Personal Data Protection
The Grand Est Region undertakes to ensure that the collection and processing of your data, carried out from the grandest.fr sites and the teleservices of the authority, comply with the European General Data Protection (GDPR) and the Computing and Liberties Act amended in 2018.
Each form or teleservice limits the collection of personal data to the strict minimum necessary and clearly indicates to you :
- the legal basis of the processing of the data (i.e. what permits the data to be processed: in general it involves the performance of a mission of public interest of the local authority or the consent of the data subject. Other, rarer reasons are possible and are stated when data are collected;
- the categories of data subjects;
- if these data are mandatory or optional for managing your request;
- who may become aware of them: in general, these are the services of the Grand Est Region involved in processing your information. Other possible recipients who process your data are indicated when collecting information;
- the existence of automated decision-making or profiling;
- the periods of retention of data when they are not included in the table in the next section.
Data Retention Periods
Here are the main periods of administrative usefulness(DUA) applicable to the main activities managed by the Grand Est Region. When the retention periods are not included in this list, they are specified when the information is collected.
The DUA covers the retention period in an active database and in intermediate archives according to the definitions of the National Data Processing and Freedoms Commission (CNIL) ; i.e. the retention period before archiving within the meaning of Book II of the Patrimoine (heritage) Code or the destruction of information.
- request for information to the Region : DUA of 2 years after closure of the request
- application for regional aid without European co-financing : DUA of 10 years after closure of the file
- application for regional aid with European co-financing : DUA of 20 years after closure of the file
- Registration for a newsletter : DUA of 3 months after unsubscribing
Information about your Rights
You benefit from the rights provided for by the Regulation : right of opposition, access, rectification, erasure and limitation. When your consent is required, you have the right to withdraw it at any time.
When your consent is required and the processing is carried out with the aid of automated processes, you also benefit from a right to the portability of your data.
You also have the right to file a complaint with a supervisory authority, in general, the CNIL: https://www.cnil.fr/plaintes/
Prior to exercising this latter right, you must contact the services of the Region responsible for processing your data. You can also refer to the Data Protection Officer of the Grand Est Region using the form below or by postal mail:
Grand Est Region
For the attention of the Data Protection Officer
1, place Adrien Zeller
Exercising your Rights
The Grand Est Region has different ways in which you can contact the services. In general, direct contact information for the services is listed on the websites, the correspondence or the documentation of the mechanisms in question. You can also contact the services .
If you want to contact the Data Protection Officer directly, please write to .
The personal data collected within the context of the teleservices offered on grandest.fr sites are transmitted and stored according to secure protocols.
When security approval decisions within the meaning of the general security guidelines (RGS) are available, they are published on the sites or the teleservices concerned.
We use different cookies on the site to improve the interactivity of the website and our services. We are gradually deploying the “tarteaucitron.js” script when our sites contain cookies requiring the user’s prior consent.
Consent is considered implicit if you continue your navigation on our sites without configuring cookies.
What is a “cookie” ?
A “cookie” is a file of limited size, usually consisting of letters and digits, sent by the Internet server to the browser’s cookie file located on the hard drive of your computer.
3 types of cookies are stored by the local authority’s sites :
Internal cookies needed for the site to operate
They do not represent any danger for your privacy since the cookie memorising your choice for the configuration of cookies is part of this category.
Audience measuring cookies
Depending on the sites visited, we use Google Analytics or Piwik to analyse the audiences. Your consent is requested prior to storing Google Analytics cookies.
Third party cookies intended to improve the interactivity of the site
These in particular are :
- sharing buttons (Twitter and Facebook)
- lists of tweets (Twitter)
- videos broadcast on the site (YouTube, Dailymotion)
These features use third party cookies directly stored by these services. During your first visit to regional sites, a banner informs you of the presence of these cookies and asks you to indicate your choice. They are stored only if you agree, or if you continue your navigation on the site by visiting a second page of the same site. At any time, you can find information and configure your cookies to accept or refuse them by going onto the page [Cookie management] at the top of each page of the site. You can specify your preference either globally for the site or service by service.