Privacy Policy & Personal Data Protection
A CORDA respects your fundamental privacy rights. In strict conformity with Regulation (EU) 2016/679 (GDPR) and the French Informatique et Libertés Law, our association enforces strict data minimization: we do not use commercial trackers, sell personal data, or profile our community members.
1. Data Controller & Protection Contact
Direct administrative responsibility for data processing.
Data Controller Entity: Association A CORDA (Association Loi 1901, RNA W093005169, SIREN 938571239)
Registered Office: 47 AVENUE PAUL LAFFONT, 09200 SAINT-GIRONS, France
Telephone: +33 4 48 69 22 10
Designated Data Protection Contact: Volunteer Privacy Officer (*Délégué à la Protection des Données*)
Dedicated Contact Email: contact@assoacorda.com (Subject: "Data Protection / GDPR Inquiry")
Non-Commercial Data Minimization Policy: As an Association Loi 1901 dedicated strictly to public interest cultural missions, A CORDA treats personal data as a sacred trust. We never sell, rent, commercialize, or transfer personal data to third-party advertising brokers or commercial platforms. All membership fees and dues are fully reinvested in the association's public interest missions.
2. GDPR Data Processing Matrix
Clear, explicit reasons for collecting information and how long it is kept.
| Processing Purpose | Categories of Data | Legal Basis (GDPR) | Retention Duration |
|---|---|---|---|
| Contact Inquiries Management Answering citizen questions regarding workshops, locations, and access. |
Name, email address, optional telephone number, message subject, and content. | Article 6(1)(a) – Consent of the user when submitting the contact form. | Maximum 12 months after the resolution of the inquiry, then permanently purged. |
| Volunteer Coordination Organizing schedules, driver assignments, and facilitator pairs. |
Full name, phone, email, preferred volunteer roles, skills, and emergency contact. | Article 6(1)(b) – Necessary for volunteer engagement agreement and mutual commitments. | Duration of active volunteer service, plus 2 years for administrative insurance records. |
| Healthcare Program Attendance Managing workshop participant lists at CHAC hospital and EHPADs. |
Anonymized first names or initial codes, date of attendance (no clinical diagnostics). | Article 6(1)(e) – Public interest mission in healthcare partnership with public bodies. | Strictly preserved as aggregate statistics without personal identifiers for annual reports. |
| Website Security & Integrity Preventing cyber attacks and ensuring server stability. |
Server access logs, masked IP addresses, browser user-agent string. | Article 6(1)(f) – Legitimate interest of the association in guaranteeing technical security. | Maximum 30 rolling days (InterServer host logs), automatically overwritten. |
3. Cookie Policy & Web Tracking
Clean, lightweight, and tracker-free web architecture.
No Advertising or Profiling Cookies
Unlike commercial websites, A CORDA does not deploy third-party advertising trackers, Google remarketing tags, Meta advertising pixels, or invasive behavioral profiling cookies.
Our portal is engineered in native, lightweight PHP and standard CSS. The only cookies that may be utilized are strictly technical and functional session cookies (such as temporary CSRF verification or transient session states) which are exempt from consent under French CNIL guidelines because they carry no cross-site tracking capabilities.
You are free to disable cookies entirely in your browser preferences; our website will continue to function seamlessly and display all program schedules and contact forms without hindrance.
4. Exercising Your Rights Under the GDPR
Every citizen maintains absolute sovereignty over their personal information.
Right of Access (Article 15)
You have the right to request confirmation as to whether your personal data is being processed, and to obtain a clear, comprehensible copy of all data held by A CORDA concerning you.
Right to Rectification (Article 16)
If any personal detail regarding your contact information or volunteer records is incomplete, inaccurate, or outdated, you may demand immediate corrections.
Right to Erasure (Article 17)
Often termed the "Right to be Forgotten", you can demand the immediate and permanent deletion of your messages, contact forms, or volunteer files from our systems.
Right to Restriction (Article 18)
You have the right to limit the processing of your data while an accuracy contestation or administrative review is actively being evaluated by our team.
Right to Object (Article 21)
You may object at any time to the processing of your data on legitimate grounds relating to your particular situation. We do not engage in direct commercial marketing.
Right to Lodge a Complaint (CNIL)
If you believe after contacting us that your data rights have not been respected, you have the statutory right to file a formal complaint with the French supervisory authority:
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07
www.cnil.fr
How to Submit a Data Protection Request
To exercise any of your statutory rights, please write to our volunteer Privacy Officer by sending an email or postal letter to our registered headquarters. We respond to all requests within thirty calendar days.
All membership fees and dues are fully reinvested in the association's public interest missions.