Privacy & Data Protection: CNIL & GDPR Compliance
Our absolute commitment to personal privacy, total transparency in civic data handling, zero commercial data exploitation, and full compliance with European Union Regulation (EU) 2016/679 (GDPR) and the French Informatique et Libertés law.
1. Identification of the Data Controller
The entity responsible for the collection, processing, and protection of personal data under this website is the registered non-profit organization:
ASSOCIATION FESTIQUAD D ENCHANET
Association régie par la Loi du 1er juillet 1901 (Non-Profit Association)
Headquarters: MR JOUANNET THIERRY, Lieu-dit Les Écoles, 15150 Arnac, France
RNA Registration Number: W151000281 (Sous-Préfecture de Mauriac)
SIREN Number: 447 757 741 • SIRET Number: 447 757 741 00010
Official NAF Classification: 91.04Z (Botanical, Zoological & Nature Reserve Activities)
Data Protection Delegate: Secrétariat Général • Contact via contact.php
Ethical Reinvestment Guarantee: "All membership fees and dues are fully reinvested in the association's public interest missions." We are a strictly non-commercial entity; we do not engage in digital commerce, monetization, consumer profiling, or algorithmic behavioral tracking.
2. Categories of Data Processed & Lawful Bases (Article 6 GDPR)
In strict alignment with the principle of data minimization (Article 5.1.c GDPR), we collect only the minimal information strictly required to respond to citizen communications and organize volunteer field safety:
| Data Category | Collection Point | Legal Basis (GDPR Art. 6) | Specific Processing Purpose |
|---|---|---|---|
| Identity & Contact Data (Full name, email address, phone number) |
Contact Form & Volunteer Portal | Consent (Art. 6.1.a) & Legitimate Non-Profit Interests (Art. 6.1.f) | Responding to citizen inquiries, notifying volunteers about trail maintenance schedules, and coordinating emergency safety gear. |
| Field Preferences (Selected volunteer track, availability notes) |
Volunteer Intake Form | Explicit Consent (Art. 6.1.a) | Assigning appropriate manual tasks during collective field cleanups and allocating safety equipment. |
| Technical Transmission Data (Server timestamps, anonymized IP logs) |
HTTP Server Connection | Legitimate Interest (Art. 6.1.f) | Ensuring network infrastructure security, preventing malicious denial-of-service attempts, and managing anti-cache headers. |
3. Absolute Prohibition of Commercial Data Transfer
ASSOCIATION FESTIQUAD D ENCHANET maintains a strict, unconditional prohibition against the monetization of personal data. Under no circumstances are names, email addresses, phone numbers, or correspondence logs ever sold, rented, leased, exchanged, or transferred to commercial brokers, advertisers, marketing platforms, or third-party corporate entities.
Data access is restricted exclusively to authorized members of the Executive Bureau (President, Secretary, Treasurer) who require access solely to fulfill association administrative and safety responsibilities. When coordinating with municipal town halls or emergency services, communications contain only anonymous territorial metrics (e.g., kilograms of waste collected or linear kilometers cleared) unless explicit written consent is obtained.
Data Retention Periods (Article 5.1.e GDPR):
- General Inquiries: Contact correspondence is permanently purged from active mailboxes within 12 months of resolution.
- Volunteer Registry: Contact records for active volunteers are retained for the duration of active participation plus 2 years for historical civic insurance verification.
- Technical Server Logs: Standard HTTP server diagnostic logs are automatically rotated and deleted after 30 days.
4. Cookie Policy & Formal Exercise of Citizen Data Rights
Zero Tracking Cookie Policy: This website does not use advertising cookies, commercial tracking beacons, Google Analytics trackers, social network tracking pixels, or fingerprinting scripts. We utilize only strictly necessary, technical session identifiers required to execute form submissions and anti-cache headers. In compliance with CNIL guidelines, no cookie consent banner is required for strictly necessary technical operations that do not track users across domains.
Under Chapter III of the GDPR (Articles 15 through 22) and the French Informatique et Libertés law, you have the following enforceable rights regarding your personal information:
- Right of Access (Article 15): Obtain confirmation of whether your data is processed and receive a copy of your records.
- Right to Rectification (Article 16): Require immediate correction of inaccurate or incomplete contact details.
- Right to Erasure (Right to Be Forgotten, Article 17): Request the permanent deletion of your contact records from our volunteer logs.
- Right to Restriction of Processing (Article 18): Request temporary freezing of your data while an inquiry is investigated.
- Right to Withdraw Consent (Article 7.3): Withdraw your volunteer participation consent at any moment without penalty.
- Right to Lodge a Complaint: You have the legal right to submit a regulatory complaint with the French data protection authority (CNIL • Commission Nationale de l'Informatique et des Libertés • 3 Place de Fontenoy, 75007 Paris • www.cnil.fr).
To exercise any of your data protection rights or submit a privacy inquiry to our secretariat:
Contact Us