Privacy Policy & Personal Data Protection (RGPD)

1. Preamble & Institutional Data Ethos

At Association ELSE, we consider the protection of personal privacy to be an indispensable democratic value. As a cultural non-profit organization operating in the public interest, our relationship with our members, volunteers, workshop participants, and website visitors is founded on mutual trust and transparency.

This Privacy Policy informs you in clear, plain language how Association ELSE collects, uses, protects, and retains personal data collected through our website, contact portals, and community activity registration sheets, in full conformity with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR / RGPD) and Law n° 78-17 of 6 January 1978 as amended.

2. Data Controller Identity & Contact Details

The designated Data Controller (Responsable du Traitement) for all personal information gathered via this portal is:

• Entity Name: ASSOCIATION ELSE (Non-Profit Association Loi 1901)
• Registered Seat: 13 RUE GALPIN THIOU, 37000 TOURS, France
• Prefectural Registration: RNA W451001757 • SIREN 497663294
• Representative: Claire Morvan, President
• Direct Privacy Contact: ahhaiah031@gmail.com
• Direct Helpline: +33490587016

3. Categories of Personal Data Collected & Purpose

In strict adherence to the data minimization principle (Article 5.1.c of the GDPR), Association ELSE only collects personal data that is strictly necessary to fulfill our non-profit cultural objectives:

• Administrative Inquiries (Contact Form): Full name, email address, inquiry subject, and message content. This data is processed exclusively to answer your request for information.
• Volunteer & Workshop Registration: Full name, email address, telephone number, geographic area of availability, and artistic interests. This data is collected solely to coordinate educational workshop rosters, ensure participant safety, and manage non-monetized volunteer assignments.
• Technical Connection Logs: Anonymized IP addresses, browser user agent strings, and timestamps collected temporarily by our server for operational security, server defense against cyberattacks, and diagnostic maintenance.

4. Lawful Basis of Processing (Article 6 GDPR)

Every processing activity carried out by Association ELSE relies upon an explicit legal basis defined by the GDPR:

• Consent (Art. 6.1.a GDPR): Obtained through affirmative, un-coerced opt-in checkboxes on our contact and volunteer submission forms. You may withdraw your consent at any time without retroactive detriment.
• Performance of Association Membership / Civic Agreement (Art. 6.1.b GDPR): Necessary for the administration of workshop enrollments, participant safety insurance, and official General Assembly convocations.
• Compliance with Legal & Statutory Obligations (Art. 6.1.c GDPR): Mandatory maintenance of statutory membership registers, accounting audit records, and issuing official tax reduction receipts (reçus fiscaux) under French fiscal legislation.

5. Zero Commercial Monetization & No Advertising Cookies

We enforce a zero-commercial tracking standard:

• No Commercial Sale: Your personal data will never be traded, rented, shared with commercial advertising networks, or transferred to third-party data brokers.
• No Behavioral Tracking Cookies: Our website does not utilize invasive third-party advertising cookies, behavioral retargeting scripts, or commercial tracking pixels (such as Meta Pixel or Google Ads).
• Technical Storage Only: The site only utilizes essential technical session indicators necessary for form validation and user security, which are exempt from prior consent under CNIL guidelines.

6. Data Retention Schedules

In accordance with Article 5.1.e of the GDPR, personal data is retained only for as long as necessary to accomplish the specified administrative purpose:

• Contact Inquiries: Retained for a maximum period of 24 months following the date of our last interaction, after which records are permanently deleted.
• Volunteer Registrations: Retained for the duration of the volunteer's active engagement plus 1 year following departure for administrative certification purposes.
• Statutory Accounting & Donation Records: Preserved for 10 years in compliance with the mandatory requirements of Article L. 123-22 of the French Commercial Code.

7. Exercise of Citizen Data Rights

Under Articles 15 through 22 of the GDPR, you enjoy the following recognized legal rights regarding your personal information:

• Right of Access (Art. 15): Obtain confirmation as to whether personal data concerning you is processed, and receive an unencrypted copy.
• Right to Rectification (Art. 16): Demand the prompt correction of inaccurate, obsolete, or incomplete information.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request the permanent deletion of your data when it is no longer needed.
• Right to Restriction of Processing (Art. 18): Request temporary freezing of your data while an inquiry is evaluated.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): Object at any time to the processing of your data on legitimate grounds.

To exercise any of these rights, simply email our data controller at ahhaiah031@gmail.com or write to our registered office: Association ELSE, 13 Rue Galpin Thiou, 37000 Tours, France. We commit to responding to all verified requests within thirty (30) calendar days.

8. Right to Lodge a Complaint with the Supervisory Authority (CNIL)

If, after contacting our secretariat, you believe that your data protection rights have not been respected in accordance with European and French law, you retain the statutory right to lodge an official complaint with the French national supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, France
Telephone: +33 (0)1 53 73 22 22
Website for online claims: https://www.cnil.fr