Privacy Policy & Data Protection Charter

I. Principles of Disinterested Personal Data Management

As a non-profit association of public interest, our data processing philosophy is strictly guided by the principle of data minimization (Article 5.1.c of the GDPR). We collect only the absolute minimum amount of personal information required to maintain contact with volunteers, answer civic inquiries, and manage statutory membership rosters in compliance with French law.

II. Identity of the Data Controller

The Data Controller responsible for processing information gathered through this website and through our association's public activities is:

III. Categories of Data Collected and Processing Purposes

We collect and process personal data exclusively in transparent, legitimate contexts:

IV. Cookies, Trackers, and Digital Analytics

In keeping with our ethical non-commercial mandate, this website does NOT utilize third-party commercial tracking cookies, advertising pixels, or behavior-profiling technologies.

• Strict Technical Cookies Only: We employ solely essential technical session markers necessary for page routing, accessibility preferences, and form anti-tampering validation.
• No Commercial Analytics: We refuse intrusive tracking suites that monitor visitors across the web. Any server-level log analysis is strictly anonymous and limited to aggregated traffic counts (e.g., total hits per month) to assess sitemap health.
• Zero Data Monetization: We will never sell, lease, or monetize visitor data under any circumstance.

V. Data Security and Technical Safeguards

B&F Entre Bourbonnais et Forez maintains robust administrative, physical, and technical safeguards to prevent unauthorized access, alteration, disclosure, or destruction of personal data:

• All web communications between your browser and our servers are encrypted using modern Transport Layer Security (HTTPS / TLS 1.3).
• Access to association administrative contact forms and rosters is restricted strictly to authorized volunteer Bureau members bound by written confidentiality agreements.
• Digital backups are stored on encrypted, access-controlled drives housed within secure municipal or certified European server facilities.

VI. Your Rights Under European Law (GDPR)

Under Articles 15 through 22 of the GDPR, you maintain comprehensive rights regarding any personal data we hold about you:

• Right of Access (Article 15): You have the right to request a complete copy of any personal data we maintain concerning you.
• Right of Rectification (Article 16): You may request the prompt correction of inaccurate or incomplete contact details.
• Right to Erasure ("Right to Be Forgotten", Article 17): You may request that we delete your contact records when they are no longer required for statutory non-profit purposes.
• Right to Restriction of Processing (Article 18): You may request that we freeze processing of your information while verifying accuracy.
• Right to Object (Article 21): You may object at any time to receiving association correspondence or newsletters.

To exercise any of these statutory rights, simply transmit a written communication to our Data Protection Delegate at [email protected] or by mail to Mairie, 1 Rue de l'Eglise, 03130 Montaiguet-en-Forez. We will process your request within thirty days free of charge.

If you believe that your data rights have been violated, you also retain the right to lodge a formal complaint with the French national supervisory authority: the Commission Nationale de l'Informatique et des Libertés (CNIL, 3 Place de Fontenoy, 75007 Paris | www.cnil.fr).