Privacy policy

Data protection and privacy policy

Definition of the terms used in the Privacy Policy

"Data" or "Personal Data": means any information relating to an identified natural person or one who can be identified, directly or indirectly, by reference to an identification number or to one or more factors specific to that person, in accordance with the French Computing and Freedoms Act of 6 January 1978.

"Site" or "Service": means the website and all pages on that site.

"Publisher" or "We": means the company Civipol or the natural or legal person responsible for publishing the Site and for its content.

"User" or "You": means the user visiting the Site and using its Services.

1 - Introduction and role of the Privacy Policy

The purpose of this Policy is to describe how the Site respects your privacy and protects your Personal Data collected and processed as a result of your use of the Service.

It is important that you read this Privacy Policy so that you understand the reasons why and how we use your Data.

Please note that this Privacy Policy may be modified or supplemented at any time in order to comply with changes in laws and regulations or to adapt to case-law or technological developments. The date on which this Policy is updated will be clearly indicated, where applicable. All such modifications will be binding on you as soon as they are published on line. We therefore recommend that you consult this Privacy Policy regularly so that you are aware of any modifications.  You will also find a description of your privacy rights and how the law protects you.  If you have any questions about this Privacy Policy or if you wish to exercise your rights, as described in section 10 below, please email us at the following address: or write to us at: CIVIPOL, 9 Rue Notre-Dame des Victoires, 75002, PARIS, FRANCE.

2 - Data collected on the Site

Data collected and subsequently processed by the Site is the data that you willingly disclose by completing the various forms present on the Site. For certain content-related operations, you may be required to transmit Data concerning you to external partners via their own services, more specifically when submitting any applications that you might make. We will not have access to such Data since the collection and processing thereof is governed by conditions specific to those partners. We recommend that you consult the relevant terms and conditions before communicating your Data for such purposes.  Your IP address (identification number assigned by the Internet to your computer) is collected automatically. Please be aware that the Service may use an automatic tracking process (Cookie), which you can disable by changing the relevant settings on your browser, as explained in the terms of use of this Site.  Generally speaking, you are able to visit the site without communicating any personal information. It is understood that in all cases you have no obligation to transmit such information. However, if you refuse to do so, you may not be able to access certain information or services. We also collect, use and share aggregate data such as statistical or demographic data for any use whatsoever. Aggregate data may come from your personal information but is not considered by law to be Personal Data because it does not directly reveal your identity. For example, we can aggregate your usage data in order to calculate the percentage of users accessing a specific functionality of the Site.  In order to provide better content and services, the site uses AT INTERNET's analytics solution - XiTi - .

XiTi does not track your browsing habits on external websites. The information to which XiTi has access does not contain any Personal Data.  We do not collect "sensitive" data.

The contact details of Site Users registered on the Site will be saved, in accordance with the French Computing and Freedoms Act of 6 January 1978, which provides that Users have the right of access, withdrawal, modification or rectification of any Data that they have supplied. To exercise those rights, Users must send a request to the following email address:, or write to Civipol, 9 Rue Notre-Dame des Victoires, 75002, PARIS, FRANCE.  The collection of Users' Personal Data by the Publisher does not need to be declared to the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés – CNIL).

3 - Identity of the controller

The controller is the company Civipol, with registered office at the following address: 9 Rue Notre-Dame des Victoires, 75002, PARIS, FRANCE.

4 - Purpose of collected Data

Data that is identified as being compulsory on the Site's forms is necessary for using the corresponding functionalities of the Site and, more specifically, for operations related to the content offered on the Site. The Site may collect and process User Data for the following purposes:

  • To provide you with information or access to the services that you have subscribed, in particular support with the search for projects.
  • To collect information enabling us to improve our site, products and services, notably through the use of cookies.
  • To contact you about your professional plans and your applications.

5 - Recipients and use of collected Data

Data collected by us is processed for the requirements of the Service. You may receive emails from our Service. You can ask to stop receiving these emails by contacting us at the following address: or by clicking on the link provided in each of the emails sent to you. CIVIPOL alone is the recipient of your Personal Data. Your Personal Data will never be transmitted to a third party, except for third parties and subcontractors whose services are used by CIVIPOL. Neither CIVIPOL nor its subcontractors will sell the Personal Data of visitors to and users of its Site. Your Personal Data may be shared with the parties indicated below for the purposes set out in this Privacy Policy. We require all third parties to guarantee the security of your Personal Data and to process your data in accordance with the law. We do not allow our third party service providers to use your Data.

6 - Legal bases for data processing

In accordance with the General Data Protection Regulation (GDPR), CIVIPOL processes Personal Data in the following situations only:

  • with your consent, where there is a contract between you and CIVIPOL;
  • to comply with a legal obligation (under EU or national laws).

7 - Data security

Please note that your Data may be disclosed in accordance with a law or regulation or in compliance with a decision of a competent regulatory or judicial authority or, where necessary, to enable the Publisher to protect its rights and interests. We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used, modified, revealed or consulted without authorisation. Access to your Personal Data is also subject to a defined and documented security procedure.

8 - Period of Data storage

Data is stored at the Site's host (whose contact details are given in the Site's legal notices) and is kept for the period strictly necessary to achieve the purposes set out above and in any case for no more than 36 months. After that period, Data will be kept exclusively for statistical purposes only and will not be exploited in any way whatsoever.

9 - Authorised service providers and transfer to a third country in the European Union

CIVIPOL declares that it uses authorised service providers to assist with the collection and processing of the Data that you have provided. These service providers are situated exclusively within the European Union. CIVIPOL has previously obtained assurance that its service providers adopt appropriate safeguards and observe strict conditions in relation to Data confidentiality, usage and protection. These service providers are also subject to the General Data Protection Regulation (GDPR).

10 - Computing and Freedoms rights

In accordance with Personal Data protection laws, you have the rights listed below which you can exercise, as indicated in section 1 of this Privacy Policy, by writing to us at the postal address given above (CIVIPOL, 9 Notre-Dame des Victoires, 75002, PARIS, FRANCE) or by emailing :

  • Right of information: we are obliged to inform you how we use your Personal Data (as described in this Privacy Policy).
  • Right of access: you have the right to request access to data concerning you and to receive a copy of the Personal Data that we hold about you. However, on account of the security and confidentiality obligation assumed by CIVIPOL in relation to the processing of Personal Data, you are informed that your request will be handled provided that you furnish proof of your identity by producing a scan or photocopy of your valid identity document.
  • Right to rectification: you have the right to ask us to rectify your personal data where your details are incomplete or inaccurate. In accordance with this right, you are permitted by law to ask for the rectification, updating, locking or erasure of your Data, where your details are inaccurate, incorrect, incomplete or obsolete.
  • Right to erasure, also known as "right to be forgotten": in certain cases, you can ask us to erase the Personal Data that we have about you (except where there is an imperative legal reason why we have to retain such Data).
  • Right to restriction of processing: you have the right in certain cases to ask us to suspend the processing of Personal Data.
  • Right to data portability: you have the right to ask us for a copy of your Personal Data in a standard format (for example. a .csv file).
  • Right to object: you have the right to object to the processing of your Personal Data (for example, by prohibiting us from processing your Data for direct marketing purposes). However, this right can only be exercised in either of the following two situations: where the exercise of this right is based on legitimate grounds or aims to prevent collected Data from being used for direct marketing purposes.

Contact us if you wish to exercise any of the rights described above by writing to us at CIVIPOL, 9 Rue Notre-Dame des Victoires 75002 PARIS, FRANCE, or by emailing There is no fee for accessing your Personal Data (or for exercising any other right). However, we may charge a reasonable fee if your request is manifestly unfounded, repetitive or excessive. In this case, we can also refuse to respond to your request. CIVIPOL will be entitled, where applicable, to object to requests that are manifestly unreasonable on account of their systematic or repetitive nature or their number. We can ask you for specific information to confirm your identity and ensure your right of access to Personal Data (or to exercise any other right). This is a security measure designed to ensure that such Personal Data is not disclosed to a person who is unauthorised to receive that Data. We may also contact you to obtain more information concerning your request, so that we can respond to you more quickly.  We aim to respond to all legitimate requests within one month. This one-month period may be exceeded if your request is particularly complex or if you have made several requests. In this case, we will notify you and keep you informed.

11 - Complaint to the Data Protection Authority

If you believe that CIVIPOL is not fulfilling its obligations with respect to your Personal Data, you can lodge a complaint or request with the competent authority. In France, the competent authority is the CNIL, which you can contact by sending an email request to the following address

All rights reserved - 19 March 2019