Privacy Policy & GDPR Commitments

Data Controller

1. Identity of the Data Controller

Personal data collected through this website is processed under the responsibility of the ASSOCIATION DE SAUVEGARDE DU PATRIMOINE DE LA BOURDINIERE SAINT LOUP (RNA: W281004920, SIREN: 794086348), having its registered seat at SAINT LOUP, 3 RUE DE L'EGLISE, 28360 LA BOURDINIERE-SAINT-LOUP, France.

Data Protection Officer Contact: ksishliahe@gmail.com | Telephone: +33 5 32 03 86 67.

2. Nature of Data Collected & Purpose of Processing

As an exclusively non-commercial, public utility association, we collect only the minimal data strictly necessary to fulfill our statutory public interest objectives. We collect information through two specific channels:

• Contact Inquiries (`contact.php`): We collect your full name, email address, optional telephone number, and message content solely to respond to your questions, research requests, or heritage observations. Legal basis: Legitimate interest and user consent.
• Volunteer Applications (`get-involved.php`): We collect your name, email, phone number, focus preferences, availability, and background details to coordinate volunteer restoration sessions and ensure site safety. Legal basis: Performance of volunteer engagement and explicit consent.

We do not sell, rent, monetize, or transfer your personal data to any commercial third parties or advertisers under any circumstances.

3. Data Retention Periods

Contact inquiry records are retained for a maximum of twenty-four (24) months following the conclusion of correspondence. Volunteer application records are maintained for the active duration of the volunteer's engagement, plus three (3) years for statutory insurance verification purposes, after which they are securely purged.

4. Cookie Policy & Tracking Technologies

Our platform does not use commercial advertising cookies, tracking pixels, or cross-site profiling trackers. We employ solely technical session storage and essential functional cookies required for responsive layout rendering and secure AJAX form submissions. Therefore, no invasive commercial consent banners are required.

5. Your Statutory Rights Under GDPR

Under Articles 15 to 22 of the European General Data Protection Regulation (EU 2016/679), you possess the following rights regarding your personal data:

• Right of Access: You may request a copy of any personal data we hold about you.
• Right to Rectification: You may request the correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your data where continued storage is not required by statutory accounting or insurance regulations.
• Right to Restriction & Objection: You may object at any time to the processing of your data.

To exercise any of these rights, simply email our Data Protection Officer at ksishliahe@gmail.com or send postal mail to: Association de Sauvegarde du Patrimoine, 3 Rue de l'Église, 28360 La Bourdinière-Saint-Loup. You also retain the statutory right to file a complaint with the French supervisory authority, the CNIL (Commission Nationale de l'Informatique et des Libertés - www.cnil.fr).