[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbxPKpcVuwR2CfrB26v-zMbclJYdksx2u8DV4lrc_EtM":3},{"assets":4,"aiSystems":5,"attachments":6,"tags":7,"dataRetentionRules":21,"creatorUser":193,"creatorUserId":26,"updatedBy":194,"updatedById":26,"publishedBy":28,"publishedById":28,"areaOwnerId":28,"owners":195,"customFields":196,"area":197,"entity":201,"mergedFrom":28,"workflowStep":202,"accountables":208,"responsibles":209,"informedOwners":210,"securityMeasures":211,"personCategories":419,"id":37,"source":55,"label":38,"state":207,"versionDescription":28,"processingType":44,"parentId":28,"areaId":43,"mergeType":28,"readonly":29,"editable":206,"workflowStepId":203,"dateDeployment":28,"dateCreation":42,"dateArchived":28,"datePublication":28,"archived":29,"dateUpdate":41,"reviewDate":28,"nextReviewDate":28,"ref":28,"processingState":28,"description":39,"descriptionHtml":462,"subjectRightProcessDescription":28,"rightOfInformation":463,"rightOfAccess":464,"rightOfRectification":464,"rightOfErasure":464,"rightOfRestriction":464,"rightOfOpposition":464,"rightOfDataPortability":465,"advanceDirectives":464,"advanceDirectivesDescription":28,"rightOfInformationDescription":466,"rightOfAccessDescription":28,"rightOfRectificationDescription":28,"rightOfErasureDescription":28,"rightOfRestrictionDescription":28,"rightOfOppositionDescription":28,"rightOfDataPortabilityDescription":467,"stakeHolders":468,"assessmentScoring":29,"automaticDecision":29,"systematicMonitoring":29,"specialCategoryData":206,"largeScaleCollection":29,"crossReferencing":29,"vulnerablePeople":29,"isDPIARequired":29,"dpiaDate":28,"dpiaExemption":29,"dpiaExemptionJustification":28,"innovativeUse":29,"exclusionBenefitRightContract":29,"recipients":469,"dataControllers":525,"purposes":526,"progression":547,"quality":548,"sensitivity":549,"visible":206,"workspaceId":40,"nbReferences":31,"referenceId":28},[],[],[],[8,13,17],{"id":9,"label":10,"type":11,"color":12},"99e6f156-5bd7-4bc1-94c7-7f416665cf20","Organisme : Privé","DataProcessing","#64748B",{"id":14,"label":15,"type":11,"color":16},"16dac2ed-b874-4b94-ee32-08df38044b79","Secteur : Industrie","#0E7490",{"id":18,"label":19,"type":11,"color":20},"c41e5a5f-7e04-4459-874b-dba8c15f5231","Fonction : Moyens généraux","#B45309",[22,89,124,167],{"customFields":23,"tags":24,"creator":25,"readonly":29,"purposes":32,"dataProcessings":35,"dataFields":45,"asset":28,"subjectCategories":77,"id":78,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":79,"description":28,"dateCreation":80,"dateUpdate":81,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":82,"baseActiveLegalBasis":83,"baseActiveRetentionDuration":84,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":85,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":86,"destructionLegalBasis":28,"dataSetSource":87,"sourceDescription":88,"assetId":28,"source":55},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},1602,"bc4946f8-1de1-4b70-bb67-62a0ce536160",null,false,"#4DE034",0,[33,34],"d44fb062-94eb-4b53-8702-57c0abd8fe12","faf4f35e-4966-4839-829a-7c9be1fc45a2",[36],{"id":37,"label":38,"ref":28,"description":39,"workspaceId":40,"archived":29,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},"e471e661-250d-4aa1-36dd-08df38010b74","Sécurité et gestion des sites industriels (ICPE)","Ce modèle de traitement est relatif à la sécurité d'un site industriel classé (ICPE) : contrôle d'accès du personnel, des visiteurs et des entreprises extérieures, gestion des habilitations, tenue des registres d'accidents et de formation et mise en oeuvre du plan d'opération interne (POI) en cas de sinistre.",68,"2026-11-03T07:52:03.0025842","2026-11-03T07:52:01.7787355",354,"Default",[46,56,63,70],{"id":47,"customFields":48,"ref":28,"archivingPolicy":28,"required":29,"label":49,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":51,"dataType":28,"dateCreation":52,"dateUpdate":28,"creator":53,"workflowStepId":54,"workflowStep":28,"source":55},"05ca9a93-604c-477a-0357-08df38010ba5",{},"Nom, prénom et entreprise de la personne","Current","CivilStatus","2026-11-03T07:51:56.6367016",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},83450,"Api",{"id":57,"customFields":58,"ref":28,"archivingPolicy":28,"required":29,"label":59,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":60,"dataType":28,"dateCreation":61,"dateUpdate":28,"creator":62,"workflowStepId":54,"workflowStep":28,"source":55},"30ad4ce4-fd4d-44aa-0358-08df38010ba5",{},"Date, heure d'entrée et de sortie et zone d'accès","ConnectionData","2026-11-03T07:51:56.8575083",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":64,"customFields":65,"ref":28,"archivingPolicy":28,"required":29,"label":66,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":67,"dataType":28,"dateCreation":68,"dateUpdate":28,"creator":69,"workflowStepId":54,"workflowStep":28,"source":55},"39694b3f-164d-4b3d-0359-08df38010ba5",{},"Plaque d'immatriculation du véhicule","Other","2026-11-03T07:51:57.0407133",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":71,"customFields":72,"ref":28,"archivingPolicy":28,"required":29,"label":73,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":74,"dataType":28,"dateCreation":75,"dateUpdate":28,"creator":76,"workflowStepId":54,"workflowStep":28,"source":55},"e6fee2be-886f-4040-035a-08df38010ba5",{},"Motif de la visite et personne accueillante","ProfessionalLife","2026-11-03T07:51:57.2050746",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"3fd04c26-5f13-404a-df58-08df38010b98","Accès au site et présence","2026-11-03T07:51:59.0597047","2026-11-03T07:51:59.5073563","Journal d'accès conservé sur une période glissante","La CNIL indique, pour les traces de sécurité, une période glissante de six mois à un an, sauf obligation légale ou contentieux.",525600,"","À l'issue de la durée de conservation, les données sont supprimées de manière sécurisée ou anonymisées de façon irréversible.","Direct","Recommandation CNIL (guide de la sécurité, Tracer les opérations) : période glissante de six mois à un an. Valeur haute retenue, à ajuster par le responsable de traitement.",{"customFields":90,"tags":91,"creator":92,"readonly":29,"purposes":93,"dataProcessings":95,"dataFields":97,"asset":28,"subjectCategories":116,"id":117,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":118,"description":28,"dateCreation":119,"dateUpdate":120,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":121,"baseActiveLegalBasis":122,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":85,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":86,"destructionLegalBasis":28,"dataSetSource":87,"sourceDescription":123,"assetId":28,"source":55},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[94],"df6b5c9b-0a91-4393-94db-228cd9b3551a",[96],{"id":37,"label":38,"ref":28,"description":39,"workspaceId":40,"archived":29,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},[98,104,110],{"id":99,"customFields":100,"ref":28,"archivingPolicy":28,"required":29,"label":101,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":74,"dataType":28,"dateCreation":102,"dateUpdate":28,"creator":103,"workflowStepId":54,"workflowStep":28,"source":55},"9f1ff412-973e-48a5-035b-08df38010ba5",{},"Intitulé, date et validité des habilitations","2026-11-03T07:51:57.3795849",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":105,"customFields":106,"ref":28,"archivingPolicy":28,"required":29,"label":107,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":74,"dataType":28,"dateCreation":108,"dateUpdate":28,"creator":109,"workflowStepId":54,"workflowStep":28,"source":55},"1f8e248c-60c3-427d-035c-08df38010ba5",{},"Attestations de formation sécurité","2026-11-03T07:51:57.5549245",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":111,"customFields":112,"ref":28,"archivingPolicy":28,"required":29,"label":113,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":74,"dataType":28,"dateCreation":114,"dateUpdate":28,"creator":115,"workflowStepId":54,"workflowStep":28,"source":55},"4a3f4917-f142-4490-035d-08df38010ba5",{},"Employeur de l'intervenant et poste","2026-11-03T07:51:57.7512598",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"c910baa5-f888-4142-df59-08df38010b98","Habilitations et formations de sécurité","2026-11-03T07:51:59.6760099","2026-11-03T07:52:00.4847796","Durée de validité de l'habilitation puis durée de la relation de travail ou du contrat","Aucune durée générique imposée retrouvée.","Durée indicative, non imposée par un texte : fixée par le responsable de traitement selon la finalité (art. 5.1.e du RGPD). Aucune source officielle retrouvée.",{"customFields":125,"tags":126,"creator":127,"readonly":29,"purposes":128,"dataProcessings":130,"dataFields":132,"asset":28,"subjectCategories":158,"id":159,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":160,"description":28,"dateCreation":161,"dateUpdate":162,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":163,"baseActiveLegalBasis":164,"baseActiveRetentionDuration":165,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":85,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":86,"destructionLegalBasis":28,"dataSetSource":87,"sourceDescription":166,"assetId":28,"source":55},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[129],"3c461c6e-d4ee-40b7-9d94-6521912779dd",[131],{"id":37,"label":38,"ref":28,"description":39,"workspaceId":40,"archived":29,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},[133,139,145,152],{"id":134,"customFields":135,"ref":28,"archivingPolicy":28,"required":29,"label":136,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":51,"dataType":28,"dateCreation":137,"dateUpdate":28,"creator":138,"workflowStepId":54,"workflowStep":28,"source":55},"3d710c7c-b2c0-4af6-035e-08df38010ba5",{},"Identité de la victime","2026-11-03T07:51:57.9252262",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":140,"customFields":141,"ref":28,"archivingPolicy":28,"required":29,"label":142,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":74,"dataType":28,"dateCreation":143,"dateUpdate":28,"creator":144,"workflowStepId":54,"workflowStep":28,"source":55},"a329c317-b3c2-4cbb-035f-08df38010ba5",{},"Date, lieu et circonstances de l'accident","2026-11-03T07:51:58.0813754",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":146,"customFields":147,"ref":28,"archivingPolicy":28,"required":29,"label":148,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":149,"dataType":28,"dateCreation":150,"dateUpdate":28,"creator":151,"workflowStepId":54,"workflowStep":28,"source":55},"2b79413c-abc1-4259-0360-08df38010ba5",{},"Nature et siège des lésions","HealthData","2026-11-03T07:51:58.2867904",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":153,"customFields":154,"ref":28,"archivingPolicy":28,"required":29,"label":155,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":51,"dataType":28,"dateCreation":156,"dateUpdate":28,"creator":157,"workflowStepId":54,"workflowStep":28,"source":55},"d3b1bd3d-6958-444f-0361-08df38010ba5",{},"Identité des témoins","2026-11-03T07:51:58.4825386",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"5c587e91-1711-4056-df5a-08df38010b98","Registre des accidents et incidents","2026-11-03T07:52:00.6552097","2026-11-03T07:52:01.00281","Registre des accidents bénins conservé 5 ans à compter de la fin de l'exercice","INRS : le registre des accidents du travail bénins est conservé cinq ans à compter de la fin de l'exercice concerné.",2628000,"Obligation pour le registre des accidents du travail bénins (INRS). La durée des autres registres n'a pas été vérifiée.",{"customFields":168,"tags":169,"creator":170,"readonly":29,"purposes":171,"dataProcessings":172,"dataFields":174,"asset":28,"subjectCategories":187,"id":188,"ref":28,"externalId":28,"externalLastSyncDate":28,"externalSource":28,"label":189,"description":28,"dateCreation":190,"dateUpdate":191,"baseActiveOverride":29,"intermediateArchivingOverride":29,"destructionOverride":29,"baseActiveDescription":85,"baseActiveLegalBasis":192,"baseActiveRetentionDuration":28,"baseActiveMinMax":28,"intermediateArchivingLegalBasis":28,"intermediateArchivingDescription":85,"intermediateArchivingRetentionDuration":28,"intermediateArchivingMinMax":28,"destructionDescription":86,"destructionLegalBasis":28,"dataSetSource":87,"sourceDescription":123,"assetId":28,"source":55},{},[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[34],[173],{"id":37,"label":38,"ref":28,"description":39,"workspaceId":40,"archived":29,"dateUpdate":41,"dateCreation":42,"areaId":43,"processingType":44},[175,181],{"id":176,"customFields":177,"ref":28,"archivingPolicy":28,"required":29,"label":178,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":74,"dataType":28,"dateCreation":179,"dateUpdate":28,"creator":180,"workflowStepId":54,"workflowStep":28,"source":55},"84f6f9b9-dd89-4750-0362-08df38010ba5",{},"Rôle d'intervention et coordonnées d'astreinte","2026-11-03T07:51:58.6491113",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":182,"customFields":183,"ref":28,"archivingPolicy":28,"required":29,"label":184,"definition":28,"technicalDefinition":28,"sensitiveDataFieldLegalJustification":28,"sensitiveDataFieldLegalJustificationDescription":28,"sensitiveData":29,"sensitivityClassification":50,"personalDataCategory":51,"dataType":28,"dateCreation":185,"dateUpdate":28,"creator":186,"workflowStepId":54,"workflowStep":28,"source":55},"e226d6bf-521f-4e67-0363-08df38010ba5",{},"Liste des personnes présentes pour décompte en cas d'évacuation","2026-11-03T07:51:58.8739829",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],"fc650359-609f-4d78-df5b-08df38010b98","Plan d'opération interne et liste d'urgence","2026-11-03T07:52:01.2060976","2026-11-03T07:52:01.6037764","La circulaire de 2011 prévoit la mise à jour et le test du POI au plus tous les trois ans pour les établissements concernés ; elle ne fixe pas de durée de conservation des données.",{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},[],{},{"dpo":28,"referent":28,"owner":28,"representative":28,"dataProtectionAuthority":28,"id":43,"type":198,"parentId":28,"ref":28,"label":199,"description":28,"logoUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"countryCode":200,"immatriculationNumber":28,"phoneNumber":28,"mailAddress":28,"dpoId":28,"referentId":28,"ownerId":28,"representativeId":28,"dataProtectionAuthorityId":28},"Entity","Entité","FR",{"dpo":28,"referent":28,"owner":28,"representative":28,"dataProtectionAuthority":28,"id":43,"type":198,"parentId":28,"ref":28,"label":199,"description":28,"logoUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"countryCode":200,"immatriculationNumber":28,"phoneNumber":28,"mailAddress":28,"dpoId":28,"referentId":28,"ownerId":28,"representativeId":28,"dataProtectionAuthorityId":28},{"id":203,"label":204,"color":205,"order":31,"itemLimit":28,"type":11,"finalStep":29,"initialStep":206,"authorizedRole":28,"authorizedRoleId":28,"descriptionHtml":28,"mappedState":207},9439,"A compléter","#CCCCCC",true,"Draft",[],[],[],[212,226,238,249,262,273,284,294,304,315,326,336,346,357,368,379,389,399,409],{"date":213,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":215,"id":216,"ref":28,"label":217,"type":218,"description":219,"relatedRisk":28,"moreDetailsUrl":220,"dateCreation":221,"dateUpdate":28,"tags":222,"attachments":223,"creatorUser":224,"workflowStepId":225,"workflowStep":28},"2026-11-03T12:45:08.8871516Z","Done",{},"beba9da4-69b2-451b-69b0-08df38010b92","Pilotage de la sécurité des données","Organizational","L’intégration de la protection des données personnelles dans les processus de décision de l’organisme permet d’en assurer la prise en compte dans la durée et aux moments clés d’arbitrages des budgets et des projets. Les précautions élémentaires Impliquer la direction et formaliser des objectifs généraux en matière de sécurité et de protection des données personnelles, validés par la direction de l’organisme.","https://www.cnil.fr/fr/securite-piloter-la-securite-des-donnees","2026-11-02T20:57:37.2709862",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},90384,{"date":227,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":228,"id":229,"ref":28,"label":230,"type":218,"description":231,"relatedRisk":28,"moreDetailsUrl":232,"dateCreation":233,"dateUpdate":234,"tags":235,"attachments":236,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.8871566Z",{},"cde1cad2-4195-4ffe-9406-08dd823909d1","Cadre d'usage des utilisateurs","La charte doit rappeler les règles de protection des données et les sanctions possibles, définir son champ d’application (interventions informatiques, moyens d’authentification) et énoncer les règles de sécurité : signaler toute tentative d’intrusion, garder ses identifiants secrets, ne pas installer ni modifier de logiciels sans autorisation, verrouiller son poste en cas d’absence, n’accéder qu’aux informations utiles et respecter la procédure pour copier des données sur supports amovibles. Elle précise aussi les conditions d’usage des équipements informatiques et télécoms (poste de travail, matériels nomades, stockage, réseaux, appareils personnels, Internet, messagerie, téléphonie), les modalités d’administration du système (filtrage, traçabilité, gestion des postes) ainsi que les responsabilités et sanctions en cas de manquement.","https://www.cnil.fr/fr/securite-definir-un-cadre-pour-les-utilisateurs","2025-04-25T07:14:13.031896","2026-11-02T20:57:14.658541",[],[],90385,{"date":239,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":240,"id":241,"ref":28,"label":242,"type":218,"description":243,"relatedRisk":28,"moreDetailsUrl":244,"dateCreation":245,"dateUpdate":246,"tags":247,"attachments":248,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.8871574Z",{},"d77a94b8-cd42-409c-a02e-323ffad3924a","Sensibilisation et formation des utilisateurs","Les erreurs humaines et les attaques par ingénierie sociale sont à l’origine d’un nombre important d’incidents de sécurité. Les solutions techniques ne sont pas suffisantes pour assurer la protection des données personnelles détenues par un organisme.","https://www.cnil.fr/fr/securite-impliquer-et-former-les-utilisateurs","2019-01-01T00:00:00","2026-11-02T20:57:16.1776695",[],[],{"date":250,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":251,"id":252,"ref":28,"label":253,"type":254,"description":255,"relatedRisk":256,"moreDetailsUrl":257,"dateCreation":258,"dateUpdate":259,"tags":260,"attachments":261,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.887158Z",{},"6c2ddc74-6750-4e76-bdad-317c6c0305ce","Authentification des utilisateurs","Technical","Avant toute utilisation des moyens informatiques, un utilisateur doit être doté d’un identifiant qui lui est propre et doit s’authentifier afin de permettre de contrôler son identité et ses accès aux données dont il a besoin. Les mécanismes permettant de réaliser l’authentification des personnes sont catégorisés selon qu’ils font intervenir :","Accès non autorisé, mots de passe partagés.","https://www.cnil.fr/fr/securite-authentifier-les-utilisateurs","2021-10-19T15:35:32.3166158","2026-11-02T20:57:18.0371731",[],[],{"date":263,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":264,"id":265,"ref":28,"label":266,"type":218,"description":267,"relatedRisk":28,"moreDetailsUrl":268,"dateCreation":269,"dateUpdate":270,"tags":271,"attachments":272,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.8871587Z",{},"f54ac346-ee7b-45de-9cc0-39506032df7e","Gestion des habilitations","Respecter le principe de moindre privilège, à travers la gestion des profils d’habilitation, permet de limiter les conséquences d’une usurpation de comptes ou d’une erreur de manipulation.","https://www.cnil.fr/fr/securite-gerer-les-habilitations","2021-10-19T15:35:32.1054015","2026-11-02T20:57:19.3398542",[],[],{"date":274,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":275,"id":276,"ref":28,"label":277,"type":254,"description":278,"relatedRisk":28,"moreDetailsUrl":279,"dateCreation":280,"dateUpdate":281,"tags":282,"attachments":283,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.8871597Z",{},"f748340f-fe32-47c4-983c-135130915929","Sécurité des postes de travail","Les risques d’intrusion dans les systèmes informatiques sont multiples et les postes de travail constituent un des principaux points d’entrée.","https://www.cnil.fr/fr/securite-securiser-les-postes-de-travail","2021-12-15T14:06:35.2861825","2026-11-02T20:57:20.9746731",[],[],{"date":285,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":286,"id":287,"ref":28,"label":288,"type":254,"description":289,"relatedRisk":28,"moreDetailsUrl":290,"dateCreation":245,"dateUpdate":291,"tags":292,"attachments":293,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.8871603Z",{},"ac192187-f8f9-42aa-9111-814f4a321407","Protection du réseau informatique","Le réseau interne interconnecte l’ensemble des composants des systèmes d’information d’un organisme et dispose souvent de points de connexion avec l’extérieur. Il s’agit tout autant d’un point d’entrée que d’un support de propagation des attaques. Il est donc primordial de sécuriser le réseau interne.","https://www.cnil.fr/fr/securite-proteger-le-reseau-informatique","2026-11-02T20:57:22.9977424",[],[],{"date":295,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":296,"id":297,"ref":28,"label":298,"type":254,"description":299,"relatedRisk":28,"moreDetailsUrl":300,"dateCreation":245,"dateUpdate":301,"tags":302,"attachments":303,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.8871609Z",{},"ed9bf5c2-97d3-4505-9b42-adabf6e7bd1d","Sécurité des serveurs","La sécurité des serveurs doit être une priorité car ils centralisent un grand nombre de données et hébergent les services permettant d’y accéder et de les manipuler. Les précautions élémentaires Désinstaller ou désactiver les services et interfaces inutiles. Limiter l’accès aux outils et interfaces d’administration aux seules personnes habilitées. Utiliser des comptes de moindres privilèges pour les opérations courantes.","https://www.cnil.fr/fr/securite-securiser-les-serveurs","2026-11-02T20:57:24.1598199",[],[],{"date":305,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":306,"id":307,"ref":28,"label":308,"type":309,"description":310,"relatedRisk":28,"moreDetailsUrl":311,"dateCreation":245,"dateUpdate":312,"tags":313,"attachments":314,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.8871615Z",{},"56e975ff-1611-4612-b85c-c7efcdd47c2c","Protection des locaux","Physical","L’accès aux locaux doit être contrôlé pour éviter ou ralentir un accès direct, non autorisé, que ce soit aux fichiers papier ou aux matériels informatiques, notamment aux serveurs. Les locaux doivent également être protégés contre les autres types de menaces (ex. : incendie, inondation). Les précautions élémentaires Restreindre les accès aux locaux au moyen de portes verrouillées. Installer des alarmes anti-intrusion et les vérifier périodiquement leur bon fonctionnement périodiquement.","https://www.cnil.fr/fr/securite-proteger-les-locaux","2026-11-02T20:57:28.139351",[],[],{"date":316,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":317,"id":318,"ref":28,"label":319,"type":218,"description":320,"relatedRisk":28,"moreDetailsUrl":321,"dateCreation":322,"dateUpdate":28,"tags":323,"attachments":324,"creatorUser":325,"workflowStepId":225,"workflowStep":28},"2026-11-03T12:45:08.8871621Z",{},"637227f2-e809-4991-69b1-08df38010b92","Encadrement de la maintenance et de la fin de vie des matériels et logiciels","Les opérations de support doivent être encadrées pour maitriser l’accès aux données par les prestataires. Les données doivent être préalablement effacées des matériels destinés à être mis au rebut.","https://www.cnil.fr/fr/securite-encadrer-la-maintenance-et-la-fin-de-vie-des-materiels-et-logiciels","2026-11-02T20:57:38.8686714",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":327,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":328,"id":329,"ref":28,"label":330,"type":254,"description":331,"relatedRisk":28,"moreDetailsUrl":332,"dateCreation":245,"dateUpdate":333,"tags":334,"attachments":335,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.8871628Z",{},"c8b527e2-07bc-4677-8c00-d222be26d357","Traçabilité des opérations","Afin de pouvoir identifier un accès frauduleux ou une utilisation abusive de données personnelles, ou de déterminer l’origine d’un incident, il convient d’enregistrer certaines des actions effectuées sur les systèmes informatiques. Les traces alors collectées sont également des éléments de preuve utiles pour la démonstration de la conformité.","https://www.cnil.fr/fr/securite-tracer-les-operations","2026-11-02T20:57:33.4681365",[],[],{"date":337,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":338,"id":339,"ref":28,"label":340,"type":254,"description":341,"relatedRisk":28,"moreDetailsUrl":342,"dateCreation":245,"dateUpdate":343,"tags":344,"attachments":345,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.8871636Z",{},"cae348c2-e9f2-4e49-8d60-ab56e438d5a4","Sauvegarde","Des copies de sauvegarde doivent être réalisées et testées régulièrement pour être disponibles en cas de besoin. Les précautions élémentaires S’agissant de la sauvegarde des données","https://www.cnil.fr/fr/securite-sauvegarder","2026-11-02T20:57:34.7827534",[],[],{"date":347,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":348,"id":349,"ref":28,"label":350,"type":254,"description":351,"relatedRisk":28,"moreDetailsUrl":352,"dateCreation":353,"dateUpdate":28,"tags":354,"attachments":355,"creatorUser":356,"workflowStepId":225,"workflowStep":28},"2026-11-03T12:45:08.8871642Z",{},"6eddff0a-1378-4160-69b2-08df38010b92","Continuité et reprise d'activité","Pour limiter le temps d’indisponibilité du système, il faut anticiper les incidents les plus courants. Assurer la continuité d’activité consiste à prévoir des moyens de continuer de fonctionner, en général de manière dégradée, malgré des dysfonctionnements. La reprise d’activité, quant à elle, englobe toutes les actions nécessaires pour relancer un système arrêté.","https://www.cnil.fr/fr/securite-prevoir-la-continuite-et-la-reprise-dactivite","2026-11-02T20:57:39.8112993",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":358,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":359,"id":360,"ref":28,"label":361,"type":218,"description":362,"relatedRisk":28,"moreDetailsUrl":363,"dateCreation":364,"dateUpdate":28,"tags":365,"attachments":366,"creatorUser":367,"workflowStepId":225,"workflowStep":28},"2026-11-03T12:45:08.8871648Z",{},"10c6151c-c44c-46df-69b3-08df38010b92","Gestion des incidents et des violations","Il convient d’être préparé à l’éventualité d’un incident pour intervenir à temps et de manière appropriée, en intégrant l’objectif de limiter les effets pour les personnes dont les données sont concernées. Le responsable de traitement peut être amené à notifier la CNIL ou informer les personnes concernées de l’incident en fonction du risque pour celles-ci.","https://www.cnil.fr/fr/securite-gerer-les-incidents-et-les-violations","2026-11-02T20:57:40.7676498",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":369,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":370,"id":371,"ref":28,"label":372,"type":218,"description":373,"relatedRisk":28,"moreDetailsUrl":374,"dateCreation":375,"dateUpdate":28,"tags":376,"attachments":377,"creatorUser":378,"workflowStepId":225,"workflowStep":28},"2026-11-03T12:45:08.8871658Z",{},"e064565b-514e-4755-69b4-08df38010b92","Analyse de risques","En parallèle de la mise en conformité aux précautions élémentaires présentées dans ce guide, il est pertinent, voire obligatoire selon la criticité des traitements, de réaliser des analyses de risques relative à la protection des données. Ces analyses permettent de décider des mesures de sécurité complémentaires, adaptées au contexte, permettant de limiter l’impact sur les personnes concernées par le traitement.","https://www.cnil.fr/fr/securite-analyse-de-risques","2026-11-02T20:57:42.2940193",[],[],{"id":26,"displayName":27,"familyName":28,"givenName":28,"email":27,"active":29,"color":30,"avatarUrl":28,"tenantId":31},{"date":380,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":381,"id":382,"ref":28,"label":383,"type":254,"description":384,"relatedRisk":28,"moreDetailsUrl":385,"dateCreation":245,"dateUpdate":386,"tags":387,"attachments":388,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.8871665Z",{},"eaf489b5-7441-4bb3-8aee-0b894f6ade51","Chiffrement, hachage et signature","Moyens mis en œuvre pour assurer la confidentialité des données conservées (en base de données, dans des fichiers plats, dans les sauvegardes, etc.) ainsi que les modalités de gestion des clés de chiffrement (création, conservation, modification en cas de suspections de compromission, etc.).\n\nDétaillez les moyens de chiffrement employés pour les flux de données (VPN, TLS, etc.) intégrés dans le traitement.","https://www.cnil.fr/fr/securite-chiffrement-hachage-signature","2026-11-02T20:57:36.4902402",[],[],{"date":390,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":391,"id":392,"ref":28,"label":393,"type":218,"description":394,"relatedRisk":28,"moreDetailsUrl":395,"dateCreation":245,"dateUpdate":396,"tags":397,"attachments":398,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.8871673Z",{},"47c52bcb-a6e9-487b-a958-f027b20dbd87","Encadrement de la sous-traitance","Les traitements de données réalisés par un sous-traitant pour le compte du responsable de traitement doivent bénéficier de garanties suffisantes, notamment en matière de sécurité.","https://www.cnil.fr/fr/securite-gerer-la-sous-traitance","2026-11-02T20:57:31.4211019",[],[],{"date":400,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":401,"id":402,"ref":28,"label":403,"type":218,"description":404,"relatedRisk":28,"moreDetailsUrl":405,"dateCreation":245,"dateUpdate":406,"tags":407,"attachments":408,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.887168Z",{},"49230bff-1cd3-46bd-85f5-e43809136dc9","Sécurité des échanges avec l'extérieur","Sans mesure complémentaire, les canaux de transmission de données grand public (ex. : messagerie électronique, messagerie instantanée, plateforme de dépôt de fichiers) constituent rarement un moyen de communication sûr pour transmettre des données personnelles. Une simple erreur d’inattention peut conduire des personnes non habilitées à prendre connaissance de données personnelles, ce qui porte atteinte au droit à la vie privée des personnes concernées.","https://www.cnil.fr/fr/securite-securiser-les-echanges-avec-lexterieur","2026-11-02T20:57:29.3610605",[],[],{"date":410,"state":214,"descriptionHtml":28,"readonly":29,"purposes":28,"customFields":411,"id":412,"ref":28,"label":413,"type":254,"description":414,"relatedRisk":415,"moreDetailsUrl":85,"dateCreation":416,"dateUpdate":28,"tags":417,"attachments":418,"creatorUser":28,"workflowStepId":237,"workflowStep":28},"2026-11-03T12:45:08.8871686Z",{},"e71c1bfd-bbe5-4443-aa6b-e45b07a6f1c4","Hébergeur de données de santé agréé au sens de l’art L.1111-8 du code de la santé publique","Utiliser des hébergeurs de données de santé certifiés pour stocker les informations médicales.","Compromission des données de santé, non-conformité réglementaire.","2022-03-31T08:26:29.0136244",[],[],[420,429,437,445,453],{"subjectCategory":421,"displayName":423,"id":427,"subjectCategoryId":422,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":428},{"id":422,"label":423,"ref":28,"dateCreation":424,"dateUpdate":28,"creatorUserId":28,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":425,"workflowStep":28,"dataRetentionRules":426},"8b9dd7e2-2eb8-4ef5-2689-08dac757bbf1","Employés","2022-11-15T22:21:35.8123871",97319,[],"f93cedc3-36ae-43b8-e725-08df38010be0",[],{"subjectCategory":430,"displayName":432,"id":435,"subjectCategoryId":431,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":436},{"id":431,"label":432,"ref":28,"dateCreation":433,"dateUpdate":28,"creatorUserId":28,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":425,"workflowStep":28,"dataRetentionRules":434},"522e2943-0243-41b6-26a9-08dac757bbf1","Visiteurs","2022-11-15T22:22:51.6428987",[],"a9dfc65e-b9f1-4aeb-e726-08df38010be0",[],{"subjectCategory":438,"displayName":440,"id":443,"subjectCategoryId":439,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":444},{"id":439,"label":440,"ref":28,"dateCreation":441,"dateUpdate":28,"creatorUserId":28,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":425,"workflowStep":28,"dataRetentionRules":442},"86a6e2c9-6168-4a82-26b0-08dac757bbf1","Intérimaires","2022-11-15T22:23:06.424583",[],"be91798c-1c04-4bf7-e727-08df38010be0",[],{"subjectCategory":446,"displayName":448,"id":451,"subjectCategoryId":447,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":452},{"id":447,"label":448,"ref":28,"dateCreation":449,"dateUpdate":28,"creatorUserId":28,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":425,"workflowStep":28,"dataRetentionRules":450},"9944072b-9dc1-41be-26ab-08dac757bbf1","Fournisseurs externes","2022-11-15T22:22:53.9081906",[],"d4b14a18-d169-4db2-e728-08df38010be0",[],{"subjectCategory":454,"displayName":456,"id":460,"subjectCategoryId":455,"comment":28,"dataSubjectVolumeMax":28,"readonly":29,"purposes":461},{"id":455,"label":456,"ref":28,"dateCreation":457,"dateUpdate":28,"creatorUserId":458,"creatorUser":28,"description":28,"minorConcerned":29,"workflowStepId":425,"workflowStep":28,"dataRetentionRules":459},"0915abe8-a452-473c-9e28-cd4d9cab09a1","Agents du service d'incendie et de secours","2022-12-07T12:21:26.5240565",69,[],"65b5c43d-fc8b-49a6-e729-08df38010be0",[],"\u003Cblockquote>\u003Cp>\u003Cstrong>Modèle à adapter\u003C/strong>\u003C/p>\u003Cp>Modèle de traitement fourni à titre indicatif, à adapter à votre organisation. Les finalités, les données, les durées de conservation, les destinataires, les mesures de sécurité et l'analyse d'impact y sont des valeurs de départ, établies à partir des textes et référentiels cités ci-dessous. \u003Cstrong>Ce modèle ne constitue pas un avis juridique\u003C/strong> : faites-le valider par votre DPO ou votre conseil.\u003C/p>\u003C/blockquote>\u003Cblockquote>\u003Cp>\u003Cstrong>Point d'attention\u003C/strong> : Le modèle existant sur les badges couvre le seul contrôle d'accès ; celui-ci ajoute les entreprises extérieures, les habilitations de sécurité, les registres d'accidents et de formation et le POI. Les articles du Code de l'environnement et du Code du travail n'ont pas pu être lus sur Légifrance : l'appui vient de la circulaire du 12 janvier 2011 (AIDA/INERIS) et de l'INRS.\u003C/p>\u003C/blockquote>\u003Ch3>Sources\u003C/h3>\u003Cp>\u003Cem>Classement selon le guide pratique CNIL « Les durées de conservation ».\u003C/em>\u003C/p>\u003Cul>\u003Cli>\u003Cstrong>Texte légal ou réglementaire (antérieure au RGPD)\u003C/strong> : \u003Ca href=\"https://aida.ineris.fr/reglementation/circulaire-120111-relative-a-larticulation-entre-plan-doperation-interne\">Circulaire du 12 janvier 2011 relative au plan d'opération interne (AIDA, INERIS)\u003C/a>. Objet et contenu du POI, fondement dans l'article R. 512-29 du Code de l'environnement, obligation pour les établissements soumis à autorisation avec servitudes, mise à jour et test au plus tous les trois ans.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (durée recommandée)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/securite-proteger-les-locaux\">CNIL, Guide de la sécurité : Protéger les locaux\u003C/a>. Liste à jour des personnes autorisées par zone, règles pour les visiteurs (accompagnement), registre d'accès pour les salles sensibles, information des usagers après consultation des représentants du personnel.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (durée recommandée)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/securite-gerer-les-habilitations\">CNIL, Guide de la sécurité : Gérer les habilitations\u003C/a>. Profils d'habilitation, validation par un responsable, retrait des droits en fin de besoin, revue au moins annuelle.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/securite-gerer-la-sous-traitance\">CNIL, Guide de la sécurité : Gérer la sous-traitance\u003C/a>. Contrat avec les sous-traitants, vérification des garanties, contrôle des accès des prestataires.\u003C/li>\u003Cli>\u003Cstrong>Doctrine CNIL (durée recommandée)\u003C/strong> : \u003Ca href=\"https://www.cnil.fr/fr/securite-tracer-les-operations\">CNIL, Guide de la sécurité des données personnelles : Tracer les opérations\u003C/a>. Journalisation des accès et des opérations, conservation sur une période glissante de six mois à un an sauf obligation légale ou contentieux.\u003C/li>\u003Cli>\u003Cstrong>Référence sectorielle (durée obligatoire)\u003C/strong> : \u003Ca href=\"https://www.inrs.fr/publications/juridique/focus-juridiques/focus-registre-accidents-travail-benins.html\">INRS, Le registre des accidents du travail bénins : quelles obligations ?\u003C/a>. Registre tenu par établissement, papier ou dématérialisé, conservé cinq ans à compter de la fin de l'exercice, contenu obligatoire, personnes pouvant le consulter. Exclut les intérimaires et le personnel des entreprises intervenantes.\u003C/li>\u003C/ul>","Automatic","ManualOrOnDemand","NonApplicable","Les personnes sont informées au moment de la collecte (art. 13 du RGPD) ou, en cas de collecte indirecte, au plus tard dans un délai d'un mois (art. 14).","Droit à la portabilité non applicable : il ne vise que les traitements automatisés fondés sur le consentement ou un contrat (art. 20 du RGPD).",[],[470,478,484,491,498,504,510],{"purposes":471,"dataRetentionRules":28,"parentId":28,"children":472,"displayName":473,"label":473,"transfers":474,"recipientType":475,"type":476,"jobTitle":28,"id":477,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Service sécurité et environnement de l'exploitant",[],"InternalService","Recipient","0b8aeb95-7bd3-43fd-a179-08df38010bcb",{"purposes":479,"dataRetentionRules":28,"parentId":28,"children":480,"displayName":481,"label":481,"transfers":482,"recipientType":475,"type":476,"jobTitle":28,"id":483,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Ressources humaines et médecine du travail",[],"5e9da6c1-526f-4181-a17a-08df38010bcb",{"purposes":485,"dataRetentionRules":28,"parentId":28,"children":486,"displayName":487,"label":487,"transfers":488,"recipientType":489,"type":476,"jobTitle":28,"id":490,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Entreprises extérieures intervenant sur le site",[],"ThirdParty","5fbcef51-d176-4a9c-a17b-08df38010bcb",{"purposes":492,"dataRetentionRules":28,"parentId":28,"children":493,"displayName":494,"label":494,"transfers":495,"recipientType":496,"type":476,"jobTitle":28,"id":497,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Inspection des installations classées (DREAL) et inspection du travail",[],"AuthorizedThirdParty","7f709849-dd72-4b93-a17c-08df38010bcb",{"purposes":499,"dataRetentionRules":28,"parentId":28,"children":500,"displayName":501,"label":501,"transfers":502,"recipientType":496,"type":476,"jobTitle":28,"id":503,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Services d'incendie et de secours",[],"70166717-6210-4f1c-a17d-08df38010bcb",{"purposes":505,"dataRetentionRules":28,"parentId":28,"children":506,"displayName":507,"label":507,"transfers":508,"recipientType":496,"type":476,"jobTitle":28,"id":509,"actorId":28,"actor":28,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Caisse d'assurance maladie et Carsat",[],"ef58e9f5-9bb2-475b-a17e-08df38010bcb",{"purposes":511,"dataRetentionRules":28,"parentId":28,"children":512,"displayName":513,"label":514,"transfers":515,"recipientType":516,"type":476,"jobTitle":28,"id":517,"actorId":518,"actor":519,"areaId":28,"area":28,"description":28,"readonly":29},[],[],"Sous-traitant à préciser","Prestataire de contrôle d'accès ou de gardiennage",[],"Vendor","44ae4cc0-4638-4002-a17f-08df38010bcb","1af96d46-eb9e-45f3-64bc-08df38010bd1",{"label":513,"id":518,"ref":28,"dateCreation":520,"dateUpdate":28,"reviewDate":28,"nextReviewDate":28,"logoUrl":28,"state":521,"actorType":522,"description":523,"countryCode":28,"readonly":29,"email":28,"phoneNumber":28,"contactName":28,"contactPosition":28,"immatriculationNumber":28,"websiteUrl":28,"address":28,"zipCode":28,"city":28,"region":28,"workflowStepId":524,"areaId":28,"source":55},"2026-11-02T20:57:51.2801474","New","Morale","Acteur générique des modèles de traitement : à remplacer par le prestataire retenu (sous-traitant au sens de l'article 28 du RGPD).",76516,[],[527,533,539,543],{"id":528,"key":33,"label":529,"description":530,"legalBasis":531,"legalBasisText":532,"legalBasisDescription":28,"readonly":29},"141e59ae-2b55-4f1b-1100-08df38010b80","Contrôle d'accès au site et suivi des intervenants extérieurs","Autoriser, enregistrer et limiter l'accès des salariés, visiteurs et entreprises extérieures aux zones du site. La CNIL recommande de tenir à jour la liste des personnes autorisées par zone et un registre d'accès pour les zones sensibles. Intérêt légitime de l'exploitant à protéger un site à risques.","LegitimateInterest","Intérêts légitimes du responsable du traitement ou d'un tiers",{"id":534,"key":94,"label":535,"description":536,"legalBasis":537,"legalBasisText":538,"legalBasisDescription":28,"readonly":29},"f41cc456-03e2-4d05-1101-08df38010b80","Gestion des habilitations et des formations de sécurité","Vérifier avant l'intervention que chaque personne dispose des formations et habilitations requises (travaux dangereux, accès aux zones à risque) et en tenir le registre. Obligation de l'employeur pour son personnel.","LegalCommitment","Obligation légale",{"id":540,"key":129,"label":541,"description":542,"legalBasis":537,"legalBasisText":538,"legalBasisDescription":28,"readonly":29},"1aa13f7b-c587-4544-1102-08df38010b80","Registres d'accidents et déclarations","Tenir le registre des accidents du travail bénins, établi par établissement et conservé cinq ans à compter de la fin de l'exercice (INRS), et préparer les déclarations d'accident.",{"id":544,"key":34,"label":545,"description":546,"legalBasis":537,"legalBasisText":538,"legalBasisDescription":28,"readonly":29},"b40afca9-6745-4223-1103-08df38010b80","Plan d'opération interne et gestion des situations d'urgence","Tenir la liste des personnes présentes sur site et les rôles d'intervention pour mettre en oeuvre le POI, plan d'urgence défini à l'article R. 512-29 du Code de l'environnement, obligatoire pour certains établissements ou imposé par arrêté préfectoral (circulaire du 12 janvier 2011).",86,67,5]