This privacy policy informs users of the ic-dash.eu website (hereinafter “the Website”) about how their personal data is collected, processed and stored, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and French Act No 78-17 of 6 January 1978 as amended (the “French Data Protection Act”).
1. Data controller
The controller responsible for processing personal data collected on the Website is:
Commissariat à l’énergie atomique et aux énergies alternatives (CEA) 25 rue Leblanc, Bâtiment Le Ponant D, 75015 Paris, France SIREN: 775 685 019
For the IC-DASH project, the point of contact is: Yann Gallais, IC-DASH Project Coordinator — yann.gallais@cea.fr
2. Data Protection Officer (DPO)
The CEA has appointed a Data Protection Officer, who can be reached at:
CEA Data Protection Officer — dpo@cea.fr [To be confirmed with CEA]
3. Data collected and purposes
3.1 Contact form
When you use the contact form on the Website, the following data is collected:
| Field | Status |
|---|---|
| Name | Required |
| Email address | Required |
| Company | Required |
| Phone | Optional |
| Subject | Required |
| Topic | Required |
| Message | Required |
- Purposes: to process your enquiry, reply to you and, where appropriate, put you in contact with the relevant IC-DASH partner(s).
- Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) or the legitimate interest of the controller in responding to enquiries (Art. 6(1)(f) GDPR).
3.2 Technical and browsing data
When you visit the Website, certain technical data is automatically collected by the servers for operational and security purposes:
- IP address
- Browser type and version
- Operating system
- Pages viewed, time spent, referrer pages
- Connection date and time
- Purposes: ensuring the proper operation, security and improvement of the Website.
- Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).
3.3 Cookies
The Website uses cookies under the conditions set out in Section 7 below.
4. Recipients of the data
Your personal data is shared exclusively with:
- authorised CEA staff working on the IC-DASH project;
- where relevant, partners of the IC-DASH consortium (CEA, Siemens EDA, SiPearl, Capgemini, IC’ALPS, EASii IC, SERMA ID MOS, CIME-P, Presto Engineering, Synergie CAD PSC) when introduction is necessary to handle your request;
- our technical service providers (in particular the hosting provider Infomaniak Network SA), strictly within the scope of their mission and under a confidentiality commitment.
Your data is never sold, rented or transferred to third parties for commercial prospecting purposes.
5. Transfers outside the European Union
The Website is hosted by Infomaniak Network SA, whose servers are located in Switzerland. Switzerland benefits from an adequacy decision issued by the European Commission, guaranteeing a level of data protection equivalent to that ensured within the European Union.
No transfer of your data to a third country that does not benefit from an adequacy decision or appropriate safeguards is carried out.
6. Data retention periods
| Data category | Retention period |
|---|---|
| Contact form data | 3 years from the last contact, or earlier upon your request |
| Data processed within an effective introduction to a partner | Until the end of the relationship, then archiving in accordance with applicable legal obligations |
| Technical data and connection logs | 12 months maximum |
| Cookies | See Section 7 |
7. Cookies and trackers
The Website uses the following categories of cookies:
7.1 Strictly necessary cookies
Essential to the operation of the Website (session management, WPML language preference, security). These cookies do not require your prior consent.
7.2 Audience measurement cookies
When activated, these cookies allow us to measure the Website’s audience and improve its operation. They are placed only after your explicit consent is collected via the cookie banner.
7.3 Managing your preferences
You can at any time:
- modify your preferences via the cookie management module available on the Website;
- configure or delete cookies through your browser settings (Chrome, Firefox, Safari, Edge…).
Note for Florian: insert here, after go-live and configuration of the consent banner, the detailed list of cookies actually used (name, purpose, duration, issuer).
8. Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights over your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure / “right to be forgotten” (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to define directives regarding the fate of your data after your death
To exercise these rights, you may contact us:
- by email: dpo@cea.fr with copy to yann.gallais@cea.fr
- by post: CEA — IC-DASH Project, attn. Data Protection Officer, 25 rue Leblanc, Bâtiment Le Ponant D, 75015 Paris, France
A response will be provided within a maximum of one month from receipt of your request, extendable by two months in case of particular complexity. Proof of identity may be requested in case of reasonable doubt as to your identity.
9. Right to lodge a complaint with the CNIL
If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the French data protection authority, the CNIL (Commission nationale de l’informatique et des libertés):
3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07 — France Website: www.cnil.fr
You may also lodge a complaint with the data protection authority of your country of residence.
10. Data security
The CEA and its hosting provider implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR: HTTPS protocol, regular backups, access controls and security updates.
11. Changes to this privacy policy
This policy may be updated to reflect regulatory, case-law or technical changes. The version applicable is the one published on the Website at the date of your visit.
Last updated: 17/06/2026
