Privacy policy
Data controller
DAVANTI, a simplified joint-stock company with share capital of €1,000, Aix-en-Provence Trade and Companies Register 878 397 595, publisher of normatys.org under its trade name NORMATYS, is the controller for the processing operations described below.
Processing operations, legal bases and retention
| Processing | Legal basis | Retention period |
|---|---|---|
| No form is hosted on this site: enquiries are addressed to IRICE, which is the controller for them | Not applicable to NORMATYS | Not applicable |
| Contributions to public consultations | Legitimate interest (transparency of standard development), see below | Lifetime of the standard concerned (public archives) |
| Applications to the scheme committee | Pre-contractual measures | 24 months |
| Audience measurement (Matomo, self-hosted) | Legitimate interest (statistics, consent-exempt configuration) | 25 months |
Publication of consultation work
The demonstration of consultation required by Directive (EU) 2024/825 rests on working documents whose publication is non-nominative: neither the composition of the scheme committee nor the names of contributors are published on this site. Such publication is not required by any text and would expose individuals with no compliance gain.
Where a record of decisions or a table of responses to comments is published, it is published with names and contact details redacted. Contributors are informed of this when they submit a contribution.
Processors and recipients
Hosting: Infomaniak Network SA (Switzerland, adequacy decision of the European Commission). Audience measurement: a Matomo instance self-hosted by the NORMAXIS group. No transfer outside the European Union or Switzerland, no transfer of data to third parties.
Your rights
You have the rights of access, rectification, erasure, restriction and objection. They are exercised with IRICE, which handles incoming requests on behalf of the programme: irice-certification.com/en/contact. You may lodge a complaint with the CNIL, the French data protection authority (cnil.fr).