Breadcrumb

Personal Data Management Policy

Updated version in July 2025

As part of this website and its associated sites, the City and Eurometropolis of Strasbourg process personal data.

These processing activities are carried out in compliance with current legislation, notably Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (GDPR), and Law No. 78-17 of 6 January 1978, the French Data Protection Act (LIL), as amended.

Definitions

  • Personal data: Any information that can directly or indirectly identify an individual.
  • Processing: Any operation or set of operations performed on personal data (e.g., collection, recording, organisation, consultation, extraction, erasure, destruction).
  • Data controller: The natural or legal person, public authority, agency, or other body that determines the purposes and means of processing.

  • Data subject: The person whose personal data is processed.

Obligations of the City and Eurometropolis of Strasbourg

Communication on the identity of the data controller

The data controller is: The City and Eurometropolis of Strasbourg, 1 Parc de l’Étoile, 67076 Strasbourg Cedex.

Appointment of a Data Protection Officer (DPO)

The Data Protection Officer for the City and Eurometropolis of Strasbourg is Mr. Olivier Koegler.

His role is to inform and advise the data controller. Any request related to personal data protection can be sent by postal mail to the Data Protection Office, City and Eurometropolis of Strasbourg, 1 Parc de l’Étoile, 67076 Strasbourg Cedex, or by email to dpo@strasbourg.eu or via the dedicated form.

Security measures

The City and Eurometropolis of Strasbourg implement technical and organisational security measures to protect the personal data being processed.

Any security incident or vulnerability can be reported to the Information Systems Security Officer of the City and Eurometropolis of Strasbourg.

Information provided to data subjects

  • The purpose of the data collection

  • The legal basis for data processing

  • Whether the data collection is mandatory or optional

  • The recipients of the data: Departments and Services of the City and Eurometropolis of Strasbourg and external entities

  • The data retention period

  • Any potential transfer of data outside the EU

  • Your rights regarding your data and the right to lodge a complaint with the CNIL (French Data Protection Authority)

Rights of data subjects

In accordance with Regulation (EU) 2016/679 and Law No. 78-17, you have the right to access, rectify, erase, object to, limit processing, data portability, lodge a complaint with the CNIL, and set directives regarding your data after your death.

Right of access

You may request access to your personal data.

The City and Eurometropolis of Strasbourg may refuse the request, particularly if it is unfounded, excessive, or infringes the rights of third parties.

Right of rectification

You may request the correction of your personal data if it is inaccurate or incomplete.

Right to erasure ("right to be forgotten")

You may request the erasure of personal data about you, provided you meet one of the following conditions:

  • Your data is no longer necessary for the purposes for which it was collected

  • You withdraw your consent to the use of your data (where the processing is based on consent)

  • Your data was collected when you were a minor in the context of information society services

  • Your data is being processed unlawfully

  • Your data must be erased to comply with a legal obligation

  • You object to the processing of your data, and there is no overriding legitimate reason for processing

It is important to specify the data you wish to have erased.

Right to object

You may object to processing for a specific purpose. You must provide "reasons related to your particular situation."

Your objection may be rejected if:

  • There are legitimate and compelling grounds for processing your data

  • Your data is necessary for the establishment, exercise, or defense of legal claims

  • A legal obligation requires processing your data

  • You have consented – you must withdraw consent rather than object

Right to restriction of processing

You may request a temporary freeze on the use of certain data.

If you dispute the accuracy of your data or object to its processing, we are allowed to verify or review your request for a certain period.

Right to data portability

You may request to retrieve part of your data in a machine-readable format.

This right applies to:

  • Data you have provided

  • Data for which the processing is based on your consent

  • Data that is processed automatically

Exercising this right must not affect the rights and freedoms of third parties.

Right to lodge a complaint with the CNIL

If you believe your rights are not respected, after contacting us, you may file a complaint with the CNIL.

Right to determine the fate of your data after death

In accordance with Article 85 of the French Data Protection Act, amended: "Any person may set directives regarding the retention, erasure, and communication of their personal data after their death."

Directives may be general or specific:

  • General directives relate to all personal data of the concerned person and may be recorded with a trusted third party certified by the CNIL.

  • Specific directives relate to particular personal data processing, which must be recorded with the relevant data controllers. The person concerned must give specific consent. Specific directives cannot be based solely on acceptance of general terms and conditions.

Exercising your rights

You can exercise your rights through four methods:

  • By email to the Data Protection Officer at dpo@strasbourg.eu (including a scanned ID)

  • Via the dedicated form (including a scanned ID)

  • By postal mail to Data Protection Office, City and Eurometropolis of Strasbourg, 1 Parc de l’Étoile, 67076 Strasbourg Cedex (including a copy of your ID)

  • By visiting the Administrative Centre’s reception (with ID)

 

The City and Eurometropolis of Strasbourg will respond, typically within one month of receiving the request. However, this period may be extended to up to three months in case of complex requests or a large number of ongoing requests. You will be informed within one month of the reasons for any extension.