Personal data protection
The sending and processing of applications are not managed by the Portal, but by the ANTS's third-party systems - the vehicle registration system, the driving licence application system and the identity document pre-application system - for which the Portal is the gateway to access these services.
Information Statements concerning the protection of personal data for the ANTS Portal
The Agence Nationale des Titres Sécurisés (French National Security Agency - ANTS) undertakes that the processing of personal data carried out on the Portal will be in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data Protection Policy
By means of this Data Protection Policy and in accordance with the GDPR, we inform you of our practices concerning the processing that we undertake of your personal data when we collect them, the measures that we put in place to protect the data and the rights that you possess with regard to the data concerning you.
Purpose of the processing
By personal data, we mean any information relating to an identified or identifiable physical person connecting to the ANTS website.
Article 2 of Decree No. 2007-240 of 22 February 2007 creating the Agence Nationale des Titres Sécurisés sets out the following missions of the ANTS:
- To ensure or arrange for the development, maintenance and improvement of the equipment and the IT networks allowing for the management of secure documents;
- To ensure or arrange for the implementation of the online services, the means for electronic identification and the data transmission associated with issuing and managing secure documents;
- To develop and implement secure data exchange platforms in connection with 1. and 2. above.
In order to carry out all of its missions, the ANTS is implementing a Portal dedicated to the creation of a personal account specific to each user. This online area allows users to access their online procedures and keep track of the requests they have made. This may include applications for driving licences, identity documents or vehicle registration.
Note: The sending and processing of applications are not managed by the Portal, but by the ANTS's third-party systems - the vehicle registration system, the driving licence application system and the identity document pre-application system - for which the Portal is the gateway to access these services.
Data Controller
The data controller is the Agence Nationale des Titres Sécurisés created by decree No. 2007240 of 22 February 2007. Its mission is to meet the needs of the government authorities for the design, management and production of secure documents and the data transmission associated with them.
The data collected
Personal data
When using the ANTS Portal, you may need to provide us with information that identifies you. This concerns identification data (last name, first name, email address) to the exclusion of any other data collected when the user creates an account on the ANTS Portal or carries out an online procedure. The ANTS has taken care to limit the data collected and recorded on the Portal only to the information that is necessary for the purposes of the processing. The Portal only collects the data needed to allow for a pre-application or an application to be filed. These data are then transmitted to other systems for processing and for completing the application.
The collection of these mandatory data is necessary in order to process your application. Otherwise, the user's request may not be successful and/or the response provided may be incomplete.
In addition, the e-mail address provided on the Portal of the ANTS is transmitted to a client relationship management tool used exclusively by the ANTS.
Cookies and tracers
Local storage
The names of the sites in question:
ants.gouv.fr, immatriculation.ants.gouv.fr, permisdeconduire.ants.gouv.fr, passeport.ants.gouv.fr, pha.ants.gouv.fr, autoecole.ants.gouv.fr, mairie.ants.gouv.fr
Purposes: To simplify your browsing and to display the tutorial at the time of your initial visits to the site
How long do we retain them: Valid until the data in the cache is deleted
Possible to refuse: No
Sessions
The names of the sites in question:
ants.gouv.fr, immatriculation.ants.gouv.fr, permisdeconduire.ants.gouv.fr, passeport.ants.gouv.fr, pha.ants.gouv.fr, autoecole.ants.gouv.fr, mairie.ants.gouv.fr
Purposes: To allow for the correct operation of the site
How long do we retain them: 24 hours
Possible to refuse: No
AT Internet cookies (AT-ID Visitor, AT-User ID, AT-Authority)
The names of the sites in question:
ants.gouv.fr, immatriculation.ants.gouv.fr, permisdeconduire.ants.gouv.fr, passeport.ants.gouv.fr, pha.ants.gouv.fr, autoecole.ants.gouv.fr, mairie.ants.gouv.fr
Purposes: Collection of audience measurement statistics
How long do we retain them:
How long do the cookies last: 13 months
How long is the collected data retained: 25 months
Possible to refuse: Yes, by means of the pop-up "About cookies" that is accessible by the button "View the cookies" and the section "Cookie management".
Authentication and session cookies (JSESSIONID, ember_simple_auth-redirectTarget, ants_token, ember_simple_auth-session, fctid)
The names of the sites in question:
Purposes: These allow you to connect to your account and to browse the site during your visit
How long they last: While logged in
No data retention
Possible to refuse: No
Cookies to save your preferences (consent)
The names of the sites in question:
Purposes: These allow us to save your cookie preferences
How long they last: 13 months
Possible to refuse: No
AT Internet cookies (AT-ID Visitor, AT-User ID, AT-Authority)
The names of the sites in question:
Purposes: Collection of audience measurement statistics
How long do the cookies last: 13 months
How long is the collected data retained: 25 months
Possible to refuse: No
Legal framework
The cookies and tracers that we use are strictly necessary for the correct operation of the site. The following conditions are observed:
- No monitoring of the browsing and clicks at the individual level
- No tracing on third-party sites
- Anonymisation of the data
In accordance with Article 82 of the French Data Protection Act [https://www.legifrance.gouv.fr/loda/article_lc/LEGIARTI000037813978/] and Article 5 of the deliberation of the CNIL No. 2020-092 of 17 September 2020 [https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042398022/], the collection of browsing information may be done without your consent
The solution used
The ANTS uses the media measurement solutions of the service provider AT Internet.
On all of the internet sites, only audience measurement cookies may be refused [link to the table above]. To learn more about these cookies, you can consult the following link: https://www.atinternet.com/societe/rgpd-et-vie-privee/
Purpose(s) of the processing
The purpose of the processing on the "ANTS Portal" is to enable users to connect to a dedicated account on the ANTS website to submit a pre-application (passport, national identity card) or an application (vehicle registration, driving licence) with a view to obtaining a secure document. The processing is also intended to allow for monitoring of the progress on these applications for documents.
The purpose of the processing connected with the use of email addresses entered on the Portal, and the user data in connection with amounts received, is to improve the quality of services throughout the user experience as well as the performance of the ANTS website.
Legal basis of the data processing:
The legal basis as provided for by Article 6 of the GDPR is the following:
The processing is necessary for the performance of a mission of public interest or relating to the public authority granted to the data controller.
Categories of data subjects
The data subjects are users:
- Individual users / students
- Certified users (passing by FranceConnect)
- Driving school
- Road safety training centre (CSSR)
- A physical person acting on behalf of a legal entity
- A professional authorised and approved by the SIV or the PHA (car sales professional / car hire / vehicle dismantling facility / expert / bailiff / insurer / demolisher / auctioneer / lending business)
The recipients of the data
The recipients of the data are persons authorised to receive the data recorded in a file or in a processing operation on the basis of their functions.
Internal recipients at the ANTS:
- The Department for User Services and Quality, including:
- The telephone advisers for the Citizen Contact Centre (level 1)
- The technical supervisors of the Portal (level 2)
- The WEB unit of the ANTS
External recipients:
- Data transferred to the authorities
The personal data that the ANTS collects may be transmitted to the competent authorities at their request, or at the request of a lawful stakeholder - in particular any law enforcement officer as part of the search for the perpetrators of offences committed on the Internet. - Data transferred to our service provider data processor
The ANTS works in collaboration with third-party companies: Worldline, Docaposte, Netsize, Intelcia and Eloquent.
These service providers have the capacity of data processors in the meaning of the GDPR. Consequently, the processing operations are carried out on behalf of the ANTS, which ensures that they only act under its instructions and implement appropriate technical and organisational measures, so that the processing of personal data complies with the security requirements and the protection of your rights in accordance with the Regulations.
The retention period for the data
The ANTS ensures that your data are retained for time needed for the required purpose and that they are definitively and irreversibly deleted after the stipulated retention period.
The retention periods are as follows:
- 12 months for inactive accounts: the users will be notified by e-mail one month before the deletion of the account;
- 24 hours for individual accounts that have not been activated;
- 7 days for driving school student accounts that have not been activated;
- 3 months for unarchived messages and documents associated with the account.
As concerns processing operations connected with the quality of the services for users, the data collected (the e-mail addresses of the users) are retained and then automatically deleted from the client management tool of the ANTS once the user has transmitted a response to the survey. Nonetheless, the user has the possibility to object to the use of his/her e-mail address by means of an unsubscribe link that appears in each e-mail sent to him/her.
The security measures
The security measures are all the technical and organisational measures taken to protect the personal data that is collected and processed against accidental or unlawful destruction, loss, alteration or unauthorised access or disclosure.
The personal data collected in connection with the services offered on the Portal are processed in accordance with secure protocols and allow the ANTS to manage the requests received in its computer applications.
The security measures are implemented in accordance with the:
- Référentiel Général de Sécurité (General Security Reference Text), RGS 2.1, 06 October 2015
- Politique de Sécurité des Systèmes d’Information de l’Etat (PSSIE) (State Information System Security Policy), V 1.0, 17 July 2014
Transfer of data outside of the European Union (or the adoption of an automated decision)
Your data are not transferred outside of the territory of the European Union.
No automated decisions are taken by the services of the ANTS.
The exercise of your rights
In accordance with all of the regulations in force, you possess rights concerning your data.
A right of access and to be informed
The right of access may be exercised in accordance with the conditions provided for by Article 15 of the GDPR. You can make a request to find out what data we hold concerning you and obtain a copy.
You have the right to be informed at all times in a clear, transparent and understandable manner with regards to the processing carried out on your data.
A right to rectification
Any data concerning you that is incomplete or erroneous may be modified at your request. You may also complete your data at any time by means of an additional declaration.
A right to erasure
The right to erasure does not apply in application of Article 17(3)(b).
The right to restrict the processing
The right to restrict the processing is applied under the conditions provided for by Article 18 of the GDPR.
The right to object
In the event that you exercise this right, the ANTS may ask you for reasons relating to your particular situation and it has the possibility of invoking compelling and legitimate grounds which would prevail over your request in application of Article 21(1) of the GDPR.
By means of the unsubscribe link that appears in each e-mail sent to you, you have the right to object to the use of your e-mail address for processing relating to the improvement of the quality of service for the user.
Exercise your rights
For any information or to exercise your data protection rights concerning the processing of personal data managed by the ANTS, to the exclusion of all other requests, you may contact its data protection delegate, enclosing a copy of your identity document (passport, identity card, residence permit or proof of identity issued via the France Identité application) by post:
Ministère de l’Intérieur (Ministry of the Interior)
Attn: Délégué à la protection des données (DPO)
Place Beauvau
75800 Paris CEDEX 08.
You can also contact the data controller by post (with a copy of your identification document if you seek to exercise your rights) at the following address:
ANTS – Responsable du traitement "Portail"
18 rue Irénée Carré BP70474
08101 CHARLEVILLE MEZIERES CEDEX
Or By e-mail at the following address: donnees-personnelles-ants@interieur.gouv.fr
In the event of a dispute concerning the exercise of your rights or if you believe that your complaint concerns a breach of the "French Data Protection Act", you may refer the matter to the Commission Nationale de l'Informatique et des Libertés (CNIL) (National Commission on Computer Information and Liberties), whose contacts are as follows:
Commission Nationale de l’Informatique et des Libertés
3 place de Fontenoy
TSA 80715
75334 Paris Cedex 07