Policy on cookies and other tracking devices

When you browse the website, your personal data are collected and processed using cookies and other tracking devices (hereinafter referred to as "cookies").

As EDF puts its energy into protecting your privacy, the purpose of this Policy is to explain in a transparent manner the operations carried out concerning data relating to your browsing and interactions with our digital spaces. You will find all the information you need to clearly understand how they are used by EDF, particularly with regard to:

• the uses made of cookies;
• the types of cookies used;
• entities that are authorised to place cookies on the website;

Apart from specific cookie-related processing, if you would like more information on how EDF is committed to processing your personal data, please read our Privacy Policy.

We need your consent to use these data (this is the legal basis). You are asked to give your consent when you first visit our website and arrive on one of its pages.

Cookies allow EDF and its partners to pursue several different purposes, which are set out below. These purposes are based either on (i) the legitimate interest of EDF or its partners, which you are then informed of and which you may object to, or (ii) on your prior consent which you can either give in order to receive the corresponding benefits, or refuse. EDF also uses certain technical cookies that are required to allow you to access the site and use its features.

EDF lets you select the uses you wish to authorise as soon as you arrive on our website, so that you can manage your cookie choices as best as possible. You can therefore accept or refuse the use of cookies depending on their purposes.

If you agree to the use of cookies, your acceptance will be saved in a technical cookie stored on your web browser.

If you do not want cookies to be used, your refusal will also be saved in a technical cookie stored on your web browser.

However, if you manually delete this cookie, or if you reinstall our app, we will no longer be able to tell whether you have accepted or refused the use of cookies. We will ask you to choose your cookie preferences again.

Your cookie choices will be saved for 6 months from the date the cookie in question is placed on your device.

What is a cookie?

Cookies (and other tracking devices such as tags, beacons or pixels) are technologies allowing EDF and/or our partners to store or read the information contained in the device (for example, your computer, tablet or smartphone) that you use when you visit our website. These tracking devices are used by applying the legal bases explained to you and any tracking devices requiring your prior consent are used depending on your choices.

Which data are used and collected?

Categories of data

The categories of data that can be collected using cookies are as follows:

• Non-significant identifier derived from the cookie (randomly generated identifier)
• Expiry date of cookies
• Name of server that placed the cookie
• IP address
• Identifier of the devices used
• Type of equipment used
• Pages viewed
• Clicks made on our websites
• Date and time of actions carried out
• Source of the visit

In particular, the data that can be collected using technical cookies (strictly necessary) are as follows:

• user session
• refresh token for maintaining sessions

These data allow us to derive information about you, such as:

• Your interests and preferences for an offer, service or theme;
• Your user profile depending on, for example, the frequency of your visits and your uses

What are cookies used for?

General overview

In essence, cookies and other tracking devices used on the website may allow EDF and its partners to:

• Enable access and browsing on the website
• Customise the content presented to you on the website or app, according to your interests;
• Establish audience and traffic measurements for the website or the app;
• Ensure and evaluate the security of the website or app by detecting incidents, attempted intrusion or other malfunctions;
• Meet EDF’s legal obligations.

The purposes pursued by EDF and its partners when using cookies or other tracking devices to collect data about you are described in more detail below.

Main purposes of cookies and tracking devices

Strictly necessary cookies:  
Technical cookies are necessary to ensure that our websites and apps function properly and are secure. In particular, they contribute to security, ergonomics and language choice. As a result, they are permanently activated.

Audience measurement:  
Information about your use of the website content is collected to assess, understand and report on how you use the service. These cookies allow us to compile statistics about the traffic and use of our website or our app to improve their services and content.

Which cookies are used, and by whom?

Your personal data are communicated to the following categories of recipients:

• EDF's internal services: these are EDF's internal departments and services responsible for using the data for the purposes specified in the section "What are your data collected for? ”. These people only have access to the data strictly necessary for carrying out their tasks.
• Subcontractors: these are companies that act on our behalf, in accordance with the instructions and guidelines that we impose on them (for example, the IT subcontractors who provide us with the navigation analysis software). These organisations may not reuse your data for any other purpose than those defined by EDF.

Details of the cookies used on the website and the edf&moi app

A list of the entities issuing cookies and tracking devices on the website can be found below, along with additional details about them:

How to exercise your rights and manage your cookie preferences

As mentioned in the Privacy Policy, you have the following rights:

• The right to access your personal data;
• The right to correct your personal data;
• The right to delete your personal data (subject to EDF's legal obligations);
• The right to request the suspension of the processing of your personal data;
• The right to request the restriction of the processing of your personal data;
• The right to request the portability of your personal data;
• The right to decide on the fate of your data after your death;
• The right to withdraw your consent, where the processing of your data is on this basis.

You can exercise your rights by going to the customer area and filling out the specific form for this purpose in the "Contact us" section.

If you do not have a customer area, you can apply to exercise your rights by:

• Writing an e-mail to “mesdonnees@edf.fr” if you are a private individual, and to “vosdonnes@edf.fr” if you are a professional;
• Writing a letter to "EDF SERVICE CLIENTS TSA 21941 - 62978 ARRAS CEDEX 9 - FRANCE";
• Calling +33 (0)9 69 32 15 15 (charged at the local rate).

However, if you experience any difficulties, you can also contact our data protection officer by e-mail at: informatique-et-libertes@edf.fr.

You also have the right to file a complaint with the French Data Protection Authority, the Commission Nationale de l’Informatique et des Libertés (CNIL).

As regards processing for which the partners are responsible, they shall indicate the terms and conditions for exercising your rights under the conditions accessible from the aforementioned links. We may also send them your requests to exercise your data rights, if you send this request to EDF.