Privacy policy

Information Statements concerning the protection of personal data – Driving licence pre-application system

The Agence Nationale des Titres Sécurisés (National Agency for Secure Documents - ANTS) undertakes that the processing of personal data at the website https://permisdeconduire.ants.gouv.fr/ will be in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

 

Data Protection Policy

By means of this Data Protection Policy and in accordance with the Regulation no.2016-679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, we inform you of our practices concerning the processing that we undertake of your personal data when we collect them, the measures that we put in place to protect the data and the rights that you possess with regard to the data concerning you.

 

  • Purpose of the processing

By personal data, we mean any information relating to an identified or identifiable physical person connecting to the driving licence application system accessible on the ANTS website.

Article 2 of Decree No. 2007-240 of 22 February 2007 creating the Agence Nationale des Titres Sécurisés sets out the following missions of the ANTS:

 

1”° To ensure or arrange for the development, maintenance and improvement of the equipment and the IT networks allowing for the management of secure documents; 2° To ensure or arrange for the implementation of the online services, the means for electronic identification and the data transmission associated with issuing and managing secure documents; (...)

 

6. To develop and implement secure data exchange platforms in connection with 1. and 2. above. "

 

In order to carry out all of its missions, the Road Safety Office of the Ministry of the Interior (Délégation à la sécurité routière - DSR) is implementing an online service for driving licence applications on behalf of the DSR of the Ministry of the Interior.

 

  • Data controller 

The Minister of the Interior (DSR) is responsible for the processing performed by the "Driving Licence Application System".

 

  • Purposes of the processing

To collect, in electronic form, the information needed to register for driving tests, process licence applications, and print and deliver licences, as well as to collect the telephone and electronic contact details needed to keep applicants informed of the progress of their application.

 

  • Legal basis for data processing

The legal basis as provided for by Article 6 of the GDPR is the following:

 

- The processing is necessary for the performance of a mission of public interest or relating to the public authority granted to the data controller. (Order of 20 April 2016 authorizing the creation of a remote services system intended for pre-applications and applications for official documents)

 

  • Data collected

The personal data and information recorded in the processing provided for in Article 1 are as follows:

   

  • 1. Vital records: Last name at birth, customary name, first and middle names, sex 
  • 2. Date and place of birth
  • 3. Postal address
  • 4. Photograph
  • 5. Signature
  • 6. Mobile phone number
  • 7. E-mail address
  • 8. Application number
  • 9. Nationality
  • 10. Reason for application
  • 11. Département of residence
  • 12. Category of driving licence applied for or renewal applied for
  • 13. Electronic stamp number
  • 14. Harmonised Prefectoral Registration Number (NEPH)
  • 15. Driving test certificate (CEPC)
  • 16. Approval number of driving schools authorised by the user as defined by 6. of article R. 213-3 of the French Highway Code
  • 17. Identification number of vocational training centres authorised by the user
  • 18. Data relating to driving lessons
  • 19. Data relating to medical fitness to drive
  • 20. Data on mastery of the French language
  • 21° Driving licence categories already obtained number, date and place of issue
  • 22. Digitised image of the documents needed to complete the administrative procedures required for each category of driving licence under the terms of a legislative or regulatory text
  • 23. Where applicable, the full name, date of birth and address of the legal representative carrying out the procedure
  • 24. Expression of consent for the re-use or non-use of personal data

 

  • Categories of data subjects

The data subjects are:

 

- applicant users

- people working in driving schools (AEs) or road safety awareness centres (CSSRs) submitting applications on behalf of users

 

  • The recipients of the data

The recipients of the data are persons authorised to receive the data recorded in a file or in a processing operation on the basis of their functions.

 

The recipients responsible for processing driving licence applications are: - the staff of the prefectural departments responsible for processing driving licence applications         

                                                                                           

- the staff of the inter-ministerial departmental directorate in charge of driving tests

- the staff of the national driving licence database (FNPC) office

- the staff of the National Agency for Secure Documents (ANTC), to support users in their paperless procedures.

 

The other recipients are:

 

- the competent authorities at their request, or at the request of a lawful stakeholder - in particular any law enforcement officer as part of the search for the perpetrators of offences committed on the Internet

- the entities responsible for the development and maintenance, both technical and functional, of the application system.

 

  • The retention period for the data

The ANTS ensures that your data are retained for time needed for the required purpose and that they are definitively and irreversibly deleted after the stipulated retention period.

 

The retention periods are as follows:

 

- 6 months after the validation of the user’s application

- No retention if the user’s application is not validated

 

  • The security measures

The security measures are all the technical and organisational measures taken to protect the personal data that is collected and processed against accidental or unlawful destruction, loss, alteration or unauthorised access or disclosure.

 

The personal data collected in connection with the services offered on the permisdeconduire.ants.gouv.fr website are processed in accordance with secure protocols and allow the ANTS to manage the requests received in its computer applications.

The security measures are implemented in accordance with the:

 

- Référentiel Général de Sécurité (General Security Reference Text), RGS 2.1, 06 October 2015

- Politique de Sécurité des Systèmes d’Information de l’Etat (PSSIE) (State Information System Security Policy), V 1.0, 17 July 2014

 

  • Transfer of data outside of the European Union (or the adoption of an automated decision)

Your data are not transferred outside of the territory of the European Union.

No automated decisions are taken by the services of the ANTS.

 

  • The exercise of your rights

In accordance with all of the regulations in force, you possess rights concerning your data.

 

  • A right of access and to be informed 

In accordance with the regulations in force, you possess rights concerning your data.

 

  • A right of access and to be informed:

The right of access may be exercised in accordance with the conditions provided for by Article 15 of the GDPR. You can make a request to find out what data we hold concerning you and obtain a copy.

 

You have the right to be informed at all times in a clear, transparent and understandable manner with regards to the processing carried out on your data.

 

  • A right to rectification:

Any data concerning you that is incomplete or erroneous may be modified at your request. You may also complete your data at any time by means of an additional declaration.

 

  • A right to erasure:

 

The right to erasure does not apply in application of Article 17(3)(b).

 

 

  • The right to restrict the processing: 

 

The right to restrict the processing is applied under the conditions provided for by Article 18 of the GDPR.

 

  • The right to object:

 

In the event that you exercise this right, the ANTS may ask you for reasons relating to your particular situation and it has the possibility of invoking compelling and legitimate grounds which would prevail over your request in application of Article 21(1) of the GDPR.

 

  • Exercise your rights

For any information or to exercise your data protection rights concerning the processing of personal data managed by the ANTS, to the exclusion of all other requests, you may contact its data protection delegate, enclosing a copy of your identity document (passport, identity card, residence permit or proof of identity issued via the France Identité application) by post at the following address:

 

Ministère de l'intérieur

Attn: Le Délégué à la protection des données (DPD)

Place Beauvau 75800 Paris CEDEX 08.

 

 

You can also contact ANTS, the DSR's data processor by post (with a copy of your identification document if you seek to exercise your rights) at the following address:

 

ANTS – Responsable du traitement "Système de demande permis"                          

18 rue Irénée Carré BP70474 08101 CHARLEVILLE MEZIERES CEDEX

 

 

In the event of a dispute concerning the exercise of your rights or if you believe that your complaint concerns a breach of the French Data Protection Act, you may refer the matter to the Commission Nationale de l'Informatique et des Libertés (CNIL) (National Commission on Computer Information and Liberties), whose contacts are as follows:

 

 

Commission Nationale de l’Informatique et des Libertés

3 place de Fontenoy

TSA 80715

75334 Paris Cedex 07

https://www.cnil.fr/fr/plaintes