In BtoB relations, marketing material may be sent to the business address of the
person or entity without their prior consent if it is directly related to their business
activity.
98 The professional has only a right of information and a right to object.
In point of fact it is a mixed system. Although the opt-in system seems to be
promoted a priori, it includes many exceptions.
The data subject must be able to object simply and free-of-charge to the use of
their data. Moreover, data cannot be stored for more than three years.
The principles of purpose and security must be complied with.
There are general provisions in the Civil Code,
99 the LIL, the Labour Code,
100 the
Criminal Code
101 and many simplified standards of the CNIL
102 and one-off
authorisations concerning biometrics.
103 The Act of 20 June 2018 has added clarifications about biometric data required for controlling access to workplaces and to
devices and applications used as part of missions entrusted to employees, agents,
trainees, or service providers.
104
Employees must be informed beforehand of any surveillance system for places
that are not open to the public.
105 All surveillance camera systems are subject to
CNIL supervision.
106 It is in the context of this jurisdiction that it has called for a
democratic debate on the new uses of CCTV cameras.
107
Data processing is aimed at different domains: apart from surveillance cameras,
geolocation of vehicles, intercepting and recording calls, access to premises and
time-keeping supervision, work tools and personnel recruitment and
management.
108
Such surveillance systems are authorised if they are justified for billing services,
ensuring the safety of people and property, monitoring working time; for complying
98 Debet et al. (2015), p. 942.
99 Code civil, Article 9.
100 Code du travail, Article L 1121-1, Article L 1221-9, Article L 1222-3, Article L. 1222-4 and
Article L. 2323-32.
101 Code pénal (CP), Article 226-1 ff. and Article 226-16 ff.
102 NS-051: CNIL, Deliberation no 2015-165, 04.06.2015: CNILTEXT000030750827; NS-057:
CNIL, Deliberation no 2014-474, 27.11.2014: CNILTEXT000030048118; NS-042: CNIL, Delib.
No 02-001, 08.01.2002: CNILTEXT000017653507. NS-046: CNIL, Delib. No 2005-002,
13.01.2005 modifié par Deliberation no 2005-277, 17.11.2005: https://www.cnil.fr/sites/default/
files/atoms/files/ns-046-consolidee.pdf.
103 AU-052 - CNIL, Deliberation no 2016-186, 30.06.2016: JORFTEXT000033156742 et AU-053
- CNIL, Delib. No 2016-187, 30.06.2016: JORFTEXT000033156699.
104 LIL, Article 44-4
.
105 Code du travail, Article L.1221-9 and Article L.1224-4.
106 See the factsheets established by the French-CNIL: https://www.cnil.fr/sites/default/files/atoms/
files/videosurveillance.pdf. (Accessed 21 Sept. 2018).
107 https://www.cnil.fr/fr/la-cnil-appelle-la-tenue-dun-debat-democratique-sur-les-nouveauxusages-des-cameras-video. (Accessed 21 Sept. 2018).
108 https://www.cnil.fr/sites/default/files/atoms/files/travail-vie_privee.pdf.
170
L. Nicolas-Vullierme
person or entity without their prior consent if it is directly related to their business
activity.
98 The professional has only a right of information and a right to object.
In point of fact it is a mixed system. Although the opt-in system seems to be
promoted a priori, it includes many exceptions.
The data subject must be able to object simply and free-of-charge to the use of
their data. Moreover, data cannot be stored for more than three years.
The principles of purpose and security must be complied with.
There are general provisions in the Civil Code,
99 the LIL, the Labour Code,
100 the
Criminal Code
101 and many simplified standards of the CNIL
102 and one-off
authorisations concerning biometrics.
103 The Act of 20 June 2018 has added clarifications about biometric data required for controlling access to workplaces and to
devices and applications used as part of missions entrusted to employees, agents,
trainees, or service providers.
104
Employees must be informed beforehand of any surveillance system for places
that are not open to the public.
105 All surveillance camera systems are subject to
CNIL supervision.
106 It is in the context of this jurisdiction that it has called for a
democratic debate on the new uses of CCTV cameras.
107
Data processing is aimed at different domains: apart from surveillance cameras,
geolocation of vehicles, intercepting and recording calls, access to premises and
time-keeping supervision, work tools and personnel recruitment and
management.
108
Such surveillance systems are authorised if they are justified for billing services,
ensuring the safety of people and property, monitoring working time; for complying
98 Debet et al. (2015), p. 942.
99 Code civil, Article 9.
100 Code du travail, Article L 1121-1, Article L 1221-9, Article L 1222-3, Article L. 1222-4 and
Article L. 2323-32.
101 Code pénal (CP), Article 226-1 ff. and Article 226-16 ff.
102 NS-051: CNIL, Deliberation no 2015-165, 04.06.2015: CNILTEXT000030750827; NS-057:
CNIL, Deliberation no 2014-474, 27.11.2014: CNILTEXT000030048118; NS-042: CNIL, Delib.
No 02-001, 08.01.2002: CNILTEXT000017653507. NS-046: CNIL, Delib. No 2005-002,
13.01.2005 modifié par Deliberation no 2005-277, 17.11.2005: https://www.cnil.fr/sites/default/
files/atoms/files/ns-046-consolidee.pdf.
103 AU-052 - CNIL, Deliberation no 2016-186, 30.06.2016: JORFTEXT000033156742 et AU-053
- CNIL, Delib. No 2016-187, 30.06.2016: JORFTEXT000033156699.
104 LIL, Article 44-4
.
105 Code du travail, Article L.1221-9 and Article L.1224-4.
106 See the factsheets established by the French-CNIL: https://www.cnil.fr/sites/default/files/atoms/
files/videosurveillance.pdf. (Accessed 21 Sept. 2018).
107 https://www.cnil.fr/fr/la-cnil-appelle-la-tenue-dun-debat-democratique-sur-les-nouveauxusages-des-cameras-video. (Accessed 21 Sept. 2018).
108 https://www.cnil.fr/sites/default/files/atoms/files/travail-vie_privee.pdf.
170
L. Nicolas-Vullierme