoire selon la criticité des traitements, de réaliser des analyses de risques relative à la protection des données. Ces analyses permettent de décider des mesures de sécurité complémentaires, adaptées au contexte, permettant de limiter l’impact sur les personnes concernées par le traitement.","https://www.cnil.fr/fr/securite-analyse-de-risques","2026-11-02T20:57:42.2940193",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},{"date":364,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":365,"id":366,"ref":27,"label":367,"type":238,"description":368,"relatedRisk":27,"moreDetailsUrl":369,"dateCreation":229,"dateUpdate":370,"tags":371,"attachments":372,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.8104237Z",{},"eaf489b5-7441-4bb3-8aee-0b894f6ade51","Chiffrement, hachage et signature","Moyens mis en œuvre pour assurer la confidentialité des données conservées (en base de données, dans des fichiers plats, dans les sauvegardes, etc.) ainsi que les modalités de gestion des clés de chiffrement (création, conservation, modification en cas de suspections de compromission, etc.).\n\nDétaillez les moyens de chiffrement employés pour les flux de données (VPN, TLS, etc.) intégrés dans le traitement.","https://www.cnil.fr/fr/securite-chiffrement-hachage-signature","2026-11-02T20:57:36.4902402",[],[],{"date":374,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":375,"id":376,"ref":27,"label":377,"type":202,"description":378,"relatedRisk":27,"moreDetailsUrl":379,"dateCreation":229,"dateUpdate":380,"tags":381,"attachments":382,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.8104242Z",{},"47c52bcb-a6e9-487b-a958-f027b20dbd87","Encadrement de la sous-traitance","Les traitements de données réalisés par un sous-traitant pour le compte du responsable de traitement doivent bénéficier de garanties suffisantes, notamment en matière de sécurité.","https://www.cnil.fr/fr/securite-gerer-la-sous-traitance","2026-11-02T20:57:31.4211019",[],[],{"date":384,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":385,"id":386,"ref":27,"label":387,"type":202,"description":388,"relatedRisk":27,"moreDetailsUrl":389,"dateCreation":229,"dateUpdate":390,"tags":391,"attachments":392,"creatorUser":27,"workflowStepId":221,"workflowStep":27},"2026-11-03T11:39:38.8104248Z",{},"49230bff-1cd3-46bd-85f5-e43809136dc9","Sécurité des échanges avec l'extérieur","Sans mesure complémentaire, les canaux de transmission de données grand public (ex. : messagerie électronique, messagerie instantanée, plateforme de dépôt de fichiers) constituent rarement un moyen de communication sûr pour transmettre des données personnelles. Une simple erreur d’inattention peut conduire des personnes non habilitées à prendre connaissance de données personnelles, ce qui porte atteinte au droit à la vie privée des personnes concernées.","https://www.cnil.fr/fr/securite-securiser-les-echanges-avec-lexterieur","2026-11-02T20:57:29.3610605",[],[],{"date":394,"state":198,"descriptionHtml":27,"readonly":28,"purposes":27,"customFields":395,"id":396,"ref":27,"label":397,"type":202,"description":398,"relatedRisk":27,"moreDetailsUrl":399,"dateCreation":400,"dateUpdate":27,"tags":401,"attachments":402,"creatorUser":403,"workflowStepId":209,"workflowStep":27},"2026-11-03T11:39:38.8104254Z",{},"eba73701-684c-4de3-69ba-08df38010b92","RGS : référentiel général de sécurité des autorités administratives","Appliquer le référentiel général de sécurité (RGS) de l'ANSSI : homologation de sécurité des systèmes d'information des autorités administratives (ordonnance n° 2005-1516).","https://cyber.gouv.fr/le-referentiel-general-de-securite-rgs","2026-11-02T20:57:48.3845718",[],[],{"id":25,"displayName":26,"familyName":27,"givenName":27,"email":26,"active":28,"color":29,"avatarUrl":27,"tenantId":30},[405,414,423],{"subjectCategory":406,"displayName":408,"id":412,"subjectCategoryId":407,"comment":27,"dataSubjectVolumeMax":27,"readonly":28,"purposes":413},{"id":407,"label":408,"ref":27,"dateCreation":409,"dateUpdate":27,"creatorUserId":27,"creatorUser":27,"description":27,"minorConcerned":28,"workflowStepId":410,"workflowStep":27,"dataRetentionRules":411},"8b9dd7e2-2eb8-4ef5-2689-08dac757bbf1","Employés","2022-11-15T22:21:35.8123871",97319,[],"345048d6-00ca-42de-e6f3-08df38010be0",[],{"subjectCategory":415,"displayName":417,"id":421,"subjectCategoryId":416,"comment":27,"dataSubjectVolumeMax":27,"readonly":28,"purposes":422},{"id":416,"label":417,"ref":27,"dateCreation":418,"dateUpdate":27,"creatorUserId":419,"creatorUser":27,"description":27,"minorConcerned":28,"workflowStepId":410,"workflowStep":27,"dataRetentionRules":420},"ffe81886-8d44-488d-9840-08dad4453c62","Conducteurs désignés","2022-12-06T23:02:51.9326185",31,[],"77ec63d2-d879-4bff-e6f4-08df38010be0",[],{"subjectCategory":424,"displayName":426,"id":429,"subjectCategoryId":425,"comment":27,"dataSubjectVolumeMax":27,"readonly":28,"purposes":430},{"id":425,"label":426,"ref":27,"dateCreation":427,"dateUpdate":27,"creatorUserId":27,"creatorUser":27,"description":27,"minorConcerned":28,"workflowStepId":410,"workflowStep":27,"dataRetentionRules":428},"ff2c96d4-9d2f-48ed-269b-08dac757bbf1","Anciens employés","2022-11-15T22:22:12.9429016",[],"959b0b12-ea64-4334-e6f5-08df38010be0",[],"\u003Cblockquote>\u003Cp>\u003Cstrong>Modèle à adapter\u003C/strong>\u003C/p>\u003Cp>Modèle de traitement fourni à titre indicatif, à adapter à votre organisation. Les finalités, les données, les durées de conservation, les destinataires, les mesures de sécurité et l'analyse d'impact y sont des valeurs de départ, établies à partir des textes et référentiels cités ci-dessous. \u003Cstrong>Ce modèle ne constitue pas un avis juridique\u003C/strong> : faites-le valider par votre DPO ou votre conseil.\u003C/p>\u003C/blockquote>\u003Cblockquote>\u003Cp>\u003Cstrong>Point d'attention\u003C/strong> : Les modèles existants « Gestion des parcs de véhicules » et « Désignation des conducteurs ayant commis une infraction au code de la route » couvrent déjà une partie du sujet. Ce modèle ajoute les cartes carburant et de télépéage et le suivi des coûts. Le texte du référentiel CNIL propre à la désignation des conducteurs n'a pas été lu directement : ses durées sont reprises du référentiel CNIL de 2026 qui le cite. La géolocalisation est hors périmètre (modèle existant).\u003C/p>\u003C/blockquote>\u003Ch3>Sources\u003C/h3>\u003Cp>\u003Cem>Classement selon le guide pratique CNIL « Les durées de conservation ».\u003C/em>\u003C/p>\u003Cul>\u003Cli>\u003Cstrong>Doctrine CNIL (durée obligatoire)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/sites/default/files/2026-04/referentiel_durees_de_conservation_gestion_des_ressources_humaines.pdf\">CNIL, Les durées de conservation des données personnelles : gestion des ressources humaines (2 avril 2026, mise à jour du 20 mai 2026)\u003C/a>. Durées de la désignation des conducteurs (45 jours à compter de la réception de l'avis, art. L121-6 du code de la route ; traces ANTAI détruites après retour d'information ; conservation plus longue possible des éléments de désignation pour les conducteurs principaux avec leur libre consentement) et de la géolocalisation (2 mois, 1 an pour preuve d'intervention). Pas de ligne pour les cartes carburant ni le télépéage.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/sites/cnil/files/2023-09/referentiel_gestion_des_ressources_humaines.pdf\">CNIL, Référentiel relatif aux traitements de données personnelles mis en œuvre aux fins de gestion du personnel (2023)\u003C/a>. Données de gestion des dotations individuelles en véhicules et cartes de paiement (demandes, nature de la dotation, dates de dotation, de maintenance et de retrait, affectations budgétaires) ; type de permis de conduire détenu par l'employé.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/la-cnil-lance-une-consultation-publique-sur-le-referentiel-relatif-la-designation-des-conducteurs\">CNIL, Désignation des conducteurs ayant commis une infraction au code de la route : référentiel (page d'annonce)\u003C/a>. Finalités du référentiel : désignation auprès de l'ANTAI, suivi du recouvrement des contraventions, statistiques anonymes. La page ne donne ni base légale, ni durées, ni liste de données.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (durée recommandée)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/la-geolocalisation-des-vehicules-des-salaries\">CNIL, La géolocalisation des véhicules des salariés (fiche)\u003C/a>. Délimite le périmètre : la géolocalisation (conservation en principe deux mois) relève d'un autre modèle ; les données de télépéage doivent être utilisées pour la facturation et non pour contrôler en continu le salarié.\u003C/li>\u003C/ul>","Automatic","ManualOrOnDemand","Les personnes sont informées au moment de la collecte (art. 13 du RGPD) ou, en cas de collecte indirecte, au plus tard dans un délai d'un mois (art. 14).",[],[437,445,451,457,472,479,486],{"purposes":438,"dataRetentionRules":27,"parentId":27,"children":439,"displayName":440,"label":440,"transfers":441,"recipientType":442,"type":443,"jobTitle":27,"id":444,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Service des moyens généraux ou gestionnaire de flotte",[],"InternalService","Recipient","ee4bc8ec-c9ff-4cf9-a118-08df38010bcb",{"purposes":446,"dataRetentionRules":27,"parentId":27,"children":447,"displayName":448,"label":448,"transfers":449,"recipientType":442,"type":443,"jobTitle":27,"id":450,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Service des ressources humaines et de la paie",[],"c1c4ec6d-825f-462b-a119-08df38010bcb",{"purposes":452,"dataRetentionRules":27,"parentId":27,"children":453,"displayName":454,"label":454,"transfers":455,"recipientType":442,"type":443,"jobTitle":27,"id":456,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Service comptabilité et contrôle de gestion",[],"fa58c8da-84d0-4a31-a11a-08df38010bcb",{"purposes":458,"dataRetentionRules":27,"parentId":27,"children":459,"displayName":460,"label":461,"transfers":462,"recipientType":463,"type":443,"jobTitle":27,"id":464,"actorId":465,"actor":466,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Sous-traitant à préciser","Émetteur des cartes carburant et de télépéage",[],"Vendor","7bb3c00a-f4d9-40ab-a11b-08df38010bcb","1af96d46-eb9e-45f3-64bc-08df38010bd1",{"label":460,"id":465,"ref":27,"dateCreation":467,"dateUpdate":27,"reviewDate":27,"nextReviewDate":27,"logoUrl":27,"state":468,"actorType":469,"description":470,"countryCode":27,"readonly":28,"email":27,"phoneNumber":27,"contactName":27,"contactPosition":27,"immatriculationNumber":27,"websiteUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"workflowStepId":471,"areaId":27,"source":53},"2026-11-02T20:57:51.2801474","New","Morale","Acteur générique des modèles de traitement : à remplacer par le prestataire retenu (sous-traitant au sens de l'article 28 du RGPD).",76516,{"purposes":473,"dataRetentionRules":27,"parentId":27,"children":474,"displayName":460,"label":475,"transfers":476,"recipientType":463,"type":443,"jobTitle":27,"id":477,"actorId":465,"actor":478,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Société de location longue durée ou gestionnaire de flotte externalisé",[],"aaf24ef5-c92c-454d-a11c-08df38010bcb",{"label":460,"id":465,"ref":27,"dateCreation":467,"dateUpdate":27,"reviewDate":27,"nextReviewDate":27,"logoUrl":27,"state":468,"actorType":469,"description":470,"countryCode":27,"readonly":28,"email":27,"phoneNumber":27,"contactName":27,"contactPosition":27,"immatriculationNumber":27,"websiteUrl":27,"address":27,"zipCode":27,"city":27,"region":27,"workflowStepId":471,"areaId":27,"source":53},{"purposes":480,"dataRetentionRules":27,"parentId":27,"children":481,"displayName":482,"label":482,"transfers":483,"recipientType":484,"type":443,"jobTitle":27,"id":485,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Agence nationale de traitement automatisé des infractions (ANTAI)",[],"AuthorizedThirdParty","45ed0852-f413-4b3a-a11d-08df38010bcb",{"purposes":487,"dataRetentionRules":27,"parentId":27,"children":488,"displayName":489,"label":489,"transfers":490,"recipientType":491,"type":443,"jobTitle":27,"id":492,"actorId":27,"actor":27,"areaId":27,"area":27,"description":27,"readonly":28},[],[],"Conducteur désigné (information sur l'infraction)",[],"DataSubject","14b10457-80fc-407d-a11e-08df38010bcb",[],[495,501,507,511],{"id":496,"key":32,"label":497,"description":498,"legalBasis":499,"legalBasisText":500,"legalBasisDescription":27,"readonly":28},"304b29d8-5bd2-4d02-10c5-08df38010b80","Attribution et suivi des véhicules mis à disposition des salariés","Gérer les demandes, l'attribution, la restitution et l'entretien des véhicules de fonction ou de service. Le référentiel CNIL RH de 2023 cite la gestion des dotations individuelles en véhicules et cartes de paiement (demandes, nature de la dotation, dates de dotation, de maintenance et de retrait). Base retenue : exécution du contrat de travail lorsque le véhicule est un avantage ou un outil de travail.","Contract","Contrat ou mesures précontractuelles",{"id":502,"key":89,"label":503,"description":504,"legalBasis":505,"legalBasisText":506,"legalBasisDescription":27,"readonly":28},"02dfd833-cf8a-4989-10c6-08df38010b80","Gestion des cartes carburant et de télépéage","Délivrer les cartes aux conducteurs, suivre leur usage, contrôler les dépenses et rapprocher les relevés des fournisseurs. Base retenue : intérêt légitime de l'organisme à maîtriser ses dépenses et à prévenir les usages non professionnels.","LegitimateInterest","Intérêts légitimes du responsable du traitement ou d'un tiers",{"id":508,"key":90,"label":509,"description":510,"legalBasis":505,"legalBasisText":506,"legalBasisDescription":27,"readonly":28},"2d067df4-7627-4765-10c7-08df38010b80","Suivi des coûts de la flotte et refacturation","Suivre les coûts par véhicule, par conducteur et par service, et refacturer le cas échéant les dépenses à usage privé. Base retenue : intérêt légitime de l'organisme.",{"id":512,"key":137,"label":513,"description":514,"legalBasis":515,"legalBasisText":516,"legalBasisDescription":27,"readonly":28},"dd373a75-b5e7-4bdb-10c8-08df38010b80","Traitement des infractions routières et désignation du conducteur","Identifier le conducteur d'un véhicule de l'organisme en cas d'infraction constatée par un dispositif automatique et le désigner auprès de l'ANTAI ou de l'autorité compétente, ce que le code de la route impose au représentant légal (art. L121-6), et suivre le recouvrement des contraventions.","LegalCommitment","Obligation légale",86,67,5]