Privacy Policy & Personal Data Protection

1. Data Controller Identification

The data controller responsible for the processing of personal data collected through this website is:

2. Nature of Data Collected & Processing Purposes

Our association does not use intrusive commercial tracking or profiling algorithms. We collect personal data strictly when you choose to submit information through our interactive forms:

• Secretariat Contact Form: We collect your full name, email address, optional phone number, and message text solely to respond to your public interest questions, meeting requests, or documentation inquiries.
• Volunteer Application Form: We collect your name, email, phone number, municipality of residence, and areas of interest to coordinate conservation field brigades, organize volunteer insurance coverage, and schedule weekend planting sessions.
• Technical Server Logs: Standard HTTP server logs (IP address, browser type, timestamp) are retained temporarily for server security and denial-of-service prevention.

3. Legal Basis for Processing

Data processing conducted by the GIC Vallée d'Avre is based on:

• Legitimate Interest & Public Interest Mission (GDPR Art. 6.1.e & 6.1.f): Operating our non-profit environmental conservation activities, responding to community correspondence, and coordinating volunteer field brigades.
• Explicit Consent (GDPR Art. 6.1.a): Freely given when you check the statutory submission box and transmit an inquiry or volunteer registration form.

4. Data Retention Periods

In accordance with CNIL guidelines for non-profit associations:

• General Inquiries: Contact form submissions and email correspondences are retained for a maximum duration of two (2) years following the final communication, after which they are securely purged.
• Active Volunteer Records: Volunteer contact details are maintained for the duration of active participation, plus three (3) years following the last recorded participation for statutory insurance verification purposes.
• Server Connection Logs: Technical connection logs are automatically deleted after thirty (30) days.

5. Non-Commercial Data Protection Commitment

We guarantee that personal data collected by the GIC Vallée d'Avre is never sold, leased, traded, or transferred to commercial marketing companies, data brokers, or advertising networks. Data is accessed solely by authorized members of the Board of Directors and technical coordinators strictly on a need-to-know basis.

6. Your Rights Under GDPR & How to Exercise Them

Under European Regulation 2016/679, you hold comprehensive rights regarding your personal information:

• Right of Access (Article 15): You have the right to obtain confirmation as to whether your personal data is being processed and receive a copy of your stored records.
• Right to Rectification (Article 16): You may request the immediate correction of inaccurate or incomplete personal data.
• Right to Erasure / "Right to Be Forgotten" (Article 17): You may request the permanent deletion of your data where it is no longer needed for our non-profit missions.
• Right to Restriction and Objection (Articles 18 & 21): You may object at any time to the processing of your data for legitimate reasons.

To exercise any of these rights, simply email our data coordinator at saifulmolla6474@gmail.com or write by postal mail to: GIC Vallée d'Avre, Mairie Le Bourg, 10 Côte de Dampierre, 28350 Dampierre-sur-Avre. We process all requests free of charge within thirty days. If you consider that our processing violates your rights, you have the right to lodge a complaint with the French data supervisory authority, the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.