The amended French Data Protection Act of January 6, 1978, and the European Regulation No. 2016/679/EU of April 27, 2016 ("GDPR") form the legal framework applicable to the processing of personal data. These texts notably impose various obligations regarding the protection of employees' data and the obligation to inform them about the processing of their personal data.
A "personal data" refers, under the applicable regulations, to any information relating to an identified or identifiable natural person, where such identification can be made directly or indirectly (in other words, data that could identify a natural person when combined with other data sources, such as an identification number or other elements specific to the individual).
To determine whether a person is identifiable, all means reasonably available to the data controller or any other person with access to the data must be considered.
The person concerned by the processing of personal data is the one to whom the data being processed relates.
The term "processing" generally refers to any operation or set of operations performed, whether by automated means or not, on personal data or sets of personal data.
Under the legal framework outlined above, any concerned person has the right to access, rectify, oppose, port, limit, or erase their data, or withdraw their consent regarding the processing of their data.
For any requests regarding the exercise of these rights, concerned persons can contact the Data Protection Officer at the following address:
rte-informatique-et-libertes@rte-france.com
For further information, concerned persons can also consult the website of the French Data Protection Authority ("CNIL"). Additionally, they can file a complaint with the supervisory authority under the conditions provided by the applicable regulations.