Protection of personal data

Orange undertakes, in the context of its activities and in compliance with legislation in force in France and in Europe, to ensure the protection, confidentiality and security of the personal data of users and its services, as well as respecting their private life.

This Policy informs customers and users about the manner in which Orange, its subcontractors and its partners process their personal data.

This Policy is especially applicable to customers and users of the offers and services, as well as visitors to the 118712.fr site.

Why does Orange process your personal data?

Orange only processes personal data for defined, explicit and legitimate purposes. Orange does not process data in any manner that is incompatible with such purposes.

Orange processes personal data in the context of its universal directory activities carried on by 118712.fr. This processing is implemented on the basis of the legitimate interests of Orange to fulfil the regulatory provisions relating to directory and information services.

To that end and in observance of regulations, as well as the rights and choices in publication, Orange collects from operators lists of their subscribers, which it makes available to the public:

• on the one hand via 118712.fr
• and on the other hand in the context of its activities in telephone information services

For this purpose, data is kept for the entire period of registration with the directory and is deleted, whether on the updates sent to 118712 by the operators, or at the request of the person concerned, at the latest one week from receipt of the request by Orange. It is specified that such requests to be deleted from the directory are addressed to Orange via the form “Contact us”, available on 118712.fr.

Data is also processed with a view to offering via 118712.fr, a service to provide visibility to professionals and the connection of these to the users of 118712.fr. This processing is carried out on the basis of fulfilling a contract and at the user’s request.

To that purpose, for certain professionals whose information files are available on 118712.fr, Orange in collaboration with its partners (Yellow Pages and “La Fourchette” especially) offers to users a module for the making of appointments or bookings. The user is informed that to proceed with a reservation or appointment scheduling, he is to be redirected to the partner’s internet site offering the relevant module. The user's personal data is processed by the partner as data controller, in accordance with its personal data protection policy. Any request from the user, relating to his personal data, should therefore be addressed directly to the partner.

Finally, Orange processes your data to meet its legal or regulatory obligations, such as the management of data communication requests to the proper authorities.

To this effect, the purposes pursued by Orange are the following:

• Replying to the requisitions of the authorities and legal rulings
• Replying to the right of communication from the authorities

What data is processed?

In the context of its activity of a universal directory service and information service, Orange is mainly the recipient of data that has been collected from users by their telephone service operator. Orange also processes personal data, directly collected from the User or resulting from the use of services offered by Orange on 118712.fr.

Orange only processes data or a category of data, if it is strictly necessary for the purpose being pursued.

Orange processes the following categories of data:

• Identification data: Surname, first name,
• Contact details: postal address, telephone number, etc.
• specific data on professional subscribers: the title, profession, SIRET code, NAF business code
• Connection data, usage of services and interactions: Connection and usage logs

Who are the recipients of your data?

The data collected is intended for Orange’s internal departments and its sub-contractors.

Data may equally be processed by Orange’s partners. It is a matter of such situations, when the partners intervene to provide services. For example, when the user proceeds with a booking or the making of an appointment, this data is processed by those partners providing the modules that allow such connection services to operate. It could also be a matter of processing for which your consent is sought.

Data processed could in the end be sent to the competent authorities, at their request, in the context of judicial proceedings, in the context of legal enquiries and requests for information at the behest of the authorities or to comply with other legal obligations.

Is your personal data processed outside the European Union?

Data collected is likely to be processed outside the European Union. In this case, Orange makes the necessary provisions with its sub-contractors and partners to guarantee an adequate level of protection and thus in complete compliance with the applicable regulations.

If the sub-contractors and partners are not signatories to the “Privacy Shield” agreement, dealing with transfers to the United States of America, or are not situated in a country having legislation not considered as offering adequate protection, then they will have previously signed the “Standard Contractual Clauses” of the European Commission or shall be subject to mandatory internal Rules, approved by the authorities. .

What are the rights of the persons concerned?

The persons concerned by the processing of personal data have the right of access, rectification and deletion of data that concerns them. They may request the porting of the latter. They have the right to object to processing being carried out or request its limitation.

Persons concerned by the processing of personal data can send out directives on the storage, deletion or communication of their personal data after their death.

Specific rule on telephone canvassing: any consumer can register himself free-of-charge on a do-not-call list called “Bloctel”, no longer to be approached by telephone by any professional with whom he does not have an ongoing contractual relationship. The consumer may register on the www.bloctel.gouv.fr website or by post, addressed to: Société Opposetel, Service Bloctel, 6, rue Nicolas Siret – 10 000 Troyes

Exercise of rights

To ensure that their personal data no longer appears in the directories, the persons concerned are invited to make a request to their telephone service provider.

Those persons concerned by the processing of personal data on 118712.fr may exercise their rights at any time by going to the page “Contact us”.

NB: Dealing with connection activities for users of the “118712.fr” with professionals having a listing on the site, those persons concerned should exercise their rights with the professionals who are contacted.

Any request for the exercise of rights must be accompanied by a photocopy of the piece of identity (national identity card provided by the French State or European Union identity card or passport, residency permit provided by the French State, a resident’s card provided by the French State or identity booklet provided by the French State).

A reply shall be given within a period of one month from receipt of the request.

If the correspondence with Orange have not been satisfactory, the person concerned has the option of lodging a complaint with the French National Commission for Data Protection and Liberties (CNIL), the regulating authority in charge of observance of obligations in matters of personal data in France.

How is data kept secure?

Orange ensures that data is processed in total security and confidentiality, including certain operations that are carried out by sub-contractors. To that effect, the appropriate technical and organisational measures to avoid the loss, improper use, alteration or deletion of personal data affecting you have been put in place. These measures are adapted according to the level of sensitivity of the data being processed and according to the risk that processing or its implementation presents.

Last updated on 23/03/2020