Personal data

Personal data

Your private life is a priority at CNR

To be as transparent as possible with you, we first set out our personal data protection policy. We then present how your personal data allow our service to function, how we collect them, and how we ensure their good use and protection.


Our personal data protection policy

The processing of personal data collected on the internet site is carried out by CNR, a joint stock company with a paid up capital of €5,488,164, registered on the Trade and Company Registry of Lyon, under number 957 520 901 and whose head office is located at 4 rue André Bonin, 69004 Lyon, France – 00 330(0)4 72 00 69 69.


In conformity with the Law on Data Protection and the Freedom of Information, amended, the collection and processing of your personal data by CNR are necessary to:

  • process requests for information in order to answer users’ questions,
  • manage reservations in order to programme visits,
  • perform accounting to check payments,
  • follow up client relations to manage reservations and possible demands,
  • the mediation of opinions to share the opinions of users with visitors to the site.

The legal basis for the processing is legitimate interest (cf. article 6.1.f of the European regulations relating to data protection).


4 types of data can be collected by CNR:

  • Your contact and reservation data: name, first name, organisation, post code, email address. These data are processed in France by CNR, Acti and Ingénie. They are kept for at least 5 years counting frum their collection or the last contact made by you.
  • You accounting data: name, first name, debit card number, its expiry data, its security code. These data are processed in France by Paybox System. They are kept for a maximum of 10 years counting from their collection or the last contact made by you.
  • Your browsing data on the internet site and reservation platform (cookies): duration of visit, pages viewed, etc. These data are processed in France by CNR and Ingénie, but also in the United States by Google and YouTube. They are kept for an unlimited time.
  • Your opinion on the visit to CNR’s industrial developments: first name, date of your visit, date of your opinion, score of visit, comment. These data are processed in France by CNR and Ingénie. They are kept for a maximum of 5 years counting from the date of their collection or the last contact made by you.


The recipients of these personal data are, in the strict framework of the purposes mentioned above, personal duly authorised by CNR, their partners and subcontractors, in the present case:

  • Acti, which publishes the site, whose head office is located at 289 rue Garibaldi, 69007 Lyon, France – 00 33 (0)4 37 37 25 10.
  • Ingénie, which published the reservation platform, whose head office is located at 210 rue des Sept Laux, 38570 Le Cheylas, France – 00 33 (0)4 38 72 91 00.
  • Paybox System, which ensures the payment of visits on the site reservation platform, whose head office is located at 11 A rue Jacques Cartier, 78280 Guyancourt, France – 01 61 37 05 70.
  • Google, which establishes the statistics of the site and the reservation platform, whose head office is located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States – +1 650 253 0000.
  • YouTube, which hosts the videos used on the site, whose head office is located at 901 Cherry Ave. San Bruno, California 94066, United States – +1 650 872 8513 (FAX).


The data processed are kept only during the duration required to carry out the objectives described above, within the limitation period applicable.


Regarding cookies, the user of the internet site can at any time refuse the deposit of cookies in their computer and also deactivate the cookies possibly deposited in it already.


You have the right to access, rectify and erase your personal data. When consent is required for processing, you have the right to withdraw them. Under certain regulatory conditions, you have the right to demand a limit to said processing or oppose it. You can exercise these different rights by contacting the Data Protection Officer (DPD) directly by writing to the following address:


Délégué à la Protection des données, DJEA
2 rue André Bonin
69316 Lyon Cedex 04
Send an email


If you decide to make known your rights by letter, you must prove your identity by enclosing a copy of your national identity card or your client number.

You can also request the portability of the data you sent when they were necessary for the contract or when your consent was required.

You also have the right to view the directives related to the fate of your personal data after your decease.

Claims bearing on the collection and processing of your personal data can be sent to the service of the Data Protection Officer (DPD), whose address is provided above. In the case of continuing disagreement regarding your data, you are entitled to contact the CNIL (the competent controlling authority) at the following address:


Commission Nationale Informatique et Libertés
3 place de Fontenoy
75007 Paris

00 33 (0)1 53 73 22 22


What exactly are personal data?

They are data that can be used to recognise you directly or indirectly. They can include your name, your postal address, your telephone number, and your email address.

In particular we use this information to communicate with you. Operations, called processes, are performed on your data such as collection, storage, utilisation, etc. To know more, consult the full definitions on the CNIL site.


Your data are essential for the quality of our services and your experience.

Your data are essential for us to provide you with the service worthy of your expectations in terms of simplicity and fluidity. Thanks to your data, we can improve our services. For example, by analysing your feedback and comments after you have browsed on our site.


You communicate your data to us when you use our services.

  • Contextual data such as data generated from browsing on our site, or when you leave a comment.
  • Cookies: when you visit any internet site, these small files leave an imprint of your browsing session.


Your data are in good hands

The data that you communicate via our site are used to satisfy your demand. They are collected by the internal services of CNR and for our subcontractors who are contractually bound to conform to European legislation, even in the case where they are located outside the European Union.

In conformity with the regulations, we may be led to transferring your data to an authorised third party such as jurisdictions or controlling authorities.


We never keep your data longer than necessary

We comply with the recommendations of the legislator regarding data conservation. Certain personal data can be kept for 5 years after the date of the end of contract for legal reasons.


CNR protects your private life

We implement adapted security measures to protect personal data against any malevolent intrusion, any loss, alteration or disclosure to a nonauthorized third party.

The information system, the servers, and the networks we use to process and store personal data are equipped with security and protection systems (data encryption, firewall, redundancy, backup, etc.).

We only issue authorisations to access our information system to employees who need such access to carry out their functions. Furthermore, we make our employees aware of the protection of personal data made available to them in the framework of their functions.

We require our service providers to conform to these same principles of protection.

The present Charter may be changed at any time, in particular due to the introduction of new services or new technologies, or changes in the legislation and regulations.

We invite you to consult this page regularly to learn of any possible changes.