Accéder directement au contenuAccéder directement au menu principal

Privacy policy

The sending and processing of applications are not managed by the Portal, but by the ANTS's third-party systems - the vehicle registration system, the driving licence application system and the identity document pre-application system - for which the Portal is the gateway to access these services.

Information Statements concerning the protection of personal data for the ANTS Portal


The Agence Nationale des Titres Sécurisés (French National Security Agency - ANTS) undertakes that the processing of personal data carried out on the Portal will be in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

 

Data Protection Policy

 

By means of this Data Protection Policy and in accordance with the GDPR, we inform you of our practices concerning the processing that we undertake of your personal data when we collect them, the measures that we put in place to protect the data and the rights that you possess with regard to the data concerning you.

 

1. Purpose of the processing

 

By personal data, we mean any information relating to an identified or identifiable physical person connecting to the ANTS website.

Article 2 of Decree No. 2007-240 of 22 February 2007 creating the Agence Nationale des Titres Sécurisés sets out the following missions of the ANTS:

 

1. To ensure or arrange for the development, maintenance and improvement of the equipment and the IT networks allowing for the management of secure documents;

2. To ensure or arrange for the implementation of the online services, the means for electronic identification and the data transmission associated with issuing and managing secure documents;

 

3. To develop and implement secure data exchange platforms in connection with 1. and 2. above.

 

In order to carry out all of its missions, the ANTS is implementing a Portal dedicated to the creation of a personal account specific to each user. This online area allows users to access their online procedures and keep track of the requests they have made. This may include applications for driving licences, identity documents or vehicle registration.

 

Note: The sending and processing of applications are not managed by the Portal, but by the ANTS's third-party systems - the vehicle registration system, the driving licence application system and the identity document pre-application system - for which the Portal is the gateway to access these services. 

 

2. Data Controller:

 

The data controller is the Agence Nationale des Titres Sécurisés created by decree No. 2007240 of 22 February 2007. Its mission is to meet the needs of the government authorities for the design, management and production of secure documents and the data transmission associated with them.

 

3. The data collected:

 

  • Personal data

When using the ANTS Portal, you may need to provide us with information that identifies you. This concerns identification data (last name, first name, email address) to the exclusion of any other data collected when the user creates an account on the ANTS Portal or carries out an online procedure. The ANTS has taken care to limit the data collected and recorded on the Portal only to the information that is necessary for the purposes of the processing. The Portal only collects the data needed to allow for a pre-application or an application to be filed. These data are then transmitted to other systems for processing and for completing the application.

 

The collection of these mandatory data is necessary in order to process your application. Otherwise, the user's request may not be successful and/or the response provided may be incomplete.

 

In addition, the e-mail address provided on the Portal of the ANTS is transmitted to a client relationship management tool used exclusively by the ANTS.

 

 

  • Cookies and tracers

 

  • Local storage

The names of the sites in question:

ants.gouv.fr, immatriculation.ants.gouv.fr, permisdeconduire.ants.gouv.fr, passeport.ants.gouv.fr, pha.ants.gouv.fr, autoecole.ants.gouv.fr, mairie.ants.gouv.fr

 

Purposes: To simplify your browsing and to display the tutorial at the time of your initial visits to the site

 

How long do we retain them: Valid until the data in the cache is deleted

 

Possible to refuse: No

 

 

  • Sessions

The names of the sites in question:

ants.gouv.fr, immatriculation.ants.gouv.fr, permisdeconduire.ants.gouv.fr, passeport.ants.gouv.fr, pha.ants.gouv.fr, autoecole.ants.gouv.fr, mairie.ants.gouv.fr

 

Purposes: To allow for the correct operation of the site

 

How long do we retain them: 24 hours

 

Possible to refuse: No

 

 

  • AT Internet cookies (AT-ID Visitor, AT-User ID, AT-Authority)

The names of the sites in question:

ants.gouv.fr, immatriculation.ants.gouv.fr, permisdeconduire.ants.gouv.fr, passeport.ants.gouv.fr, pha.ants.gouv.fr, autoecole.ants.gouv.fr, mairie.ants.gouv.fr

 

Purposes: Collection of audience measurement statistics

 

How long do we retain them:

 

How long do the cookies last: 13 months

 

How long is the collected data retained:  25 months

 

Possible to refuse: Yes, by means of the pop-up "About cookies" that is accessible by the button "View the cookies" and the section "Cookie management".

 

 

  • Authentication and session cookies (JSESSIONID, ember_simple_auth-redirectTarget, ants_token, ember_simple_auth-session, fctid)

 

The names of the sites in question:

moncompte.ants.gouv.fr

 

Purposes: These allow you to connect to your account and to browse the site during your visit

 

How long they last: While logged in

No data retention

 

Possible to refuse: No

 

 

  • Cookies to save your preferences (consent)

The names of the sites in question:

moncompte.ants.gouv.fr

 

Purposes: These allow us to save your cookie preferences

 

How long they last: 13 months

 

Possible to refuse: No

 

 

  • AT Internet cookies (AT-ID Visitor, AT-User ID, AT-Authority)

The names of the sites in question:

moncompte.ants.gouv.fr

 

Purposes: Collection of audience measurement statistics

 

How long do the cookies last: 13 months

 

How long is the collected data retained:  25 months

 

Possible to refuse: No

 

 

 

 

 

Legal framework

The cookies and tracers that we use are strictly necessary for the correct operation of the site. The following conditions are observed:

  • No monitoring of the browsing and clicks at the individual level
  • No tracing on third-party sites
  • Anonymisation of the data

In accordance with Article 82 of the French Data Protection Act [https://www.legifrance.gouv.fr/loda/article_lc/LEGIARTI000037813978/] and Article 5 of the deliberation of the CNIL No. 2020-092 of 17 September 2020 [https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042398022/], the collection of browsing information may be done without your consent

 

The solution used

The ANTS uses the media measurement solutions of the service provider AT Internet.

On all of the internet sites, only audience measurement cookies may be refused [link to the table above]. To learn more about these cookies, you can consult the following link: https://www.atinternet.com/societe/rgpd-et-vie-privee/

 

 

4. Purpose(s) of the processing:

 

The purpose of the processing on the "ANTS Portal" is to enable users to connect to a dedicated account on the ANTS website to submit a pre-application (passport, national identity card) or an application (vehicle registration, driving licence) with a view to obtaining a secure document. The processing is also intended to allow for monitoring of the progress on these applications for documents.

The purpose of the processing connected with the use of email addresses entered on the Portal, and the user data in connection with amounts received, is to improve the quality of services throughout the user experience as well as the performance of the ANTS website.

 

 

5. Legal basis of the data processing:

 

The legal basis as provided for by Article 6 of the GDPR is the following:

  • The processing is necessary for the performance of a mission of public interest or relating to the public authority granted to the data controller.

 

6. Categories of data subjects

 

The data subjects are users:

  • Individual users / students
  • Certified users (passing by FranceConnect)
  • Driving school
  • Road safety training centre (CSSR)
  • A physical person acting on behalf of a legal entity
  • A professional authorised and approved by the SIV or the PHA (car sales professional / car hire / vehicle dismantling facility / expert / bailiff / insurer / demolisher / auctioneer / lending business)

 

7. The recipients of the data

 

The recipients of the data are persons authorised to receive the data recorded in a file or in a processing operation on the basis of their functions.

 

Internal recipients at the ANTS:

  • The Department for User Services and Quality, including:
  • The telephone advisers for the Citizen Contact Centre (level 1)
  • The technical supervisors of the Portal (level 2)
  • The WEB unit of the ANTS

 

External recipients:

a)     Data transferred to the authorities

- The personal data that the ANTS collects may be transmitted to the competent authorities at their request, or at the request of a lawful stakeholder - in particular any law enforcement officer as part of the search for the perpetrators of offences committed on the Internet.

 

b)     Data transferred to our service provider data processors  

- The ANTS works in collaboration with third-party companies: Worldline, Docaposte, Netsize, Intelcia and Eloquent.

These service providers have the capacity of data processors in the meaning of the GDPR. Consequently, the processing operations are carried out on behalf of the ANTS, which ensures that they only act under its instructions and implement appropriate technical and organisational measures, so that the processing of personal data complies with the security requirements and the protection of your rights in accordance with the Regulations.

 

8. The retention period for the data

 

The ANTS ensures that your data are retained for time needed for the required purpose and that they are definitively and irreversibly deleted after the stipulated retention period.

The retention periods are as follows:

  • 12 months for inactive accounts: the users will be notified by e-mail one month before the deletion of the account;
  •  24 hours for individual accounts that have not been activated;
  • 7 days for driving school student accounts that have not been activated;
  • 3 months for unarchived messages and documents associated with the account.

As concerns processing operations connected with the quality of the services for users, the data collected (the e-mail addresses of the users) are retained and then automatically deleted from the client management tool of the ANTS once the user has transmitted a response to the survey. Nonetheless, the user has the possibility to object to the use of his/her e-mail address by means of an unsubscribe link that appears in each e-mail sent to him/her.

 

9. The security measures

 

The security measures are all the technical and organisational measures taken to protect the personal data that is collected and processed against accidental or unlawful destruction, loss, alteration or unauthorised access or disclosure.

 

The personal data collected in connection with the services offered on the Portal are processed in accordance with secure protocols and allow the ANTS to manage the requests received in its computer applications.

The security measures are implemented in accordance with the:

  • Référentiel Général de Sécurité (General Security Reference Text), RGS 2.1, 06 October 2015
  • Politique de Sécurité des Systèmes d’Information de l’Etat (PSSIE) (State Information System Security Policy), V 1.0, 17 July 2014

 

10. Transfer of data outside of the European Union (or the adoption of an automated decision)

 

Your data are not transferred outside of the territory of the European Union.

No automated decisions are taken by the services of the ANTS.

 

11. The exercise of your rights

 

In accordance with all of the regulations in force, you possess rights concerning your data.

 

  •   A right of access and to be informed

The right of access may be exercised in accordance with the conditions provided for by Article 15 of the GDPR. You can make a request to find out what data we hold concerning you and obtain a copy.

You have the right to be informed at all times in a clear, transparent and understandable manner with regards to the processing carried out on your data.

 

  •   A right to rectification:

Any data concerning you that is incomplete or erroneous may be modified at your request. You may also complete your data at any time by means of an additional declaration.

 

  • A right to erasure:

The right to erasure does not apply in application of Article 17(3)(b).

 

  •   The right to restrict the processing:

The right to restrict the processing is applied under the conditions provided for by Article 18 of the GDPR.

 

  • The right to object:

In the event that you exercise this right, the ANTS may ask you for reasons relating to your particular situation and it has the possibility of invoking compelling and legitimate grounds which would prevail over your request in application of Article 21(1) of the GDPR.

 

By means of the unsubscribe link that appears in each e-mail sent to you, you have the right to object to the use of your e-mail address for processing relating to the improvement of the quality of service for the user.

Exercise your rights

 

For any information or to exercise your data protection rights concerning the processing of personal data managed by the ANTS, to the exclusion of all other requests, you may contact its data protection delegate, enclosing a copy of your identity document (passport, identity card, residence permit or proof of identity issued via the France Identité application) by post:

Ministère de l’Intérieur (Ministry of the Interior)
Attn: Délégué à la protection des données (DPO)
Place Beauvau
75800 Paris CEDEX 08.

 

 

You can also contact the data controller by post (with a copy of your identification document if you seek to exercise your rights) at the following address:

ANTS – Responsable du traitement "Portail"

18 rue Irénée Carré BP70474

08101 CHARLEVILLE MEZIERES CEDEX

 

 

In the event of a dispute concerning the exercise of your rights or if you believe that your complaint concerns a breach of the "French Data Protection Act", you may refer the matter to the Commission Nationale de l'Informatique et des Libertés (CNIL) (National Commission on Computer Information and Liberties), whose contacts are as follows:

 

Commission Nationale de l’Informatique et des Libertés

3 place de Fontenoy

TSA 80715

75334 Paris Cedex 07

https://www.cnil.fr/fr/plaintes

Suivez-nous
sur les réseaux sociaux