{"id":57625,"date":"2023-04-22T22:33:04","date_gmt":"2023-04-22T20:33:04","guid":{"rendered":"https:\/\/www.cecile-zakine.fr\/?page_id=57625"},"modified":"2024-10-12T20:09:58","modified_gmt":"2024-10-12T18:09:58","slug":"rgpd-vie-privee-cnil-avocat","status":"publish","type":"page","link":"https:\/\/www.cecile-zakine.fr\/en\/rgpd-vie-privee-cnil-avocat\/","title":{"rendered":"When the protection of privacy and personal data becomes a matter for the European Union"},"content":{"rendered":"
[et_pb_section fb_built=\u00a0\u00bb1″ _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_row _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb4_4″ _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bb2871e790-4f3b-4880-910f-2e9a114ac662″ global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb4_4″ _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bb_initial\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n
The RGPD regulation therefore balances the right to privacy with the right to process certain personal data for reasons relating to environmental protection and efficient economic management of the port. <\/strong><\/p>\n This fair balance will enable everyone's interests to be reconciled in a respectful manner: the port's economic and environmental interests and the protection of everyone's privacy. <\/strong><\/p>\n This is precisely in line with Article 8(2) of the European Convention on Human Rights - a convention, it should be remembered, to which the European Union has acceded - which states that proportionate restrictions may be placed on the right to privacy where legitimate interests are at stake.\u00a0 <\/strong><\/p>\n [\/et_pb_text][et_pb_text _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bb2871e790-4f3b-4880-910f-2e9a114ac662″ global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb3_5,2_5″ _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb3_5″ _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n Article 8 of the European Convention on Human Rights states:<\/p>\n Article 8 - Right to respect for private and family life <\/em><\/p>\n 1 Everyone has the right to respect private and family life, home and correspondence<\/a>. <\/em><\/p>\n 2 A public authority may not interfere with the exercise of this right unless such interference is provided for by law and constitutes a measure which, in a democratic society, is necessary for national security, public safety, the economic well-being of the country, for the prevention of disorder or crime, for the protection of health or morals, or for the protection of the rights and freedoms of others.<\/strong><\/em><\/p>\n <\/p>\n As a result, Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) must be applied, directly applicable regulation<\/u><\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=\u00a0\u00bb2_5″ _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_image src=\u00a0\u00bbhttps:\/\/www.cecile-zakine.fr\/wp-content\/uploads\/2022\/10\/avocat-droit-immobilier-Valbonne.jpg\u00a0\u00bb alt=\u00a0\u00bbavocat rgpd\u00a0\u00bb title_text=\u00a0\u00bbavocat droit immobilier Valbonne\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb4_4″ _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n Article 8 of the European Convention on Human Rights states:<\/p>\n Article 8 - Right to respect for private and family life <\/em><\/p>\n 1 Everyone has the right to respect for their private and family life, their home and their correspondence. <\/em><\/p>\n 2 A public authority may not interfere with the exercise of this right unless such interference is provided for by law and constitutes a measure which, in a democratic society, is necessary for national security, public safety, the economic well-being of the country, for the prevention of disorder or crime, for the protection of health or morals, or for the protection of the rights and freedoms of others.<\/strong><\/em><\/p>\n <\/p>\n As a result, Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) must be applied, directly applicable regulation<\/u><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u00a0\u00bb1_3,2_3″ _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb1_3″ _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_image src=\u00a0\u00bbhttps:\/\/www.cecile-zakine.fr\/wp-content\/uploads\/2022\/10\/avocat-droit-immobilier-Le-Thor-1.jpg\u00a0\u00bb alt=\u00a0\u00bbavocat rgpd\u00a0\u00bb title_text=\u00a0\u00bbavocat rgpd\u00a0\u00bb _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][\/et_pb_image][\/et_pb_column][et_pb_column type=\u00a0\u00bb2_3″ _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n it seems essential to refer to it in the context of the technology you intend to develop and propose.<\/p>\n As such, Recital No. 4 of the Regulation of 27 April 2016 states:<\/p>\n The processing of personal data should be designed to serve humanity. The right to protection of personal data is not an absolute right; it must be considered in relation to its function in society and balanced against other fundamental rights, in accordance with the principle of proportionality.<\/em><\/strong> This Regulation respects all fundamental rights and observes the freedoms and principles recognised by the Charter and enshrined in the Treaties, in particular respect for private and family life, home and communications, and the protection of personal data,<\/strong> freedom of thought, conscience and religion, freedom of expression and information, freedom of enterprise, the right to an effective remedy and to a fair trial, and religious and linguistic diversity.<\/em><\/p>\n The processing of personal data must be in line with the objective laid down by the European legislator, which is very clear from recitals 6 and 7 of the Regulation:<\/p>\n <\/p>\n <\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb4_4″ _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n (6) Rapid technological change and globalisation have created new challenges for the protection of personal data. The extent to which personal data is collected and shared has increased significantly.<\/strong> Technologies are enabling both private companies and public authorities to use personal data in their activities as never before. Increasingly, individuals are making information about themselves publicly and globally accessible. Technology has transformed both the economy and social relations, and is set to do so again. facilitate the free flow of personal data within the EU and their transfer to third countries and international organisations, while ensuring a high level of protection for personal data. <\/strong><\/em><\/p>\n \u00a0<\/em><\/p>\n (7)<\/em><\/em>These developments call for a solid and more coherent data protection framework in the EU,<\/strong> accompanied by rigorous application of the rules<\/strong>It is important to create the trust that will allow the digital economy to develop throughout the internal market. Individuals should have control over their personal data. Both legal and practical certainty should be reinforced for individuals, economic operators and public authorities.<\/strong><\/em><\/p>\n \u00a0<\/em><\/strong><\/p>\n (10) \"\u00a0<\/strong>In order to ensure a consistent and high level of protection for individuals and to remove obstacles to the flow of personal data within the Union, the level of protection of individuals' rights and freedoms with regard to the processing of such data should be equivalent in all Member States\".\u00a0<\/em><\/p>\n <\/p>\n Recital 10 suggests that by adopting a very rigorous system from the outset in France, and taking into account the requirement for effective and similar protection in each of the Member States of the European Union. \u00a0<\/p>\n <\/p>\n With regard to recital 15 of the Regulation, which states :<\/p>\n \u00a0<\/em><\/p>\n \"In order to avoid creating a serious risk of circumvention, the protection of natural persons should be technology-neutral and should not depend on the techniques used. It should apply to the processing of personal data by automatic means as well as to manual processing, if the personal data are contained or intended to be contained in a filing system.<\/strong>. Files or sets of files and their covers which are not structured according to specific criteria should not fall within the scope of this Regulation\".<\/em><\/p>\n As a result, regardless of how personal data is processed, the Regulation RGPD<\/a> must apply whenever personal data is collected.<\/p>\n <\/p>\n So, for example, whether it's a video surveillance camera that can detect a number plate, or a technology that allows the regulation of a vehicle's speed, it's all possible. RGPD<\/a> is immediately applicable.<\/p>\n <\/p>\n This requirement is in line with the legislator's desire to offer maximum protection to personal data and privacy<\/a>.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_column type=\u00a0\u00bb4_4″ _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb][et_pb_text _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bb2871e790-4f3b-4880-910f-2e9a114ac662″ global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n [\/et_pb_text][et_pb_text _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n Recital 18:<\/p>\n \u00a0<\/em><\/p>\n \"This Regulation shall not apply to the processing of personal data carried out by a natural person in the course of strictly personal or domestic activities, and therefore unrelated to a professional or commercial activity. Personal or domestic activities could include the exchange of correspondence and the keeping of an address book, or the use of social networks and online activities that take place in the context of these activities. However, this Regulation shall apply to controllers or processors who provide the means to process personal data for such personal or domestic activities.<\/strong>. \"<\/em><\/p>\n <\/p>\n The scope of the Regulation therefore allows you to apply your technology to it if we look at the Regulation by taking into account your data processing activity, even if it involves photographing a boat that only has a personal activity.<\/p>\n <\/p>\n Recital 32:<\/strong><\/p>\n <\/p>\n \"\u00a0Consent should be given by a clear positive act by which the data subject freely, specifically, informally and unambiguously expresses his or her agreement to the processing of personal data concerning him or her, for example by means of a written statement, including by electronic means, or an oral statement.<\/strong>. This could be done in particular by ticking a box when consulting a website, by opting for certain technical parameters for information society services or by means of another statement or other behaviour which clearly indicates in this context that the data subject agrees to the proposed processing of his or her personal data. There can therefore be no consent in cases of silence, default tick boxes or inactivity. The consent given should apply to all processing activities with the same purpose or purposes. Where the processing has several purposes, consent should be given for all of them. If the data subject's consent is given following a request made by electronic means, this request must be clear and concise and must not unnecessarily disrupt the use of the service for which it is given\".<\/em><\/p>\n \u00a0<\/em><\/strong><\/p>\n A system should be set up whereby boat owners give their free, express and unequivocal consent. <\/strong><\/p>\n <\/p>\n Recital 39: <\/strong><\/p>\n <\/p>\n \"Any processing of personal data should be lawful and fair. The fact that personal data relating to natural persons are collected, used, accessed or otherwise processed and the extent to which such data are or will be processed should be transparent to the natural persons concerned.<\/em><\/strong> The principle of transparency requires that any information and communication relating to the processing of personal data must be easily accessible, easy to understand and formulated in clear and simple terms. This principle applies, in particular, to information provided to data subjects concerning the identity of the controller and the purposes of the processing operation, as well as to other information intended to ensure a high level of protection of data subjects. fair and transparent treatment of the natural persons concerned<\/strong> and their right to obtain confirmation and communication of the personal data relating to them which are being processed. Individuals should be informed of the risks, rules, safeguards and rights associated with the processing of personal data and how to exercise their rights in relation to such processing. In particular, the specific purposes of the processing of personal data should be explicit and legitimate, and determined at the time of collection of the personal data.<\/strong>. Personal data should be adequate, relevant and limited to what is necessary for the purposes for which it is processed. This requires, in particular, ensuring that data retention periods are limited to the strict minimum. Personal data should only be processed if the purpose of the processing cannot reasonably be achieved by other means. In order to ensure that data are not kept longer than necessary, time limits should be set by the controller for their erasure or for periodic review. Every reasonable step should be taken to ensure that inaccurate personal data are rectified or deleted.<\/strong>. Personal data should be processed in such a way as to ensure appropriate security and confidentiality, including the prevention of unauthorised access to, and use of, such data and the equipment used for their processing\".<\/em><\/p>\n [\/et_pb_text][et_pb_image src=\u00a0\u00bbhttps:\/\/www.cecile-zakine.fr\/wp-content\/uploads\/2023\/08\/avocat-rgpd-jpg.webp\u00a0\u00bb _builder_version=\u00a0\u00bb4.21.2″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb alt=\u00a0\u00bbavocat rgpd\u00a0\u00bb title_text=\u00a0\u00bbavocat rgpd\u00a0\u00bb hover_enabled=\u00a0\u00bb0″ sticky_enabled=\u00a0\u00bb0″][\/et_pb_image][et_pb_text _builder_version=\u00a0\u00bb4.20.4″ _module_preset=\u00a0\u00bbdefault\u00a0\u00bb global_colors_info=\u00a0\u00bb{}\u00a0\u00bb]<\/p>\n <\/p>\n \u00a0<\/strong><\/p>\n \" 1. These regulations apply to processing of personal data<\/strong>, automated<\/strong> in whole or in part, as well as the non-automated processing of personal data contained or intended to be contained in a filing system\".<\/em><\/p>\n <\/p>\n <\/p>\n Article 4 Definitions For the purposes of this Regulation :<\/p>\n <\/p>\n <\/p>\n A personal data<\/a> is any information relating to an identified or identifiable natural person. <\/strong><\/p>\n A natural person can be identified:<\/strong><\/p>\n directly (example: first and last name) ;<\/strong><\/p>\n indirectly (e.g. by a telephone or fax number). number plate<\/u>an identifier such as the social security<\/a>(e.g. a postal or e-mail address, but also a voice or image).<\/strong><\/p>\n \u00a0<\/strong><\/p>\n 2) \"processing\" means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;<\/p>\n <\/p>\n 3) \"restriction of processing\" means the marking of retained personal data with a view to limiting their future processing;<\/p>\n <\/p>\n 4) \"profiling\" means any form of automated processing of personal data which involves the use of personal data to evaluate certain personal aspects relating to an individual, in particular to analyse or predict factors associated with that individual's work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;<\/p>\n <\/p>\n 5) \"pseudonymisation\" means the processing of personal data in such a way that it can no longer be attributed to a specific data subject without recourse to additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person;<\/p>\n <\/p>\n 6) \"filing system\" means any structured set of personal data accessible according to specified criteria, whether that set is centralised, decentralised or distributed on a functional or geographical basis;<\/p>\n <\/p>\n 7) \"controller\" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing; where the purposes and means of such processing are determined by Union law or by the law of a Member State, the controller may be designated or specific criteria for such designation may be laid down in Union law or in the law of a Member State;<\/p>\n <\/p>\nMe Zakine, Lawyer, Doctor of Law, offers you a text on the impact of the RGPD on privacy.<\/h3>\n
Read his portrait here<\/a><\/h3>\n
\n
Analysis of the recitals of the RGPD regulation, which provide an overview of the objectives pursued by the European Union<\/strong><\/h2>\n
<\/h2>\n<\/li>\n<\/ul>\n
\n
Detailed analysis of regulatory provisions <\/strong><\/h2>\n<\/li>\n<\/ul>\n
\n
\n
\n