Personal data

When using the Website, users may be required to provide personal information, in particular via the ‘Contact’ and ‘Cycle status’ forms.

When users fill in a form on the Website, the mandatory or optional nature of the personal data is indicated by an asterisk. This may include the following data:

Name;
Company;
Telephone number and email address.

The data collected through these forms will not be disclosed to third parties. It is transmitted solely to APIC’s internal departments and is used for the purposes of managing commercial relations, in particular to respond to user requests.

APIC ensures that personal data is kept for the period specified on the collection forms and for the period necessary to fulfil the purposes described above, which does not exceed the period necessary for processing in accordance with the provisions of applicable law.

Apart from the cases set out above, we undertake not to sell, rent, transfer or give access to your data to third parties without your prior consent, unless we are compelled to do so for a legitimate reason (legal obligation, fight against fraud or abuse, exercise of rights of defence, etc.).

In accordance with the amended French Data Protection Act of 6 January 1978 and European Regulation No. 2016/679/EU of 27 April 2016 (applicable from 25 May 2018), you have the right to access, rectify, transfer and erase your data, or to restrict its processing. You may also, for legitimate reasons, object to the processing of data concerning you.

To exercise these rights, users may, subject to providing valid proof of identity, send a request accompanied by valid proof of identity by email to the following address:contact@apic-asso.com

For further information or complaints, you may contact the Commission Nationale de l’Informatique et des Libertés (more information at www.cnil.fr).

FNUCI Privacy Policy

This Privacy Policy (hereinafter ‘the Policy’) aims to inform data subjects about the processing of personal data carried out within the framework of the single national database of identified cycles (hereinafter “FNUCI”), established by Law No. 2019-1428 of 24 December 2019, known as the ‘Mobility Orientation Law’, in accordance with Decree 2020-1439 of 23/11/2020, the opinion of the CNIL, and the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR) and the amended Act of 6 January 1978 (hereinafter collectively referred to as the ‘Applicable Regulations’).

In accordance with Article R. 1271-23 of the Transport Code, the Minister of Transport, by order of 28 December 2020 relating to the management of the single national database of identified bicycles, designated the APIC as the data controller for the FNUCI.

The FNUCI data controller is therefore the Association for the Promotion and Identification of Cycles and Active Mobility (hereinafter referred to as APIC), a registered association with its registered office at 33 rue Nungesser et Coli – 75016 Paris, registered with the Paris Prefecture and whose SIREN number is 889 105 243.

This Privacy Policy sets out APIC’s commitments regarding the protection of your personal data in the context of the FNUCI processing managed by APIC.

APIC has appointed a Data Protection Officer responsible for ensuring the proper application of the applicable regulations and respect for your rights under the said law.

If you have any questions, please contact the Data Protection Officer at the APIC head office address above or at the following email address contact@apic-asso.com

  1. Data collection and use
    1. Data collected and processed

The data contained in the FNUCI are as follows:

Data concerning the purchaser of the bicycle and provided on a mandatory basis by the purchaser to the seller of the bicycle:
– Surname, first name or company name;
– Telephone number;
– Email address;

Data concerning the purchaser of the bicycle and provided by them on an optional basis to the seller of the bicycle:
– Date of birth;
– Postal address;
– Surnames and first names of any co-owners of the bicycle;

The bicycle identification number generated and assigned by the APIC and provided by an approved identification operator (OIA) for this purpose to the seller of the bicycle.

The bicycle seller must also provide the following information about the bicycle:

Information describing the bicycle (type of vehicle, brand, model, colour);
The status of the bicycle (ownership and use);

Optional technical data describing the bicycle includes the serial numbers of the bicycle, motor and battery.

These categories of data have been deemed by the CNIL to be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (deliberation no. 2020-102 dated 15 October 2020).

                ii. The purposes of the processing and the applicable legal regime

The processing of the personal data listed above, carried out within the framework of the FNUCI, is, in accordance with Articles L. 1271-3, R. 1271-2 and R. 1271-8 of the Transport Code, for the purposes of combating theft, handling stolen goods and the illegal resale of bicycles, and facilitating the return of stolen bicycles.

This processing is based on compliance with a legal obligation incumbent on the APIC as the data controller designated by the decree of 28 December 2020 relating to the management of the single national database of identified bicycles, in accordance with Article R. 1271-23 of the Transport Code.

The data may also be used for anonymous statistical purposes or, with your consent, to offer you additional free services related to your bicycle.

This processing of personal data is carried out for explicit, legitimate and specific purposes and is based on the appropriate legal grounds, as validated by the CNIL in its deliberation no. 2020-102 dated 15 October 2020.

     2.Recipients of the data

Insofar as the objective is to combat theft and facilitate the return of bicycles to their owners, the data stored in the FNUCI is accessible to:

  • The police, gendarmerie and customs services;
  • To impound lots;
  • To municipal police officers, rural police officers and municipal officers assigned to the lost property service, authorised by the mayors of their municipalities;
  • To persons, services or organisations that contribute to the identification of bicycles;
  • To the director of the central administration responsible for transport and mobility or officers under his authority.

However, the declaration status relating to the loss or theft of the bicycle is accessible to everyone using the bicycle’s identification number on the APIC website (www.apic-asso.com).

Our technical service provider, IN Groupe, the subcontractor responsible for managing the database, may also have access to certain data for maintenance purposes only.

 

  1. Data Location

Your data is stored on IN Groupe servers located in France.

FNUCI data will not be transferred outside the European Union.

 

  1. Data retention period

The personal data of identified bicycle owners is retained by FNUCI for the entire duration of ownership of the bicycle.

The personal data of the owner of an identified bicycle is deleted as soon as the owner declares that they are no longer in possession of the bicycle. This data is replaced by that of the new owner/manager of the bicycle after its sale or destruction.

After 9 years and 6 months without any changes to the data contained in the FNUCI relating to a bicycle’s identification number, the number is declared ‘dormant’ and a request for an update is sent to the operator responsible for the number in question. This operator then forwards the request to the person registered as the owner of the bicycle concerned for the purposes of updating. If the operator does not respond within 6 months, the data linked to the cycle identification number is deleted.

  1. Security and confidentiality

APIC has implemented all appropriate measures to ensure the confidentiality and security of data, in order to prevent its damage, deletion or access by unauthorised third parties.

Taking into account the state of the art, the costs of implementation, the nature, scope, context and purposes of the processing, as well as the risk and extent of the rights and freedoms of natural persons, APIC undertakes to implement appropriate technical and organisational measures to ensure a level of security appropriate to this risk in accordance with Article 32 of the GDPR.

  1. Your rights

In accordance with Article R. 1271-14 paragraph 3 of the Transport Code, the right to object does not apply to the processing of the FNUCI, as this processing is based on compliance with a legal obligation.

The rights of access and rectification of identified bicycle owners are exercised through the relevant authorised operator.

For other data processing, in accordance with Article 13 of the GDPR, you have the right to request APIC to access your personal data, rectify or erase it, withdraw your consent or restrict its processing.

To exercise these rights and for any requests relating to personal data, you can contact our Data Protection Officer at the following address: contact@apic-asso.com, who will forward the request to the approved identification operator who manages the identifier, if necessary.

If you consider that the processing of your personal data constitutes a violation of the GDPR, please contact us. APIC is always available to listen to your concerns. We would also like to remind you that, in accordance with Article 77 of the GDPR, you may lodge a complaint with the CNIL.

This remedy may be exercised without prejudice to any other remedy before an administrative or judicial court. You also have the right to an effective administrative or judicial remedy if you consider that the processing of your personal data covered by this Privacy Policy constitutes a violation of the applicable texts.

  1. Changes to the Privacy Policy

This Policy may be amended by APIC at any time, in particular in the event of new recommendations from the CNIL, changes in the processing of Personal Data or changes in the applicable law.

APIC undertakes to publish the latest version of its Privacy Policy on its website and to provide you with the date of the last update.

Date of last update: 15 September 2023