[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbPyXai2oxOMuRJYliioPL8AC0BJk7lV2atSzOQOySK4":3},{"assets":4,"aiSystems":5,"attachments":6,"tags":7,"dataRetentionRules":21,"creatorUser":217,"creatorUserId":26,"updatedBy":218,"updatedById":26,"publishedBy":28,"publishedById":28,"areaOwnerId":28,"owners":219,"customFields":220,"area":221,"entity":225,"mergedFrom":28,"workflowStep":226,"accountables":232,"responsibles":233,"informedOwners":234,"securityMeasures":235,"personCategories":423,"id":37,"source":55,"label":38,"state":231,"versionDescription":28,"processingType":44,"parentId":28,"areaId":43,"mergeType":28,"readonly":29,"editable":230,"workflowStepId":227,"dateDeployment":28,"dateCreation":42,"dateArchived":28,"datePublication":28,"archived":29,"dateUpdate":41,"reviewDate":28,"nextReviewDate":28,"ref":28,"processingState":28,"description":39,"descriptionHtml":458,"subjectRightProcessDescription":28,"rightOfInformation":459,"rightOfAccess":460,"rightOfRectification":460,"rightOfErasure":460,"rightOfRestriction":460,"rightOfOpposition":459,"rightOfDataPortability":460,"advanceDirectives":460,"advanceDirectivesDescription":28,"rightOfInformationDescription":461,"rightOfAccessDescription":28,"rightOfRectificationDescription":28,"rightOfErasureDescription":28,"rightOfRestrictionDescription":28,"rightOfOppositionDescription":462,"rightOfDataPortabilityDescription":28,"stakeHolders":463,"assessmentScoring":29,"automaticDecision":29,"systematicMonitoring":29,"specialCategoryData":29,"largeScaleCollection":29,"crossReferencing":29,"vulnerablePeople":230,"isDPIARequired":230,"dpiaDate":28,"dpiaExemption":29,"dpiaExemptionJustification":28,"innovativeUse":29,"exclusionBenefitRightContract":230,"recipients":464,"dataControllers":522,"purposes":523,"progression":548,"quality":549,"sensitivity":550,"visible":230,"workspaceId":40,"nbReferences":31,"referenceId":28},[],[],[],[8,13,17],{"id":9,"label":10,"type":11,"color":12},"99e6f156-5bd7-4bc1-94c7-7f416665cf20","Organisme : Privé","DataProcessing","#64748B",{"id":14,"label":15,"type":11,"color":16},"0a67b735-74f3-47a0-ee30-08df38044b79","Secteur : Énergie et environnement","#0E7490",{"id":18,"label":19,"type":11,"color":20},"039e8266-e129-47c9-9989-f1878cbf9cf7","Fonction : Commercial et marketing","#B45309",[22,86,123,151,188],{"customFields":23,"tags":24,"creator":25,"readonly":29,"purposes":32,"dataProcessings":35,"dataFields":45,"asset":28,"subjectCategories":75,"id":76,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":77,"description":28,"dateCreation":78,"dateUpdate":79,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":80,"baseActiveLegalBasis":81,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":82,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":83,"destructionLegalBasis":28,"dataSetSource":84,"sourceDescription":85,"assetId":28,"source":55},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},1602,"bc4946f8-1de1-4b70-bb67-62a0ce536160",null,false,"#4DE034",0,[33,34],"0249c361-0888-4b73-88da-236b1ce9b31f","6f77ddc5-7c8d-49e9-a898-f91e7a36da80",[36],{"id":37,"label":38,"ref":28,"description":39,"workspaceId":40,"archived":29,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},"83673ed8-d190-4bde-36cb-08df38010b74","Gestion des clients d'un fournisseur d'énergie","Ce modèle de traitement est relatif à la gestion de la relation avec les clients d'un fournisseur d'électricité ou de gaz : contrats, données de consommation, facturation et paiement, traitement des impayés (y compris situations de précarité) et prospection commerciale.",68,"2026-11-03T07:46:30.8723131","2026-11-03T07:46:29.8476414",354,"Default",[46,56,62,69],{"id":47,"customFields":48,"ref":28,"archivingPolicy":28,"required":29,"label":49,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":51,"dataType":28,"dateCreation":52,"dateUpdate":28,"creator":53,"workflowStepId":54,"workflowStep":28,"source":55},"3234914e-933e-441c-02a6-08df38010ba5",{},"Nom, prénom et coordonnées du titulaire","Current","CivilStatus","2026-11-03T07:46:24.0120039",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},83450,"Api",{"id":57,"customFields":58,"ref":28,"archivingPolicy":28,"required":29,"label":59,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":51,"dataType":28,"dateCreation":60,"dateUpdate":28,"creator":61,"workflowStepId":54,"workflowStep":28,"source":55},"cfa98b86-637e-4dbb-02a7-08df38010ba5",{},"Adresse du point de livraison et référence du point de comptage","2026-11-03T07:46:24.1791094",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":63,"customFields":64,"ref":28,"archivingPolicy":28,"required":29,"label":65,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":66,"dataType":28,"dateCreation":67,"dateUpdate":28,"creator":68,"workflowStepId":54,"workflowStep":28,"source":55},"4064e0e4-acb1-4287-02a8-08df38010ba5",{},"Offre souscrite et date de début de contrat","Other","2026-11-03T07:46:24.3523001",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":70,"customFields":71,"ref":28,"archivingPolicy":28,"required":29,"label":72,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":66,"dataType":28,"dateCreation":73,"dateUpdate":28,"creator":74,"workflowStepId":54,"workflowStep":28,"source":55},"0ea5c5b2-a672-47f6-02a9-08df38010ba5",{},"Préférences de prospection et consentements","2026-11-03T07:46:24.5252573",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"50058b35-4344-4d91-df1d-08df38010b98","Contrat et identification du client","2026-11-03T07:46:26.6257501","2026-11-03T07:46:27.1314249","Durée du contrat","Référentiel CNIL de gestion commerciale : données des clients conservées pendant la relation puis 3 ans à compter de sa fin pour la prospection ; archivage limité aux obligations légales (exemple : 10 ans en comptabilité) ou à la preuve dans la limite de la prescription.","Archivage intermédiaire : 3 ans après la fin de la relation pour la prospection, durée de prescription ou obligation comptable pour la preuve et la comptabilité","À l'issue de la durée de conservation, les données sont supprimées de manière sécurisée ou anonymisées de façon irréversible.","Direct","Recommandation CNIL (référentiel de gestion commerciale), non imposée : tout écart doit pouvoir être justifié.",{"customFields":87,"tags":88,"creator":89,"readonly":29,"purposes":90,"dataProcessings":93,"dataFields":95,"asset":28,"subjectCategories":115,"id":116,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":117,"description":28,"dateCreation":118,"dateUpdate":119,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":120,"baseActiveLegalBasis":121,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":120,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":83,"destructionLegalBasis":28,"dataSetSource":84,"sourceDescription":122,"assetId":28,"source":55},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[91,92],"18c9d01e-0250-4bed-b700-5d7e90dfa3a7","ecb121c3-a1da-4b1a-9d62-e409114d3e69",[94],{"id":37,"label":38,"ref":28,"description":39,"workspaceId":40,"archived":29,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},[96,102,108],{"id":97,"customFields":98,"ref":28,"archivingPolicy":28,"required":29,"label":99,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":66,"dataType":28,"dateCreation":100,"dateUpdate":28,"creator":101,"workflowStepId":54,"workflowStep":28,"source":55},"282b3142-5390-4b03-02aa-08df38010ba5",{},"Index et consommation journalière","2026-11-03T07:46:24.7018977",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":103,"customFields":104,"ref":28,"archivingPolicy":28,"required":29,"label":105,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":66,"dataType":28,"dateCreation":106,"dateUpdate":28,"creator":107,"workflowStepId":54,"workflowStep":28,"source":55},"d6efc658-b358-4563-02ab-08df38010ba5",{},"Consommation horaire ou à la demi-heure (avec accord)","2026-11-03T07:46:24.8989114",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":109,"customFields":110,"ref":28,"archivingPolicy":28,"required":29,"label":111,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":112,"dataType":28,"dateCreation":113,"dateUpdate":28,"creator":114,"workflowStepId":54,"workflowStep":28,"source":55},"d93a632b-679f-4f96-02ac-08df38010ba5",{},"Historique de facturation","EconomicFinancialData","2026-11-03T07:46:25.0841951",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"58ae97df-7e0c-4a7b-df1e-08df38010b98","Consommations et relevés","2026-11-03T07:46:27.3756282","2026-11-03T07:46:27.9210185","","La page de la CNIL sur Linky et Gazpar ne précise pas de durée de conservation.","Durée indicative, non imposée par un texte : fixée par le responsable de traitement selon la finalité (art. 5.1.e du RGPD). Aucune source officielle retrouvée.",{"customFields":124,"tags":125,"creator":126,"readonly":29,"purposes":127,"dataProcessings":128,"dataFields":130,"asset":28,"subjectCategories":143,"id":144,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":145,"description":28,"dateCreation":146,"dateUpdate":147,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":80,"baseActiveLegalBasis":148,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":149,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":83,"destructionLegalBasis":28,"dataSetSource":84,"sourceDescription":150,"assetId":28,"source":55},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[91],[129],{"id":37,"label":38,"ref":28,"description":39,"workspaceId":40,"archived":29,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},[131,137],{"id":132,"customFields":133,"ref":28,"archivingPolicy":28,"required":29,"label":134,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":112,"dataType":28,"dateCreation":135,"dateUpdate":28,"creator":136,"workflowStepId":54,"workflowStep":28,"source":55},"acd74ac1-5a60-4667-02ad-08df38010ba5",{},"Montant, échéance et statut des factures","2026-11-03T07:46:25.2862782",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":138,"customFields":139,"ref":28,"archivingPolicy":28,"required":29,"label":140,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":112,"dataType":28,"dateCreation":141,"dateUpdate":28,"creator":142,"workflowStepId":54,"workflowStep":28,"source":55},"6d0c3b7c-a5cb-4267-02ae-08df38010ba5",{},"Mode de paiement et IBAN","2026-11-03T07:46:25.5043354",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"33cb9180-ca99-464a-df1f-08df38010b98","Facturation et paiement","2026-11-03T07:46:28.157409","2026-11-03T07:46:28.5109184","Le référentiel CNIL cite l'obligation comptable de 10 ans comme exemple d'archivage intermédiaire ; le cryptogramme de la carte doit être supprimé dès le paiement.","Archivage comptable","Exemple de durée du référentiel CNIL (obligation comptable de 10 ans) ; texte du Code de commerce non ouvert, à confirmer.",{"customFields":152,"tags":153,"creator":154,"readonly":29,"purposes":155,"dataProcessings":157,"dataFields":159,"asset":28,"subjectCategories":178,"id":179,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":180,"description":28,"dateCreation":181,"dateUpdate":182,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":183,"baseActiveLegalBasis":184,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":185,"intermediateArchivingRetentionDuration":186,"intermediateArchivingMinMax":28,"destructionDescription":83,"destructionLegalBasis":28,"dataSetSource":84,"sourceDescription":187,"assetId":28,"source":55},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[156],"d3656e52-09af-4fee-828e-9f72ff5f4840",[158],{"id":37,"label":38,"ref":28,"description":39,"workspaceId":40,"archived":29,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},[160,166,172],{"id":161,"customFields":162,"ref":28,"archivingPolicy":28,"required":29,"label":163,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":112,"dataType":28,"dateCreation":164,"dateUpdate":28,"creator":165,"workflowStepId":54,"workflowStep":28,"source":55},"99ad5dd6-6915-4e92-02af-08df38010ba5",{},"Montant, date et statut de la dette","2026-11-03T07:46:25.6948823",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":167,"customFields":168,"ref":28,"archivingPolicy":28,"required":29,"label":169,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":112,"dataType":28,"dateCreation":170,"dateUpdate":28,"creator":171,"workflowStepId":54,"workflowStep":28,"source":55},"26155809-9f74-4524-02b0-08df38010ba5",{},"Échanges de relance et d'échéancier","2026-11-03T07:46:25.8752347",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":173,"customFields":174,"ref":28,"archivingPolicy":28,"required":29,"label":175,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":112,"dataType":28,"dateCreation":176,"dateUpdate":28,"creator":177,"workflowStepId":54,"workflowStep":28,"source":55},"aa94f955-c852-4f8f-02b1-08df38010ba5",{},"Indicateur de bénéficiaire d'une aide au paiement","2026-11-03T07:46:26.0529961",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"9e24ba21-f0a1-4b34-df20-08df38010b98","Dossier d'impayé et situation de précarité","2026-11-03T07:46:28.70227","2026-11-03T07:46:29.0696678","Effacement dans les 48 heures suivant la régularisation","Référentiel CNIL relatif à la gestion des impayés : effacement sous 48 heures après régularisation ; sinon conservation dans la limite de 5 ans à compter de l'impayé.","En l'absence de régularisation, 5 ans au plus à compter de la survenance de l'impayé",2628000,"Recommandation CNIL (référentiel impayés), non imposée : un organisme peut s'en écarter en le justifiant.",{"customFields":189,"tags":190,"creator":191,"readonly":29,"purposes":192,"dataProcessings":193,"dataFields":195,"asset":28,"subjectCategories":208,"id":209,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":210,"description":28,"dateCreation":211,"dateUpdate":212,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":213,"baseActiveLegalBasis":214,"baseActiveRetentionDuration":215,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":120,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":83,"destructionLegalBasis":28,"dataSetSource":84,"sourceDescription":216,"assetId":28,"source":55},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[34],[194],{"id":37,"label":38,"ref":28,"description":39,"workspaceId":40,"archived":29,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},[196,202],{"id":197,"customFields":198,"ref":28,"archivingPolicy":28,"required":29,"label":199,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":51,"dataType":28,"dateCreation":200,"dateUpdate":28,"creator":201,"workflowStepId":54,"workflowStep":28,"source":55},"fe4362d5-fd9d-46d3-02b2-08df38010ba5",{},"Coordonnées du prospect","2026-11-03T07:46:26.2675162",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":203,"customFields":204,"ref":28,"archivingPolicy":28,"required":29,"label":205,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":66,"dataType":28,"dateCreation":206,"dateUpdate":28,"creator":207,"workflowStepId":54,"workflowStep":28,"source":55},"39e68cb5-ef72-4bc5-02b3-08df38010ba5",{},"Date du dernier contact et origine des données","2026-11-03T07:46:26.4268112",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"23eaf984-e69f-457e-df21-08df38010b98","Fichier prospects et démarchage","2026-11-03T07:46:29.2611458","2026-11-03T07:46:29.6540524","3 ans à compter de la collecte ou du dernier contact","Référentiel CNIL de gestion commerciale : prospects conservés 3 ans à compter de la collecte ou du dernier contact émanant du prospect.",1576800,"Recommandation CNIL (référentiel de gestion commerciale), non imposée.",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],{},{"dpo":28,"referent":28,"owner":28,"representative":28,"dataProtectionAuthority":28,"id":43,"type":222,"parentId":28,"ref":28,"label":223,"description":28,"logoUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"countryCode":224,"immatriculationNumber":28,"phoneNumber":28,"mailAddress":28,"dpoId":28,"referentId":28,"ownerId":28,"representativeId":28,"dataProtectionAuthorityId":28},"Entity","Entité","FR",{"dpo":28,"referent":28,"owner":28,"representative":28,"dataProtectionAuthority":28,"id":43,"type":222,"parentId":28,"ref":28,"label":223,"description":28,"logoUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"countryCode":224,"immatriculationNumber":28,"phoneNumber":28,"mailAddress":28,"dpoId":28,"referentId":28,"ownerId":28,"representativeId":28,"dataProtectionAuthorityId":28},{"id":227,"label":228,"color":229,"order":31,"itemLimit":28,"type":11,"finalStep":29,"initialStep":230,"authorizedRole":28,"authorizedRoleId":28,"descriptionHtml":28,"mappedState":231},9439,"A compléter","#CCCCCC",true,"Draft",[],[],[],[236,250,262,273,286,297,308,318,328,339,350,360,370,381,392,403,413],{"date":237,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":239,"id":240,"ref":28,"label":241,"type":242,"description":243,"relatedRisk":28,"moreDetailsUrl":244,"dateCreation":245,"dateUpdate":28,"tags":246,"attachments":247,"creatorUser":248,"workflowStepId":249,"workflowStep":28},"2026-11-03T11:39:36.2727386Z","Done",{},"beba9da4-69b2-451b-69b0-08df38010b92","Pilotage de la sécurité des données","Organizational","L’intégration de la protection des données personnelles dans les processus de décision de l’organisme permet d’en assurer la prise en compte dans la durée et aux moments clés d’arbitrages des budgets et des projets. Les précautions élémentaires Impliquer la direction et formaliser des objectifs généraux en matière de sécurité et de protection des données personnelles, validés par la direction de l’organisme.","https://www.cnil.fr/fr/securite-piloter-la-securite-des-donnees","2026-11-02T20:57:37.2709862",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},90384,{"date":251,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":252,"id":253,"ref":28,"label":254,"type":242,"description":255,"relatedRisk":28,"moreDetailsUrl":256,"dateCreation":257,"dateUpdate":258,"tags":259,"attachments":260,"creatorUser":28,"workflowStepId":261,"workflowStep":28},"2026-11-03T11:39:36.2727441Z",{},"cde1cad2-4195-4ffe-9406-08dd823909d1","Cadre d'usage des utilisateurs","La charte doit rappeler les règles de protection des données et les sanctions possibles, définir son champ d’application (interventions informatiques, moyens d’authentification) et énoncer les règles de sécurité : signaler toute tentative d’intrusion, garder ses identifiants secrets, ne pas installer ni modifier de logiciels sans autorisation, verrouiller son poste en cas d’absence, n’accéder qu’aux informations utiles et respecter la procédure pour copier des données sur supports amovibles. Elle précise aussi les conditions d’usage des équipements informatiques et télécoms (poste de travail, matériels nomades, stockage, réseaux, appareils personnels, Internet, messagerie, téléphonie), les modalités d’administration du système (filtrage, traçabilité, gestion des postes) ainsi que les responsabilités et sanctions en cas de manquement.","https://www.cnil.fr/fr/securite-definir-un-cadre-pour-les-utilisateurs","2025-04-25T07:14:13.031896","2026-11-02T20:57:14.658541",[],[],90385,{"date":263,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":264,"id":265,"ref":28,"label":266,"type":242,"description":267,"relatedRisk":28,"moreDetailsUrl":268,"dateCreation":269,"dateUpdate":270,"tags":271,"attachments":272,"creatorUser":28,"workflowStepId":261,"workflowStep":28},"2026-11-03T11:39:36.272745Z",{},"d77a94b8-cd42-409c-a02e-323ffad3924a","Sensibilisation et formation des utilisateurs","Les erreurs humaines et les attaques par ingénierie sociale sont à l’origine d’un nombre important d’incidents de sécurité. Les solutions techniques ne sont pas suffisantes pour assurer la protection des données personnelles détenues par un organisme.","https://www.cnil.fr/fr/securite-impliquer-et-former-les-utilisateurs","2019-01-01T00:00:00","2026-11-02T20:57:16.1776695",[],[],{"date":274,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":275,"id":276,"ref":28,"label":277,"type":278,"description":279,"relatedRisk":280,"moreDetailsUrl":281,"dateCreation":282,"dateUpdate":283,"tags":284,"attachments":285,"creatorUser":28,"workflowStepId":261,"workflowStep":28},"2026-11-03T11:39:36.2727459Z",{},"6c2ddc74-6750-4e76-bdad-317c6c0305ce","Authentification des utilisateurs","Technical","Avant toute utilisation des moyens informatiques, un utilisateur doit être doté d’un identifiant qui lui est propre et doit s’authentifier afin de permettre de contrôler son identité et ses accès aux données dont il a besoin. Les mécanismes permettant de réaliser l’authentification des personnes sont catégorisés selon qu’ils font intervenir :","Accès non autorisé, mots de passe partagés.","https://www.cnil.fr/fr/securite-authentifier-les-utilisateurs","2021-10-19T15:35:32.3166158","2026-11-02T20:57:18.0371731",[],[],{"date":287,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":288,"id":289,"ref":28,"label":290,"type":242,"description":291,"relatedRisk":28,"moreDetailsUrl":292,"dateCreation":293,"dateUpdate":294,"tags":295,"attachments":296,"creatorUser":28,"workflowStepId":261,"workflowStep":28},"2026-11-03T11:39:36.2727469Z",{},"f54ac346-ee7b-45de-9cc0-39506032df7e","Gestion des habilitations","Respecter le principe de moindre privilège, à travers la gestion des profils d’habilitation, permet de limiter les conséquences d’une usurpation de comptes ou d’une erreur de manipulation.","https://www.cnil.fr/fr/securite-gerer-les-habilitations","2021-10-19T15:35:32.1054015","2026-11-02T20:57:19.3398542",[],[],{"date":298,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":299,"id":300,"ref":28,"label":301,"type":278,"description":302,"relatedRisk":28,"moreDetailsUrl":303,"dateCreation":304,"dateUpdate":305,"tags":306,"attachments":307,"creatorUser":28,"workflowStepId":261,"workflowStep":28},"2026-11-03T11:39:36.2727479Z",{},"f748340f-fe32-47c4-983c-135130915929","Sécurité des postes de travail","Les risques d’intrusion dans les systèmes informatiques sont multiples et les postes de travail constituent un des principaux points d’entrée.","https://www.cnil.fr/fr/securite-securiser-les-postes-de-travail","2021-12-15T14:06:35.2861825","2026-11-02T20:57:20.9746731",[],[],{"date":309,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":310,"id":311,"ref":28,"label":312,"type":278,"description":313,"relatedRisk":28,"moreDetailsUrl":314,"dateCreation":269,"dateUpdate":315,"tags":316,"attachments":317,"creatorUser":28,"workflowStepId":261,"workflowStep":28},"2026-11-03T11:39:36.2727487Z",{},"ac192187-f8f9-42aa-9111-814f4a321407","Protection du réseau informatique","Le réseau interne interconnecte l’ensemble des composants des systèmes d’information d’un organisme et dispose souvent de points de connexion avec l’extérieur. Il s’agit tout autant d’un point d’entrée que d’un support de propagation des attaques. Il est donc primordial de sécuriser le réseau interne.","https://www.cnil.fr/fr/securite-proteger-le-reseau-informatique","2026-11-02T20:57:22.9977424",[],[],{"date":319,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":320,"id":321,"ref":28,"label":322,"type":278,"description":323,"relatedRisk":28,"moreDetailsUrl":324,"dateCreation":269,"dateUpdate":325,"tags":326,"attachments":327,"creatorUser":28,"workflowStepId":261,"workflowStep":28},"2026-11-03T11:39:36.2727495Z",{},"ed9bf5c2-97d3-4505-9b42-adabf6e7bd1d","Sécurité des serveurs","La sécurité des serveurs doit être une priorité car ils centralisent un grand nombre de données et hébergent les services permettant d’y accéder et de les manipuler. Les précautions élémentaires Désinstaller ou désactiver les services et interfaces inutiles. Limiter l’accès aux outils et interfaces d’administration aux seules personnes habilitées. Utiliser des comptes de moindres privilèges pour les opérations courantes.","https://www.cnil.fr/fr/securite-securiser-les-serveurs","2026-11-02T20:57:24.1598199",[],[],{"date":329,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":330,"id":331,"ref":28,"label":332,"type":333,"description":334,"relatedRisk":28,"moreDetailsUrl":335,"dateCreation":269,"dateUpdate":336,"tags":337,"attachments":338,"creatorUser":28,"workflowStepId":261,"workflowStep":28},"2026-11-03T11:39:36.2727504Z",{},"56e975ff-1611-4612-b85c-c7efcdd47c2c","Protection des locaux","Physical","L’accès aux locaux doit être contrôlé pour éviter ou ralentir un accès direct, non autorisé, que ce soit aux fichiers papier ou aux matériels informatiques, notamment aux serveurs. Les locaux doivent également être protégés contre les autres types de menaces (ex. : incendie, inondation). Les précautions élémentaires Restreindre les accès aux locaux au moyen de portes verrouillées. Installer des alarmes anti-intrusion et les vérifier périodiquement leur bon fonctionnement périodiquement.","https://www.cnil.fr/fr/securite-proteger-les-locaux","2026-11-02T20:57:28.139351",[],[],{"date":340,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":341,"id":342,"ref":28,"label":343,"type":242,"description":344,"relatedRisk":28,"moreDetailsUrl":345,"dateCreation":346,"dateUpdate":28,"tags":347,"attachments":348,"creatorUser":349,"workflowStepId":249,"workflowStep":28},"2026-11-03T11:39:36.2727513Z",{},"637227f2-e809-4991-69b1-08df38010b92","Encadrement de la maintenance et de la fin de vie des matériels et logiciels","Les opérations de support doivent être encadrées pour maitriser l’accès aux données par les prestataires. Les données doivent être préalablement effacées des matériels destinés à être mis au rebut.","https://www.cnil.fr/fr/securite-encadrer-la-maintenance-et-la-fin-de-vie-des-materiels-et-logiciels","2026-11-02T20:57:38.8686714",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":351,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":352,"id":353,"ref":28,"label":354,"type":278,"description":355,"relatedRisk":28,"moreDetailsUrl":356,"dateCreation":269,"dateUpdate":357,"tags":358,"attachments":359,"creatorUser":28,"workflowStepId":261,"workflowStep":28},"2026-11-03T11:39:36.2727521Z",{},"c8b527e2-07bc-4677-8c00-d222be26d357","Traçabilité des opérations","Afin de pouvoir identifier un accès frauduleux ou une utilisation abusive de données personnelles, ou de déterminer l’origine d’un incident, il convient d’enregistrer certaines des actions effectuées sur les systèmes informatiques. Les traces alors collectées sont également des éléments de preuve utiles pour la démonstration de la conformité.","https://www.cnil.fr/fr/securite-tracer-les-operations","2026-11-02T20:57:33.4681365",[],[],{"date":361,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":362,"id":363,"ref":28,"label":364,"type":278,"description":365,"relatedRisk":28,"moreDetailsUrl":366,"dateCreation":269,"dateUpdate":367,"tags":368,"attachments":369,"creatorUser":28,"workflowStepId":261,"workflowStep":28},"2026-11-03T11:39:36.2727529Z",{},"cae348c2-e9f2-4e49-8d60-ab56e438d5a4","Sauvegarde","Des copies de sauvegarde doivent être réalisées et testées régulièrement pour être disponibles en cas de besoin. Les précautions élémentaires S’agissant de la sauvegarde des données","https://www.cnil.fr/fr/securite-sauvegarder","2026-11-02T20:57:34.7827534",[],[],{"date":371,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":372,"id":373,"ref":28,"label":374,"type":278,"description":375,"relatedRisk":28,"moreDetailsUrl":376,"dateCreation":377,"dateUpdate":28,"tags":378,"attachments":379,"creatorUser":380,"workflowStepId":249,"workflowStep":28},"2026-11-03T11:39:36.2727538Z",{},"6eddff0a-1378-4160-69b2-08df38010b92","Continuité et reprise d'activité","Pour limiter le temps d’indisponibilité du système, il faut anticiper les incidents les plus courants. Assurer la continuité d’activité consiste à prévoir des moyens de continuer de fonctionner, en général de manière dégradée, malgré des dysfonctionnements. La reprise d’activité, quant à elle, englobe toutes les actions nécessaires pour relancer un système arrêté.","https://www.cnil.fr/fr/securite-prevoir-la-continuite-et-la-reprise-dactivite","2026-11-02T20:57:39.8112993",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":382,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":383,"id":384,"ref":28,"label":385,"type":242,"description":386,"relatedRisk":28,"moreDetailsUrl":387,"dateCreation":388,"dateUpdate":28,"tags":389,"attachments":390,"creatorUser":391,"workflowStepId":249,"workflowStep":28},"2026-11-03T11:39:36.2727545Z",{},"10c6151c-c44c-46df-69b3-08df38010b92","Gestion des incidents et des violations","Il convient d’être préparé à l’éventualité d’un incident pour intervenir à temps et de manière appropriée, en intégrant l’objectif de limiter les effets pour les personnes dont les données sont concernées. Le responsable de traitement peut être amené à notifier la CNIL ou informer les personnes concernées de l’incident en fonction du risque pour celles-ci.","https://www.cnil.fr/fr/securite-gerer-les-incidents-et-les-violations","2026-11-02T20:57:40.7676498",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":393,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":394,"id":395,"ref":28,"label":396,"type":242,"description":397,"relatedRisk":28,"moreDetailsUrl":398,"dateCreation":399,"dateUpdate":28,"tags":400,"attachments":401,"creatorUser":402,"workflowStepId":249,"workflowStep":28},"2026-11-03T11:39:36.2727572Z",{},"e064565b-514e-4755-69b4-08df38010b92","Analyse de risques","En parallèle de la mise en conformité aux précautions élémentaires présentées dans ce guide, il est pertinent, voire obligatoire selon la criticité des traitements, de réaliser des analyses de risques relative à la protection des données. Ces analyses permettent de décider des mesures de sécurité complémentaires, adaptées au contexte, permettant de limiter l’impact sur les personnes concernées par le traitement.","https://www.cnil.fr/fr/securite-analyse-de-risques","2026-11-02T20:57:42.2940193",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":404,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":405,"id":406,"ref":28,"label":407,"type":242,"description":408,"relatedRisk":28,"moreDetailsUrl":409,"dateCreation":269,"dateUpdate":410,"tags":411,"attachments":412,"creatorUser":28,"workflowStepId":261,"workflowStep":28},"2026-11-03T11:39:36.2727582Z",{},"47c52bcb-a6e9-487b-a958-f027b20dbd87","Encadrement de la sous-traitance","Les traitements de données réalisés par un sous-traitant pour le compte du responsable de traitement doivent bénéficier de garanties suffisantes, notamment en matière de sécurité.","https://www.cnil.fr/fr/securite-gerer-la-sous-traitance","2026-11-02T20:57:31.4211019",[],[],{"date":414,"state":238,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":415,"id":416,"ref":28,"label":417,"type":242,"description":418,"relatedRisk":28,"moreDetailsUrl":419,"dateCreation":269,"dateUpdate":420,"tags":421,"attachments":422,"creatorUser":28,"workflowStepId":261,"workflowStep":28},"2026-11-03T11:39:36.2727589Z",{},"49230bff-1cd3-46bd-85f5-e43809136dc9","Sécurité des échanges avec l'extérieur","Sans mesure complémentaire, les canaux de transmission de données grand public (ex. : messagerie électronique, messagerie instantanée, plateforme de dépôt de fichiers) constituent rarement un moyen de communication sûr pour transmettre des données personnelles. Une simple erreur d’inattention peut conduire des personnes non habilitées à prendre connaissance de données personnelles, ce qui porte atteinte au droit à la vie privée des personnes concernées.","https://www.cnil.fr/fr/securite-securiser-les-echanges-avec-lexterieur","2026-11-02T20:57:29.3610605",[],[],[424,433,441,449],{"subjectCategory":425,"displayName":427,"id":431,"subjectCategoryId":426,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":432},{"id":426,"label":427,"ref":28,"dateCreation":428,"dateUpdate":28,"creatorUserId":28,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":429,"workflowStep":28,"dataRetentionRules":430},"983407ad-24f5-48b6-268b-08dac757bbf1","Clients","2022-11-15T22:21:36.912217",97319,[],"18f22b11-333f-4ad2-e6e8-08df38010be0",[],{"subjectCategory":434,"displayName":436,"id":439,"subjectCategoryId":435,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":440},{"id":435,"label":436,"ref":28,"dateCreation":437,"dateUpdate":28,"creatorUserId":28,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":429,"workflowStep":28,"dataRetentionRules":438},"cfe84374-765b-44fd-268c-08dac757bbf1","Anciens clients","2022-11-15T22:21:37.4944855",[],"14a7ce08-7ce8-4b6c-e6e9-08df38010be0",[],{"subjectCategory":442,"displayName":444,"id":447,"subjectCategoryId":443,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":448},{"id":443,"label":444,"ref":28,"dateCreation":445,"dateUpdate":28,"creatorUserId":28,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":429,"workflowStep":28,"dataRetentionRules":446},"3449d5e1-429a-41f0-268a-08dac757bbf1","Prospects","2022-11-15T22:21:36.3632622",[],"1c67e2ff-5417-4569-e6ea-08df38010be0",[],{"subjectCategory":450,"displayName":452,"id":456,"subjectCategoryId":451,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":457},{"id":451,"label":452,"ref":28,"dateCreation":453,"dateUpdate":28,"creatorUserId":454,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":429,"workflowStep":28,"dataRetentionRules":455},"1342173f-ef7e-432a-a1b8-01a0b9b1dd9e","Utilisateurs","2023-03-22T17:20:52.1013434",31,[],"f676af5b-3b2d-4d4c-e6eb-08df38010be0",[],"\u003Cblockquote>\u003Cp>\u003Cstrong>Modèle à adapter\u003C/strong>\u003C/p>\u003Cp>Modèle de traitement fourni à titre indicatif, à adapter à votre organisation. Les finalités, les données, les durées de conservation, les destinataires, les mesures de sécurité et l'analyse d'impact y sont des valeurs de départ, établies à partir des textes et référentiels cités ci-dessous. \u003Cstrong>Ce modèle ne constitue pas un avis juridique\u003C/strong> : faites-le valider par votre DPO ou votre conseil.\u003C/p>\u003C/blockquote>\u003Cblockquote>\u003Cp>\u003Cstrong>Point d'attention\u003C/strong> : Le modèle existant concerne la facturation par une collectivité ; celui-ci vise un fournisseur privé d'énergie, avec contrats, prospection et impayés. Les compteurs communicants (Linky, Gazpar) font l'objet d'un autre modèle : ils ne sont abordés ici que pour le consentement aux données fines. Le Code de l'énergie et le médiateur de l'énergie n'ont pas pu être lus.\u003C/p>\u003C/blockquote>\u003Ch3>Sources\u003C/h3>\u003Cp>\u003Cem>Classement selon le guide pratique CNIL « Les durées de conservation ».\u003C/em>\u003C/p>\u003Cul>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/gestion-commerciale-et-gestion-des-impayes-la-cnil-publie-deux-nouveaux-referentiels\">CNIL, Gestion commerciale et gestion des impayés : la CNIL publie deux nouveaux référentiels\u003C/a>. Présentation des deux référentiels : finalités de la gestion commerciale (contrats, fidélité, relation client, prospection), exclusions (fraude, profilage à partir de sources tierces, traceurs), données sensibles, renvoi au référentiel impayés.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (durée recommandée)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/sites/cnil/files/atoms/files/referentiel_traitements-donnees-caractere-personnel_gestion-activites-commerciales.pdf\">CNIL, Référentiel relatif aux traitements de données mis en oeuvre aux fins de gestion des activités commerciales\u003C/a>. Finalités et données de la gestion commerciale. Durées proposées : données clients conservées pendant la relation commerciale puis trois ans à compter de sa fin (pour la prospection), prospects trois ans à compter de la collecte ou du dernier contact, cryptogramme de carte supprimé dès le paiement, archivage intermédiaire limité aux obligations légales (exemple cité : obligation comptable de 10 ans) ou à la preuve dans la limite de la prescription. Le référentiel n'est pas obligatoire : tout écart doit pouvoir être justifié.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (durée recommandée)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/sites/cnil/files/atoms/files/referentiel_traitements-donnees-caractere-personnel_gestion-impayes_transaction_commerciale.pdf\">CNIL, Référentiel relatif à la gestion des impayés dans une transaction commerciale\u003C/a>. Effacement du fichier des impayés dans les 48 heures suivant la régularisation, conservation possible au plus 5 ans à compter de la survenance de l'impayé en l'absence de régularisation, archivage possible en cas d'obligation légale ou pour la preuve.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (durée recommandée)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/questions-reponses-sur-les-referentiels-relatifs-la-gestion-des-activites-commerciales-et-des\">CNIL, Questions-réponses sur les référentiels relatifs à la gestion des activités commerciales et des impayés dans une transaction commerciale\u003C/a>. Durées (clients, prospects, comptes inactifs deux ans, liste d'opposition trois ans minimum), bases légales (intérêt légitime pour la prospection B2B, exécution du contrat plutôt qu'intérêt légitime pour les impayés), périmètre des impayés (dette avérée, hors scoring), information à trois moments.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/communication-electronique-quelles-regles\">CNIL, Communications par voie électronique aux prospects et clients : quelles règles respecter ?\u003C/a>. Consentement préalable à la prospection électronique vers les particuliers (art. L. 34-5 du CPCE), exception pour les clients et produits ou services analogues, opposition à chaque message, B2B.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/linky-gazpar-quelles-donnees-sont-collectees-et-transmises-par-les-compteurs-communicants\">CNIL, Linky, Gazpar : quelles données sont collectées et transmises par les compteurs communicants ?\u003C/a>. Données journalières collectées par défaut, données fines uniquement avec l'accord de l'abonné, transmission aux fournisseurs soumise à son accord, choix modifiable à tout moment.\u003C/li>\u003C/ul>","Automatic","ManualOrOnDemand","Les personnes sont informées au moment de la collecte (art. 13 du RGPD) ou, en cas de collecte indirecte, au plus tard dans un délai d'un mois (art. 14).","Lien de désinscription dans chaque message de prospection (art. 21.2 et 21.3 du RGPD).",[],[465,473,480,495,502,508,515],{"purposes":466,"dataRetentionRules":28,"parentId":28,"children":467,"displayName":468,"label":468,"transfers":469,"recipientType":470,"type":471,"jobTitle":28,"id":472,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Services clients, facturation et recouvrement",[],"InternalService","Recipient","4bdc714f-d364-4a16-a103-08df38010bcb",{"purposes":474,"dataRetentionRules":28,"parentId":28,"children":475,"displayName":476,"label":476,"transfers":477,"recipientType":478,"type":471,"jobTitle":28,"id":479,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Gestionnaire de réseau de distribution (Enedis, GRDF ou régie locale)",[],"ThirdParty","561e3d44-23bd-42b2-a104-08df38010bcb",{"purposes":481,"dataRetentionRules":28,"parentId":28,"children":482,"displayName":483,"label":484,"transfers":485,"recipientType":486,"type":471,"jobTitle":28,"id":487,"actorId":488,"actor":489,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Sous-traitant à préciser","Prestataires de recouvrement et d'édition de factures",[],"Vendor","59c437b5-63aa-4b62-a105-08df38010bcb","1af96d46-eb9e-45f3-64bc-08df38010bd1",{"label":483,"id":488,"ref":28,"dateCreation":490,"dateUpdate":28,"reviewDate":28,"nextReviewDate":28,"logoUrl":28,"state":491,"actorType":492,"description":493,"countryCode":28,"readonly":29,"email":28,"phoneNumber":28,"contactName":28,"contactPosition":28,"immatriculationNumber":28,"websiteUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"workflowStepId":494,"areaId":28,"source":55},"2026-11-02T20:57:51.2801474","New","Morale","Acteur générique des modèles de traitement : à remplacer par le prestataire retenu (sous-traitant au sens de l'article 28 du RGPD).",76516,{"purposes":496,"dataRetentionRules":28,"parentId":28,"children":497,"displayName":483,"label":498,"transfers":499,"recipientType":486,"type":471,"jobTitle":28,"id":500,"actorId":488,"actor":501,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Prestataire de paiement en ligne",[],"f49ea916-3bf8-4cfa-a106-08df38010bcb",{"label":483,"id":488,"ref":28,"dateCreation":490,"dateUpdate":28,"reviewDate":28,"nextReviewDate":28,"logoUrl":28,"state":491,"actorType":492,"description":493,"countryCode":28,"readonly":29,"email":28,"phoneNumber":28,"contactName":28,"contactPosition":28,"immatriculationNumber":28,"websiteUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"workflowStepId":494,"areaId":28,"source":55},{"purposes":503,"dataRetentionRules":28,"parentId":28,"children":504,"displayName":505,"label":505,"transfers":506,"recipientType":478,"type":471,"jobTitle":28,"id":507,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Services sociaux et organismes d'aide au paiement",[],"61802f83-cfbb-46d1-a107-08df38010bcb",{"purposes":509,"dataRetentionRules":28,"parentId":28,"children":510,"displayName":511,"label":511,"transfers":512,"recipientType":513,"type":471,"jobTitle":28,"id":514,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Médiateur de l'énergie, en cas de litige",[],"AuthorizedThirdParty","c3a1b3cd-5205-4a4b-a108-08df38010bcb",{"purposes":516,"dataRetentionRules":28,"parentId":28,"children":517,"displayName":518,"label":518,"transfers":519,"recipientType":520,"type":471,"jobTitle":28,"id":521,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Client concerné",[],"DataSubject","6c13dd68-cbc2-4e21-a109-08df38010bcb",[],[524,530,534,538,544],{"id":525,"key":33,"label":526,"description":527,"legalBasis":528,"legalBasisText":529,"legalBasisDescription":28,"readonly":29},"24e88b3f-7f74-4b56-10b7-08df38010b80","Gestion du contrat de fourniture et du service client","Souscrire, exécuter et résilier le contrat, gérer les réclamations et le service après-vente (finalité de gestion des contrats du référentiel CNIL de gestion commerciale).","Contract","Contrat ou mesures précontractuelles",{"id":531,"key":91,"label":532,"description":533,"legalBasis":528,"legalBasisText":529,"legalBasisDescription":28,"readonly":29},"c74f3c16-82e2-49ed-10b8-08df38010b80","Facturation et recouvrement amiable","Établir les factures à partir des consommations, encaisser les paiements et relancer les impayés. La CNIL estime que l'exécution du contrat est la base la plus appropriée pour la gestion des impayés.",{"id":535,"key":156,"label":536,"description":537,"legalBasis":528,"legalBasisText":529,"legalBasisDescription":28,"readonly":29},"0baa8f9d-25eb-4899-10b9-08df38010b80","Suivi des impayés et accompagnement des clients en difficulté","Recenser les dettes avérées, informer le client à chaque étape (contrat, impayé, avant inscription) et orienter vers les dispositifs d'aide. Le référentiel CNIL exclut le scoring et le partage de listes de débiteurs avec des tiers.",{"id":539,"key":92,"label":540,"description":541,"legalBasis":542,"legalBasisText":543,"legalBasisDescription":28,"readonly":29},"eb67a41a-2efb-4ef2-10ba-08df38010b80","Utilisation des données de consommation fines","Utiliser les données de consommation horaires ou à la demi-heure issues des compteurs communicants. La CNIL indique qu'elles ne sont collectées qu'avec l'accord de l'abonné, qui peut le retirer à tout moment.","Consent","Consentement",{"id":545,"key":34,"label":546,"description":547,"legalBasis":542,"legalBasisText":543,"legalBasisDescription":28,"readonly":29},"334720ac-a3ff-478a-10bb-08df38010b80","Prospection commerciale et fidélisation","Proposer des offres aux clients et prospects. Consentement préalable pour la prospection électronique vers les particuliers, avec exception pour les produits ou services analogues fournis aux clients (art. L. 34-5 du CPCE, CNIL).",86,56,23]