Data protection policy

The purpose of this Data protection policy is to inform website Users of the management of their personal data by the French Medical Council, editor of the ENMCA website, accessible via the web address:

The Data protection policy is intended to apply to all the processing of personal data carried out by the ENMCA website involving the collection of personal data.

1- Definitions

In the framework of this Data protection policy,

  1. “ENMCA” refers the European Network of Medical Competent Authorities ;
  2. “CNOM” refers to the French Medical Council (Conseil National de l’Ordre des Médecins) ;
  3. The “website” refers to the website edited by CNOM and ENMCA coordinators ;
  4. “User” refers to any physical person consulting the ENMCA website and using its services ;
  5. “Private website” refers to the space on the website that can be only consulted by users acting on behalf of a Medical Competent Authority of ENMCA and with a valid ENMCA account;
  6. “Public website” refers to the space on the website that can be consulted by anyone without having to create an account
  7. “User account holder” refers to every person, elected or employed by a Medical Competent Authority member of ENMCA, and having a ENMCA account that is linked to him / her personally or to his / her medical association.  

2- Responsibility of data processing

CNOM is responsible for processing your personal data.

The processing carried out by CNOM is carried out in accordance with Regulation (EU) 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and to the free flow of this data (hereinafter the “GDPR”) as well as the amended Data Protection Act (hereinafter “the Regulations applicable to personal data”).

3- Lawfulness of the implemented processing

Your data is processed with your consent, as provided for in Article 6.1 a) of the GDPR.

4- Description of the processing of personal data

Your data is processed according to your use of the ENMCA website.

  1.  You don’t’ have a ENMCA account: If you do not have an account on the ENMCA website, only cookies and tracers are collected (see below).
  2. You have a ENMCA account : If you have, or wish to have, a professional registered account on the ENMCA website, the following personal data is processed by the CNOM:

o    Last Name
o    First Name
o    Mail address
o    Employer
o    Position
o    Country
o    Photo (optional)
o    Duration of your registration
o    Date of your last connection to the website

This data is used only to allow you to access your account.

Nominative professional accounts (example: are deleted after three (3) years of inactivity.

Institutional accounts (example: are not deleted without an express request from the country or organization concerned.

 - You contact ENMCA: If you contact ENMCA via the email, your data will be processed only in order to process your request, on the basis of article 6.1 f) of the GDPR.

5- Respect of the security and confidentiality of your personal data

In accordance with the regulations applicable to personal data protection, CNOM implements all the technical, physical and organizational measures appropriate with regard to the nature of the data and the risks presented by the processing, to preserve the security and confidentiality of your personal data.

CNOM commits to make, as soon as possible after becoming aware of it, all the necessary notifications in the event of a violation of the personal data of its Users in accordance with Article 33 of the GDPR.

6- Respect of your rights

In accordance with the regulations applicable to personal data protection, each User has the right to access, rectify, oppose or delete his / her data, and the right to request the limitation of the processing of personal data concerning him / her.

These rights can be exercised by sending an email to the following address: or a letter by post to:

Conseil national de l’Ordre des médecins
4, rue Léon Jost
75855 PARIS Cedex 17

If you feel, after contacting us, that your rights have not been respected, you can file a complaint with the French National Commission for Informatics and Freedoms (CNIL).

7- Cookies management

The website uses "cookies" which are navigation tracers on a website, read or placed. Thus, the website is likely to register information in the User's electronic communications terminal equipment and to access information which is already stored there.

The trackers used by the website fall into two categories:

  1. So-called “strictly necessary” tracers, which do not require your prior consent but are essential for the technical functioning of the website,
  2. Other tracers subject to your prior consent.

In accordance with the applicable personal data regulations, the User is informed of the purpose of the cookies used and of the methods made available to them to oppose them. The use of certain trackers requires the prior consent of the User.

1- Trackers exempt from prior consent

Session Cookies    Allow navigation on the website    During on connected session
Server Cookies    Identify on which server of the high availability system exchanges are made during browsing 13 months

2- Trackers subject to your prior consent

ENMCA website uses trackers placed under the control of third parties which are subject to the prior consent of the User.

ENMCA website uses these trackers in order to produce anonymous statistics of the Users’ navigation. The latter can oppose the use of these trackers by setting his cookies via the dedicated option on the ENMCA website.

Google Analytics  

  1. Measure and study the effectiveness of the content of the website
  2. Track analytical data on the website and the use made of the website by Users
  3. Improve web services 13 months

For more information on cookies, the User can consult the following page (in French, German and Spanish):

8- Updating the Data protection policy

CNOM may modify this Data protection Policy, in particular in order to take into account changes in the European and French regulations applicable to personal data protection or any other regulations relevant to this field, as well as changes in the services provided.