Protection of personal data is a priority for the Government of the Principality of Monaco.
The Government of the Principality of Monaco processes personal data of public service users. This personal data is processed by the Digital Services Department (DSN).
In accordance with the provisions of Sovereign Ordinance no. 7.995 of 12 March 2020, creating the Digital Services Department, the Digital Services Department processes personal data as part of the duties entrusted to it, namely:
- To ensure the development of e‑government and in particular the implementation of online services for users
- Developing e-government and, more specifically, implementing online services for users
- Managing implementation of projects to provide government departments with desktop tools and applications that enable them to carry out their responsibilities efficiently
- Promoting the switch to paperless methods for internal government communications
- Implementing projects to develop digital services relating to the smart city, e-health and social services, e-education and the digital economy, in collaboration with business departments and, through them, public concession holders
- Assisting project owners with such projects and overseeing implementation by project owners
- Streamlining the administrative procedures used by government departments and services within the context of these projects
- Developing and disseminating new digital techniques within Interministerial Delegation for Digital Transition, and the public services more widely
- Helping to improve the digital skills of civil servants and public sector employees
- Monitoring technological developments and trialling innovations in e-government, online services, the smart city, e-health and social services, e-education and the digital economy
- Building and leading an ecosystem of technology partners on behalf of the Government with a focus on e-government, online services, the smart city, e-health and social services, e-education and the digital economy
- Ensuring the overall coherence of the Government’s digital landscape, including online services and websites
- Making available to users online a full set of government documentation and informing them of the steps they need to take
- Identifying and analysing user expectations with regard to administrative procedures, information and services
- Organising and leading the consultation required to disseminate guidelines and general rules on the accessibility and use of digital services
- Managing the Monegasque National Digital Identity Registry Service
- Creating and issuing digital identities to natural persons as referred to in the first paragraph of Article 5 of Act no. 1.483 of 17 December 2019 on digital identity, acting as a trust service provider in accordance with applicable Monegasque regulations
Exercising the rights of data subjects
In accordance with Articles 10 et seq of the Act 1.565 of 3 December 2024 on the protection of personal data, all data subjects have the following rights:
- A right to access to their personal data (Article 12)
- A right to rectification of inaccurate or incomplete data (Article 13)
- A right to erasure of data (Article 14)
- A right to restriction of processing (Article 15)
- A right to object to processing, if the processing is based on the public interest or is necessary for the purposes of a legitimate interest (Article 17)
- A right to withdraw consent : where the processing is based on consent (Article 6)
Data subjects can exercise their rights by submitting a request to the Digital Services Department:
- By post:
Direction Interministérielle à la Transition du numérique – Protection des données personnelles
2 rue du Gabian / Immeuble Les Industries
98000 Monaco - By completing the online form: here
To verify their identity, but only where there is reasonable doubt, they may be asked to provide a black and white copy of an identity document that includes a photograph. The copy of the identity document is destroyed once the request is processed.
A response will be provided within one month from receipt of the request, unless the request is complex or involves multiple issues.
Contact details for the Data Protection Officer
If you have any questions regarding the processing of your personal data and your rights, you may also contact the Data Protection Officer of the Government of the Principality of Monaco at the following address: dpd@gouv.mc.
Complaints
If, after contacting us, you consider, that your rights have not been respected, you can submit a complaint to the Data Protection Authority (APDP).
Providing trust services for digital identity
Purpose(s)
The purpose of this processing is "Providing trust services for digital identity".
It is justified by a reason of public interest: In accordance with Articles 4 and 5 of Act no. 1.483 of 17 December 2019 relating to digital identity, Sovereign Ordinance no. 8.693 of 17 June 2021 implementing Articles 4 and 5 of Act no. 1.483 of 17 December 2019 relating to digital identity sets out the specifications for digital identity username, and Articles 5 and 7 of Sovereign Ordinance no. 8.694 of 17 June 2021 implementing Articles 6, 8 and 13 of Act no. 1.483 of 17 December 2019 relating to digital identity.
Categories of personal data and retention periods
Catégories de données personnelles traitées | Retention period | ||
Identity | For Monegasque nationals with a digital identity: Data retained until the person's death For residents with a digital identity: Data retained for 5 years following the last event relating to the residence permit For non-Monegasque nationals and non-residents with a digital identity: 3 years until the certificate expires | ||
| 1 year | ||
Additional fields | For Monegasque nationals with a digital identity: Data retained until the person's death For residents with a digital identity: Data retained for 5 years following the last event relating to the residence permit For non-Monegasque nationals and non-residents with a digital identity: 3 years until the certificate expires |
The personal data collected as part of the aforementioned processing is mandatory. If this information is not provided, the data subject will not be able to use the MConnect service.
Recipients of personal data
The personal data listed above will be shared only with the following recipients:
- Accredited staff of the subcontractor, exclusively as part of their statutory duties
The Government undertakes not to disclose these data to third parties, except where permitted by law. The personal data is not passed to third parties for commercial or advertising purposes.
Transfers of personal data
As part of carrying out certain processing operations, personal data may be disclosed to accredited staff of the subcontractor located in France.
The transfer of this data is subject to safeguards, such as:
- Adequacy decision (List of countries with an adequate level of protection within the meaning of Monegasque data protection legislation dated 01.04.2009 published by the Monegasque Personal Data Protection Authority)
Enabling Monegasque nationals and residents to use their digital identity through a mobile application)
Purpose
The purpose of this processing is "Enabling Monegasque nationals and residents to use their digital identity through a mobile application".
It is justified by:
- The consent of the data subjects
- A reason of public interest: In accordance with Act no. 1.483 of 17 December 2009 relating to digital identity, Article 5 of Sovereign Ordinance no. 8.696 of 17 June 2021 relating to the Monegasque identity card and Article 3 of Ministerial Decree no. 2021-430 of 17 June 2021 implementing Article 4 of Ordinance no. 3.153 of 19 March 1964 relating to the conditions of entry and residence of foreigners in the Principality, as amended
Categories of personal data and retention periods
| Categories of processed data | Retention period |
| Contact details | User’s session duration |
| Pass code | Duration of application installation |
| Certificates associated with the digital identity holder | Certificate validity period (3 years) |
The personal data collected as part of the aforementioned processing is mandatory. If this information is not provided, the user will not be able to use the MConnect service.
Recipients of personal data
The personal data listed above will be shared only with the following recipients:
- Accredited staff of the subcontractor, exclusively as part of their statutory duties
The Government undertakes not to disclose these data to third parties, except where permitted by law. The personal data is not passed to third parties for commercial or advertising purposes.
Transfers of personal data
As part of carrying out certain processing operations, personal data may be disclosed to accredited staff of the subcontractor located in France.
The transfer of this data is subject to safeguards, such as:
- Adequacy decision (List of countries with an adequate level of protection within the meaning of Monegasque data protection legislation dated 01.04.2009 published by the Monegasque Personal Data Protection Authority)
Managing the digital identities through the Monaco National Digital Identity Registry" referred to as RNMIN
Purpose
The purpose of this processing is "Managing the digital identities through the Monaco National Digital Identity Registry" referred to as RNMIN.
It is justified by a reason of public interest, in accordance with Act no. 1.483 relating to digital identity and Sovereign Ordinance no. 7.995 of 12 March 2020 establishing the Digital Services Department.
Categories of personal data and retention periods
| Categories of processed data | Retention period |
| Identity | Monegasque national with a digital identity: Retained until the person's death plus 10 years in accordance with the annex to Ministerial Decree no. 2020-894. |
| Others | Resident with a digital identity and non-Monegasque national – non-resident with a digital identity: Retained for 7 years following the expiry of the last certificate (certificate validity period 3 years + 7 years) |
The personal data collected as part of the aforementioned processing is mandatory. If this information is not provided, the user will not be able to use the service.
Recipients of personal data
The personal data listed above will be shared only with the following recipients:
- Accredited staff of the subcontractor, exclusively as part of their statutory duties
The Government undertakes not to disclose these data to third parties, except where permitted by law. The personal data is not passed to third parties for commercial or advertising purposes.
Transfers of personal data
As part of carrying out certain processing operations, personal data may be disclosed to accredited staff of the subcontractor located in France.
The transfer of this data is subject to safeguards, such as:
- Adequacy decision (List of countries with an adequate level of protection within the meaning of Monegasque data protection legislation dated 01.04.2009 published by the Monegasque Personal Data Protection Authority)
Managing the means of using the digital identity recorded on Monegasque identity cards and residence permits (certificates, CAN code and PUK) referred to as "CLCM"
Purpose
The purpose of this processing is "Managing the means of using the digital identity recorded on Monegasque identity cards and residence permits (certificates, CAN code and PUK)" referred to as "CLCM".
It is justified by a reason of public interest: in accordance with Article 4 of Act no. 1.483 of 17 December 2019 relating to digital identity, Sovereign Ordinance no. 8.693 of 17 June 2021 implementing Articles 4 and 5 of Act no. 1.483 of 17 December 2019 relating to digital identity and Articles 5 and 7 of Sovereign Ordinance no. 8.694 of 17 June 2021 implementing Articles 6, 8 and 13 of Act no. 1.483 of 17 December 2019 relating to digital identity.
Categories of personal data and retention periods
| Categories of processed data | Retention period |
| Identity | Monegasque nationals with a digital identity: Residents with a digital identity: |
| Data relating to identity card or residence permit | |
| Information relating to using a digital identity | |
| Information relating to certificates | |
| Others |
The personal data collected as part of the aforementioned processing is mandatory. If this information is not provided, the user will not be able to use the means of digital identity recorded on their card.
Recipients of personal data
The personal data listed above will be shared only with the following recipients:
- Accredited staff of the subcontractor, exclusively as part of their statutory duties
The Government undertakes not to disclose these data to third parties, except where permitted by law. The personal data is not passed to third parties for commercial or advertising purposes.
Transfers of personal data
As part of carrying out certain processing operations, personal data may be disclosed to accredited staff of the subcontractor located in France.
The transfer of this data is subject to safeguards, such as:
- Adequacy decision (List of countries with an adequate level of protection within the meaning of Monegasque data protection legislation dated 01.04.2009 published by the Monegasque Personal Data Protection Authority)
Managing online appointment for activities relating to the issuance and use of the Monegasque digital identity
Purpose
The purpose of this processing is "Managing online appointment for activities relating to the issuance and use of the Monegasque digital identity".
It is justified by a reason of public interest: in accordance with Sovereign Ordinance no. 7.995 of 12 March 2020 establishing the Digital Services Department, as amended.
Categories of personal data and retention periods
| Categories of processed data | Retention period |
| Identity | 3 months after the last appointment booked, then deletion |
| Contact details | 3 months after the last appointment booked, then deletion |
| Personal information | 3 months after the last appointment booked, then deletion |
| Login data | 12 rolling months |
| Identification data | 3 months after the last appointment booked, then deletion |
The personal data collected as part of the aforementioned processing is mandatory. If this information is not provided, the user will not be able to book an appointment.
Recipients of personal data
The personal data listed above will be shared only with the following recipients:
- Accredited staff from the Digital Services Department
- Accredited staff from the supplier of the Solution, exclusively as part of their statutory duties
The Government undertakes not to disclose these data to third parties, except where permitted by law. The personal data is not passed to third parties for commercial or advertising purposes.
Transfers of personal data
As part of carrying out certain processing operations, personal data may be disclosed to the supplier of the Solution located in France.
The transfer of this data is subject to safeguards, such as:
- Adequacy decision (List of countries with an adequate level of protection within the meaning of Monegasque data protection legislation dated 01.04.2009 published by the Monegasque Personal Data Protection Authority)
Managing online appointment with Extended Monaco Businesses
Purpose
The purpose of this processing is "Managing online appointment with Extended Monaco Businesses".
It is justified by a reason of public interest: in accordance with Sovereign Ordinance no. 7.995 of 12 March 2020 establishing the Digital Services Department, as amended.
Categories of personal data and retention periods
| Categories of processed data | Retention period |
| Identity | 6 months after the last appointment booked |
| Contact details | 6 months after the last appointment booked |
| Personal information | 6 months after the last appointment booked |
| Login data | 12 rolling months |
| Identification data | 6 months after the last appointment booked |
The personal data collected as part of the aforementioned processing is mandatory. If this information is not provided, the user will not be able to book an appointment..
Recipients of personal data
The personal data listed above will be shared only with the following recipients:
- Accredited staff from the Digital Services Department
- External service providers acting on behalf of and for the account of the Digital Services Department
- Accredited staff from the supplier of the Solution, exclusively as part of their statutory duties
The Government undertakes not to disclose these data to third parties, except where permitted by law. The personal data is not passed to third parties for commercial or advertising purposes.
Transfers of personal data
As part of carrying out certain processing operations, personal data may be disclosed to the supplier of the Solution located in France.
The transfer of this data is subject to safeguards, such as:
- Adequacy decision (List of countries with an adequate level of protection within the meaning of Monegasque data protection legislation dated 01.04.2009 published by the Monegasque Personal Data Protection Authority)
Managing the account enabling users to initiate and follow up procedures via online services
Purpose
The purpose of this processing is "Managing the account enabling users to initiate and follow up procedures via online services".
It is justified by:
- The consent of the data subjects
- A reason of public interest: in accordance with Sovereign Ordinance no. 7.995 of 12 March 2020 establishing the Digital Services Department, as amended
Categories of personal data and retention periods
| Categories of processed data | Retention period |
| Identity* | 3 years after the User's last login Members of the User's household owning the account: 3 years after the User's last login or until modification/deletion of data by the User |
| Contact details* | |
| Personnal information | |
| Electronic identification data* | 3 years after the User's last login |
| Information relating to the user account and monitoring of procedures | |
| Information linked to monitoring of procedures carried out online | |
| Information linked to appointments booked online | Displayed to the User for a maximum of 30 days when viewing the appointment tracking page. No data retention |
| Consent given by the user* | 1 year after the last update of the document folder |
| Payment methods | 3 years after the User's last login |
| Payment history | 3 years after the User’s last login or upon deletion of the request in the online service that gave rise to the online payment |
| Billing information | 3 years after the User's last login |
| Technical key* | |
| Login data | 3 rolling months |
Some personal data collected as part of the aforementioned processing is mandatory (*). If this information is not provided, the user will not be able to use MonGuichet or certain features (Document Folder).
Recipients of personal data
The personal data listed above will be shared only with the following recipients:
- Accredited staff from the Digital Services Department
- External service providers acting on behalf of and for the account of the Digital Services Department
- Accredited staff from the Information Technologies Department
- External service providers acting on behalf of and for the account of the Information Technologies Department
The Government undertakes not to disclose these data to third parties, except where permitted by law. The personal data is not passed to third parties for commercial or advertising purposes.
Transfers of personal data
No personal data is transferred in connection with this processing.
Managing online appointments with the UX Unit
Purpose
The purpose of this processing is "Managing online appointments with the UX Unit".
It is justified by a reason of public interest: in accordance with Sovereign Ordinance no. 7.995 of 12 March 2020 establishing the Digital Services Department, as amended.
Categories of personal data and retention periods
| Categories of processed data | Retention period |
| Identity | 6 months after the last appointment booked, then deletion |
| Contact details | |
| Personnal information | |
| Career information | |
| Electronic identification data | |
| Login data | 12 rolling months |
The personal data collected as part of the aforementioned processing is mandatory. If this information is not provided, the user will not be able to book an appointment.
Recipients of personal data
The personal data listed above will be shared only with the following recipients:
- Accredited staff from the Digital Services Department
- External service providers acting on behalf of and for the account of the Digital Services Department
- Accredited staff from the supplier of the Solution, exclusively as part of their statutory duties
The Government undertakes not to disclose these data to third parties, except where permitted by law. The personal data is not passed to third parties for commercial or advertising purposes.
Transfers of personal data
As part of carrying out certain processing operations, personal data may be disclosed to the supplier of the Solution located in France.
The transfer of this data is subject to safeguards, such as:
- Adequacy decision (List of countries with an adequate level of protection within the meaning of Monegasque data protection legislation dated 01.04.2009 published by the Monegasque Personal Data Protection Authority)
Managing volunteers for user testing sessions and co-design
Purpose(s)
The purpose of this processing is "Managing volunteers for user testing sessions and co-design".
It is justified by:
- The consent of the data subjects
- A reason of public interest: in accordance with Sovereign Ordinance no. 7.995 of 12 March 2020 establishing the Digital Services Department, as amended
Categories of personal data and retention periods
| Categories of processed data | Retention period |
| Identity | 1 year after the date of registration in the volunteer database, renewable if the user consent |
| Contact details | |
| Personnal information | |
| Career information | |
| Electronic identification data | |
| Consent given by the user | |
Responses to questionnaires, surveys and tests | Responses are anonymised if the user does not renew their consent |
The personal data collected as part of the aforementioned processing is mandatory. If this information is not provided, the user will not be able to submit the request.
Recipients of personal data
The personal data listed above will be shared only with the following recipients:
- Accredited staff from the Digital Services Department
- External service providers acting on behalf of and for the account of the Digital Services Department
- Accredited staff from the department or service responsible for the service or procedure that was the subject of the study or test, solely for the purpose of summarising the responses to questionnaires, surveys or tests and compiling profiles of the respondents
The Government undertakes not to disclose these data to third parties, except where permitted by law. The personal data is not passed to third parties for commercial or advertising purposes.
Transfers of personal data
No personal data is transferred in connection with this processing.
Legal References
Legal References
Administrative contact
2 rue du Gabian
Immeuble "Les Industries"
BP 673 MC
98014 MONACO Cedex
Phone :
Administrative contact
2 rue du Gabian
Immeuble "Les Industries"
BP 673 MC
98014 MONACO Cedex
Phone :