Privacy policy
Last updated: October 14, 2026
The Government of New Caledonia takes the protection of your personal data very seriously. This policy explains what data is collected on choosenewcaledonia.nc, why, how long it is kept and how to exercise your rights. The French version of this policy prevails.
Data controller
The data controller is the Government of New Caledonia. Processing is carried out by the Direction des Entreprises, de la Consommation, de l’Attractivité et des Télécommunications (DECAT), BP M2, 98849 Nouméa Cedex, New Caledonia.
Data protection officer
The Government of New Caledonia has appointed a data protection officer, who can be contacted:
- by email: [email protected]
- by post: Délégué à la protection des données, Gouvernement de la Nouvelle-Calédonie, 08 route des Artifices, BP M2, 98849 Nouméa Cedex, New Caledonia.
Legal framework
Personal data is processed in accordance with French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as applicable in New Caledonia, and with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) as made applicable in New Caledonia. The GDPR also applies directly to individuals located in the European Union.
Data collected
We only collect the data needed for the purposes described in this policy.
- “Register interest” form: first name, last name, email, country, profile and interests; and, if you provide them, phone number, company or organisation, job title and message. Fields marked with an asterisk are needed to handle your request. We also record the website language, the date of your consent, the page from which the form was sent and, where applicable, the campaign that brought you to the website (UTM parameters).
- Technical traffic statistics (Cloudflare Web Analytics): pages viewed, source of visits, device and browser type, country and page load times. These statistics are aggregated: no cookie is set and you are not tracked from one website to another.
- Google Analytics audience measurement, only if you accept it: pages viewed, duration and source of visits, device and browser type, approximate location (country, city). Google Analytics 4 does not log IP addresses.
- Technical data: on each visit, the server and the Cloudflare network, through which the website is delivered, record technical logs (IP address, date and time, page requested, browser) needed to keep the website secure and working properly.
- Bot protection (Cloudflare Turnstile): when the “Register interest” form or the back-office sign-in page is opened, technical data (IP address, browser and device characteristics) is analysed to check that the submission comes from a person. No cookie is set.
- Back-office accounts, reserved for authorised staff: name, email, date of last sign-in and log of actions carried out, with the IP address.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to your request and keeping you informed about Choose New Caledonia and the Choose NC Summit | Your consent, given via the form checkbox |
| Measuring website traffic in order to improve it | Your consent, given via the cookie banner |
| Monitoring the website’s traffic and technical performance, through aggregated, cookie-free statistics | The performance of a task carried out in the public interest by the Government of New Caledonia |
| Keeping the website secure and working properly, including protecting forms against bots | The performance of a task carried out in the public interest by the Government of New Caledonia |
| Managing access to the back office and logging the actions carried out there | The performance of a task carried out in the public interest by the Government of New Caledonia |
| Remembering your preferences (language, cookie choices) | Strictly necessary cookies, exempt from consent |
No automated decision-making or profiling is carried out using your data.
Recipients
Your data is intended for the Choose New Caledonia team at the DECAT. Strictly within the scope of their duties, it may be shared with:
- the agency organising the Choose NC Summit, to follow up on event-related requests;
- our technical providers, acting solely on our instructions: ERIS (website development, maintenance and hosting, on OVHcloud servers), Postmark (confirmation and notification emails), Cloudflare (website delivery and protection, technical traffic statistics, bot protection for forms) and Google (audience measurement, if you accept it).
Your data is never sold or used for advertising purposes.
Data transfers
The website is hosted in Australia (OVHcloud, Sydney) and delivered through Cloudflare’s global network. The Postmark, Cloudflare and Google Analytics services may process data in the United States.
These transfers are subject to appropriate safeguards: standard contractual clauses adopted by the European Commission and, for providers certified under it, the EU-US Data Privacy Framework.
Retention periods
| Data | Retention period |
|---|---|
| Requests sent via the form | 2 years from receipt of the request, then automatically deleted |
| Audience measurement data (Google Analytics) | 14 months |
| Technical traffic statistics (Cloudflare Web Analytics) | Up to 6 months |
| Audience measurement cookies | Up to 13 months |
| Your cookie choices | 6 months |
| Server technical logs | Up to 12 months |
| Back-office activity log | 12 months |
Security
We implement appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS), back-office access restricted to authorised staff and protected by a strong password and an anti-bot check, regular backups and security updates.
Your rights
You have the following rights over your data at any time:
- right of access and rectification;
- right to erasure;
- right to restriction of processing and right to object;
- right to portability of the data you have provided;
- right to withdraw your consent at any time, without affecting processing already carried out;
- right to give instructions regarding the use of your data after your death.
To exercise these rights, write to the data protection officer ([email protected], or by post at the address above), stating your full name and the purpose of your request. You will receive a reply within one month. If there is reasonable doubt about your identity, proof of identity may be requested.
If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (www.cnil.fr).
Changes to this policy
This policy may change, in particular if the website or regulations change. The date of the last update is shown at the top of this page.