Orange Connect

© Orange 2024
v2.8.0

Privacy Notice

Orange Connect

This privacy notice (‘Privacy Notice’) aims to give the User information on how ORANGE, acting as Data Controller, processes personal data for the service Orange Connect (“Service”).

What is Orange Connect?

Orange Connect is a strong 2-factor authentication brick for internal and external users, for access to internal Orange IS. Using a second factor provides a higher level of security required by the DSEC.
There are several means of authentication in OrangeConnect (PKI, login/password+OTP code (One Time Password) or a security key, or Microsoft professional account).
Orange Connect is accessible via the internet for services exposed on the internet or via the internal network for internal services. Hundreds of services are already integrated, and delegate their authentication to Orange Connect.

Why does Orange process your personal data and under what legal basis?

ORANGE processes the User’s data within the Service in order to:

Purposes

Legal basis

Manage authentications as part of the service using Orange Connect.
Ensure security and prevent the risk of fraud.
Develop, improve the service and debug.

This processing is justified by the legitimate interest of Orange to develop new offers

Which personal data is needed in the context of this Orange Connect?

The Personal Data ORANGE collects as part of the Service are:

Identification data
Contact data
Professional life
Connection, service use and interaction data
Products and services owned or used

Who has access to your personal data?

Within the limits of their respective attributions, the data collected may be accessible by or intended to:

authorized internal services within ORANGE,
the service provider(s) in charge who process the data according to ORANGE' instructions.

The User is informed that, in accordance with the laws and regulations in force, the Data may be transmitted to competent authorities, at their request, as Authorized Third-Parties.

How long do we retain the User’s personal information?

Orange undertakes to keep your personal data for no longer than is necessary for the purposes for which we process them, and in accordance with the regulations.

You are informed that Orange may be required to keep, in archive file, some of your personal data to be able to fulfil its legal obligations and/or any legal action, and for the duration of prescription provided by the applicable legislation.

The User is informed that ORANGE may be required to keep, in archive file, some of his/her Personal Data to be able to fulfil its legal obligations and/or any legal action, and for the duration of prescription provided by the applicable legislation.

What are the User’s rights and how he/she can exercise them?

The User can exercise their right to information. The data collected is not made available to the user for security reasons.

When the processing of Personal Data is based on the User’s consent, the consent may be withdrawn at any time

The User may issue guidelines on the retention, erasure or disclosure of his/her Personal Data after his/her death.

Data Protection Officer contact details:

The User can contact the ORANGE Data Protection Officer for any question related to personal data protection:

e-mail : group-dpo.donnees-personnelles@orange.com
address:
- Orange SA
- To the Data Protection Officer
- 111 quai du Président Roosevelt
- CS 70222 92449 Issy-les-Moulineaux cedex.

Are personal data transferred outside the EU?

Orange Connect users (Orange employees or external partners) may be located outside Europe.
Applications that delegate authentication to Orange Connect can be located outside Europe (SaaS solutions, Orange MEA applications, etc.).

In case of transfer of Personal Data outside the European Union, ORANGE will take appropriate guarantees to ensure the protection of the User’s data and the compliance with the applicable Personal Data protection regulations.

How is your personal data secured?

ORANGE ensures that the User’s Personal Data is processed securely and confidentially, including when certain operations are performed by subcontractors.

To this end, appropriate technical and organizational measures shall be put in place to prevent the loss, misuse, alteration and deletion of personal data concerning it.
These measurements are adapted according to the level of sensitivity of the data.

Amendments to this Privacy Notice

This Privacy Notice may be subject to amendments.

Last update: October 2024

Cookies Notice

Orange Connect

What is a cookie and what is it for?

A cookie is a small text file stored on your computer and identified by a name, which can be transferred to your browser by a website you connect to. Your web browser will keep it for a period of time and return it to the web server each time you reconnect to it. Cookies have many uses: they can be used to memorize your customer ID with a merchant site, the current content of your shopping cart, an identifier to track your navigation for statistical or advertising purposes, etc. You will find below information about the types of cookies posted by the service Orange Connect.

Technical cookies strictly necessary for Orange Connect service to function

These cookies allow the site to work optimally. You can delete them by managing your browser settings; however, your user experience may be degraded.

Name

Purpose

Duration Storage

OrangeConnectpdata

Token to keep the authentication alive

12 hours

OrangeConnect

Token to keep the authentication alive

16 hours

Llnglanguage

Retrieve the language used by the browser

This information is always provided

Amendments to the section “About Cookies”

The section about “Cookies” may be subject to amendments.

Last update: 16/12/2022