The Personal Data Protection Authority (APDP) may be required to process your personal data for the purpose of carrying out the missions entrusted to it under Law no. 1.565 of December 3, 2024.
As a public authority processing personal data, the APDP is bound by its obligations as data controller.
The contact details for the APDP are as follows:
Autorité de Protection des Données Personnelles
Le Concorde 4ème étage
11 rue du Gabian
98000 MONACO
Tel. : 97.70.22.44
E-mail : apdp@apdp.mc
For any question regarding the processing of your personal data by the APDP, you can contact the Data Protection Officer (DPO) of the APDP:
- By e-mail : dpd@apdp.mc
- by post :
Autorité de Protection des Données Personnelles
A l’att. du délégué à la protection des données
Le Concorde 4ème étage
11 rue du Gabian
98000 MONACO
The website uses the following functional/technical cookies:
- Contact Form 7, which assigns a random identifier to users of the forms in order to track the submission of said forms. This cookie does not contain any personal information and is only stored for the duration of the session.
- WPML cookie, which allows the language selected by the user to be retained during the current session.
The site also uses Matomo to produce anonymous statistics by placing a cookie that is stored for 13 months. The last two bytes of the user’s IP address are not collected.
Finally, when you click on the « Test your tracks », the APDP server displays on your screen the information transmitted by your Internet browser, without storing or recording them.
The information published on the site may in some cases be of a personal nature. Based on the work and research conducted by the APDP, these data are used within the framework of legally implemented automated processing.
Céos, the AI virtual assistant set up by the APDP on its website, can answer your questions about personal data protection and security in the Principality in several languages.
Developed by OpenPro (France) on a dedicated, secure, isolated environment hosted in France by TAS Cloud Services, Céos does not collect any personal data. The user’s IP address is not collected. Conversations are encrypted and anonymized. They are kept for 1 month to improve the operation of Céos. Only administrators have access.
The Céos operating database is made up mainly of information available on the APDP website, but it may be possible to draw on the initial knowledge base, depending on the questions asked.
Via this website, the APDP carries out the following processing activities:
Processing purpose(s)
The APDP (Le Concorde 4th floor, 11 rue du Gabian, 98000 MONACO) proposes a quarterly newsletter to allow interested parties to be contacted and informed about the APDP’s activities.
A message at the bottom of the website informs visitors of the possibility of subscribing to the APDP newsletter. To do so, interested parties simply need to enter their e-mail address.
This processing is based on the consent of the interested parties in accordance with Article 5 of Law no. 1.565 of December 3, 2024.
Categories of data processed
– contact details: e-mail address;
– timestamp: subscription date.
Retention period for processed data
The data are retained as long as the person remains subscribed to the newsletter.
Unsubscribe
Subscribers may unsubscribe at any time by clicking on the link located at the bottom of the newsletter.
Recipients of processed data
The data processed are accessible by the service provider of the APDP in charge of the website and the statistical tool, which has all the rights pertaining to the sending of the newsletter.
Rights of data subjects
You can access data concerning you and obtain a copy (article 12 of Law no. 1.565 of December 3, 2024), obtain the rectification of inaccurate or incomplete data (article 13 of Law no. 1.565 of December 3, 2024), their deletion (article 14 of Law no. 1.565 of December 3, 2024), and the limitation of processing (article 15 of Law no. 1.565 of December 3, 2024).
You can exercise your rights by e-mail to dpd@apdp.mc or by post to:
APDP
Le Concorde
11, rue du Gabian
98000 MONACO
Complaints
If you consider that the processing of your data by the APDP constitutes a breach of Law no. 1.565 of December 3, 2024, you can file a complaint with the APDP.
Contact details for the Data Protection Officer
For any questions about this processing, you can contact the Data Protection Officer (DPO) of the APDP:
- by e-mail : dpd@apdp.mc
- by post : (APDP, Le Concorde 4ème étage, 11 rue du Gabian, 98000 MONACO)
Processing purpose(s)
The APDP (Le Concorde 4th floor, 11 rue du Gabian, 98000 MONACO) provides visitors to its website with a contact form to allow them to ask any questions about their rights and obligations.
This processing is justified by the existence of a public interest reason. The APDP will thus be able to inform the data subjects of the rights and obligations arising from Law No. 1.565 of December 3, 2024 in accordance with Article 38 of the said Law.
Categories of data processed
– identity details: surname, first name;
– professional or personal contact details: e-mail address, telephone number;
– message: subject, content, attachment(s).
Retention period for processed data
Data are kept for two years from the last contact.
Recipients of processed data
The agents of the APDP Secretariat. These data are not transferred to third parties.
Rights of data subjects
You can access data concerning you and obtain a copy (article 12 of Law no. 1.565 of December 3, 2024), obtain the rectification of inaccurate or incomplete data (article 13 of Law no. 1.565 of December 3, 2024), their deletion (article 14 of Law no. 1.565 of December 3, 2024), and the limitation of processing (article 15 of Law no. 1.565 of December 3, 2024).
Complaints
If you consider that the processing of your data by the APDP constitutes a breach of Law no. 1.565 of December 3, 2024, you may file a complaint with the APDP.
Contact details for the Data Protection Officer
For any questions about the processing, you can contact the Data Protection Officer (DPO) of the APDP:
- by e-mail: dpd@apdp.mc
- by post : (APDP, Le Concorde 4ème étage, 11 rue du Gabian, 98000 MONACO)
Processing purpose(s)
The APDP (Le Concorde 4th floor, 11 rue du Gabian, 98000 MONACO) provides its employees with a professional e-mail service.
This processing is justified by the existence of a public interest reason. Thus, the APDP will be able to provide support, advice and compliance assistance in accordance with article 38 of Law No. 1.565 of December 3, 2024.
Categories of data processed
– identity data;
– messages ;
– contacts ;
– electronic identification data;
– access logging;
– log files.
Retention period for processed data
The exchanged messages are regularly sorted and an archiving policy is applied until the retention of these messages is no longer necessary.
Recipients of processed data
The agents of the APDP Secretariat. These data are not transferred to third parties.
Rights of data subjects
You can access data concerning you and obtain a copy (article 12 of Law no. 1.565 of December 3, 2024), obtain the rectification of inaccurate or incomplete data (article 13 of Law no. 1.565 of December 3, 2024), their deletion (article 14 of Law no. 1.565 of December 3, 2024), and the limitation of processing (article 15 of Law no. 1.565 of December 3, 2024).
Complaints
If you consider that the processing of your data by the APDP constitutes a breach of Law no. 1.565 of December 3, 2024, you can file a complaint with the APDP.
Contact details for the Data Protection Officer
For any questions about the processing, you can contact the Data Protection Officer (DPO) of the APDP
- by e-mail: dpd@apdp.mc
- by post: (APDP, Le Concorde 4ème étage, 11 rue du Gabian, 98000 MONACO)
Processing purpose(s)
The APDP (Le Concorde 4th floor, 11 rue du Gabian, 98000 MONACO) provides data controllers and processors with two forms enabling them to provide the professional contact details of the data protection officer (DPO) they have appointed in accordance with Article 30 of Law No. 1.565 of December 3, 2024, and the contact details of the representative they have appointed in accordance with Article 7 of Sovereign Order No. 11.327 of July 10, 2025.
This processing is justified by the existence of a public interest reason. The APDP will thus be able to process the contact details of the DPOs and representatives as part of the missions entrusted to it by Law no. 1.565 of December 3, 2024, since the data provided will enable it to communicate with them.
Categories of data processed
– identification data;
– professional life;
– professional contact details;
– timestamps.
Retention period for processed data
Data are kept for 3 years from the notification of the APDP of any modification.
Recipients of processed data
The agents of the APDP Secretariat. These data are not transferred to third parties.
Rights of data subjects
You can access data concerning you and obtain a copy (article 12 of Law no. 1.565 of December 3, 2024), obtain the rectification of inaccurate or incomplete data (article 13 of Law no. 1.565 of December 3, 2024), their deletion (article 14 of Law no. 1.565 of December 3, 2024), and the limitation of processing (article 15 of Law no. 1.565 of December 3, 2024).
Complaints
If you consider that the processing of your data by the APDP constitutes a breach of Law no. 1.565 of December 3, 2024, you may file a complaint with the APDP.
Contact details for the Data Protection Officer
For any questions about the processing, you can contact the Data Protection Officer (DPO) of the APDP
- by e-mail: dpd@apdp.mc
- by post: (APDP, Le Concorde 4ème étage, 11 rue du Gabian, 98000 MONACO)
Processing purpose(s)
The APDP (Le Concorde 4th floor, 11 rue du Gabian, 98000 MONACO) provides data controllers with an online form to notify them, without delay, in accordance with article 85 of Law no. 1.565 of December 3, 2024, of video surveillance systems installed in places not open to the public and article 99 regarding certain transfers.
This processing is justified fby the existence of a public interest reason. The APDP will thus be able to process these data as part of the tasks entrusted to it by Law no. 1.565 of December 3, 2024 for the purposes of managing declarations of video surveillance systems in places not open to the public and data transfers that meet the criteria of paragraph 3 of article 99 of Law no. 1.565 OF December 3, 2024.
Categories of data processed
– identification data;
– professional life;
– professional details (data controller and signature).
Retention period for processed data
The data are kept for 3 years from the end of the processing period.
Recipients of processed data
The agents of the APDP Secretariat. These data are not transferred to third parties.
Rights of data subjects
You can access data concerning you and obtain a copy (article 12 of Law no. 1.565 of December 3, 2024), obtain the rectification of inaccurate or incomplete data (article 13 of Law no. 1.565 of December 3, 2024), their deletion (article 14 of Law no. 1.565 of December 3, 2024), and the limitation of processing (article 15 of Law no. 1.565 of December 3, 2024).
Complaints
If you consider that the processing of your data by the APDP constitutes a breach of Law no. 1.565 of December 3, 2024, you can file a complaint with the APDP.
Contact details for the Data Protection Officer
For any questions about the processing, you can contact the Data Protection Officer (DPO) of the APDP
- by e-mail : dpd@apdp.mc
- by post : (APDP, Le Concorde 4ème étage, 11 rue du Gabian, 98000 MONACO)
Processing purpose(s)
The APDP (Le Concorde 4th floor, 11 rue du Gabian, 98000 MONACO) provides data controllers an online form to allow them to submit the data processing for which a prior opinion or authorization is required in accordance with article 58 of Law no. 1.565 of December 3, 2024.
This processing is justified by the existence of a public interest reason. The APDP will thus be able to process these data in order to manage the requests for opinions and authorizations received, to monitor the actions carried out on the dossiers, and to maintain and update the list of processing operations in accordance with article 38 of Law no. 1.565 of December 3, 2024.
Categories of data processed
– identification data:
– professional life;
– professional contact details.
Retention period for processed data
Personal data are kept for 3 years from the end of the processing.
Recipients of processed data
The agents of the APDP Secretariat. These data are not transferred to third parties.
Rights of data subjects
You can access data concerning you and obtain a copy (article 12 of Law no. 1.565 of December 3, 2024), obtain the rectification of inaccurate or incomplete data (article 13 of Law no. 1.565 of December 3, 2024), their deletion (article 14 of Law no. 1.565 of December 3, 2024), and the limitation of processing (article 15 of Law no. 1.565 of December 3, 2024).
Complaints
If you consider that the processing of your data by the APDP constitutes a breach of Law no. 1.565 of December 3, 2024, you can file a complaint with the APDP.
Contact details for the Data Protection Officer
For any questions about the processing, you can contact the Data Protection Officer (DPO) of the APDP
- by e-mail: dpd@apdp.mc
- by post: (APDP, Le Concorde 4ème étage, 11 rue du Gabian, 98000 MONACO)
Processing purpose(s)
The APDP (Le Concorde 4th floor, 11 rue du Gabian, 98000 MONACO) provides data controllers an online form to notify them, in accordance with article 32 of Law no. 1.565 of December 3, 2024, of personal data breaches likely to pose a risk to the rights and freedoms of data subjects.
This processing is justified fby the existence of a public interest reason. The APDP will thus be able to process these data for the purposes of recording and analyzing the notifications received, carrying out any investigations, managing the follow-up to the incident and maintaining internal records of breaches of the Law and corrective measures taken.
Categories of data processed
– identification data:
– professional life;
– professional contact details.
Retention period for processed data
Personal data are kept for 6 years from the closing of the dossier.
Recipients of processed data
The agents of the APDP Secretariat. These data are not transferred to third parties.
Rights of data subjects
You can access data concerning you and obtain a copy (article 12 of Law no. 1.565 of December 3, 2024), obtain the rectification of inaccurate or incomplete data (article 13 of Law no. 1.565 of December 3, 2024), their deletion (article 14 of Law no. 1.565 of December 3, 2024), and the limitation of processing (article 15 of Law no. 1.565 of December 3, 2024).
Complaints
If you consider that the processing of your data by the APDP constitutes a breach of Law no. 1.565 of December 3, 2024, you can file a complaint with the APDP.
Contact details for the Data Protection Officer
For any questions about the processing, you can contact the Data Protection Officer (DPO) of the APDP
- by e-mail: dpd@apdp.mc
- by post: (APDP, Le Concorde 4ème étage, 11 rue du Gabian, 98000 MONACO)
Processing purpose(s)
The APDP (Le Concorde 4th floor, 11 rue du Gabian, 98000 MONACO) provides Data Protection Officers (DPO) with a tool for analysing the security of the website(s) of the entity they represent.
This security analysis tool is developed and maintained by our service provider, OpenPro, a company specialising in both the development of analysis tools and the use of artificial intelligence (based in France).
The processing is justified by the existence of a public interest reason, as it enables the APDP to support data controllers in their efforts to comply with the Law and, in particular, to promote, within the scope of its remit, the use of privacy-protecting technologies.
Categories of data processed
– name of the entity concerned ;
– URL(s) of the website(s) to be tested ;
– Public IP address used to perform the tests.
Retention period for processed data
Personal data are retained for one year, renewable with the consent of the data subject at the end of each year following registration.
Recipients of processed data
The agents of the APDP Secretariat and the service provider responsible for maintaining the tool. These data are not transferred to third parties.
Rights of data subjects
You can access data concerning you and obtain a copy (article 12 of Law no. 1.565 of December 3, 2024), obtain the rectification of inaccurate or incomplete data (article 13 of Law no. 1.565 of December 3, 2024), their deletion (article 14 of Law no. 1.565 of December 3, 2024), and the limitation of processing (article 15 of Law no. 1.565 of December 3, 2024).
Complaints
If you consider that the processing of your data by the APDP constitutes a breach of Law no. 1.565 of December 3, 2024, you may file a complaint with the APDP.
Contact details for the Data Protection Officer
For any questions about the processing, you can contact the Data Protection Officer (DPO) of the APDP:
- by e-mail: dpd@apdp.mc
- by post : (APDP, Le Concorde 4ème étage, 11 rue du Gabian, 98000 MONACO)