1. Data Controller Identity
The data controller responsible for personal data collected through this website is:
Association Les Amis de la Sauvegarde du Patrimoine de Serazereux
Statutory Seat: Mairie, 4 Rue Saint Denis, 28170 Serazereux, France
RNA: W283003034 • SIREN: 923755292
Designated Privacy Officer Contact: pohaylaik@gmail.com
"All membership fees and dues are fully reinvested in the association's public interest missions."
2. Ethical Data Principles & Zero Commercialization
As a dedicated non-profit public interest organization, we treat your privacy with utmost integrity. We strictly uphold the following core principles:
- Zero Commercial Sale or Trade: We never sell, rent, monetize, or trade personal data with commercial advertisers, data brokers, or marketing networks under any circumstance.
- Strict Data Minimization: We only collect the minimal personal data necessary to respond to public inquiries or process voluntary civic memberships (such as your name, email address, and optional telephone number).
- No Invasive Tracking Cookies: This website does not deploy third-party advertising cookies, cross-site trackers, or behavioral profiling scripts.
3. Purpose and Legal Basis for Processing
Personal data submitted via our public contact or volunteer expression of interest forms is processed under the legal bases established by GDPR Article 6:
- Legitimate Interest & Public Mission (Art. 6.1.f): Processing correspondence to answer civic inquiries regarding the heritage of Serazereux and the conservation of Saint-Denis Church.
- Consent & Pre-contractual Engagement (Art. 6.1.a & 6.1.b): Processing volunteer onboarding applications and maintaining the official association membership registry.
4. Data Retention Periods
Personal data collected via online inquiry forms is retained for a maximum duration of twelve (12) months following the final exchange, after which it is securely deleted. Membership and volunteer records are retained for the duration of the active membership plus three (3) years to comply with statutory French non-profit accounting and prefectural audit obligations.
5. Your Rights Under European GDPR
Under Chapter III of the General Data Protection Regulation (Articles 15 to 22) and the French Informatique et Libertés law, you retain full rights over your personal data:
- Right of Access: Obtain confirmation of whether your data is processed and receive a copy.
- Right to Rectification: Request correction of inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when no longer necessary.
- Right to Restriction of Processing: Request temporary freeze of data processing.
- Right to Data Portability: Receive your provided data in a structured, machine-readable format.
- Right to Object: Oppose data processing on grounds relating to your particular situation.
To exercise any of these statutory rights, simply send an email request to our Data Protection Officer at: pohaylaik@gmail.com. We will respond promptly within thirty (30) days of receipt. You also possess the statutory right to lodge a complaint with the French national supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL) at www.cnil.fr.