Personal date policy

This “Personal Data Protection Policy” aims to provide you with all the necessary information to help you understand (i) how your personal data is processed when you use the website www.fondationarcad.org (ii) and what your rights are regarding the processing of personal data.

Definitions

To help you fully understand the terms used in this Policy, we have reproduced below some of the terms defined by applicable regulations and used in this Policy.

• “personal data”: any information relating to an identified or identifiable natural person; an “identifiable natural person” is deemed to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific elements specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity ;
• “processing”: any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction ;
• “controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law ;
• “processor” means the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
• “GDPR”: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

For more information, you can consult the following texts:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”) ;
• Law No. 78-17 of January 6, 1978 relating to information technology, files and freedoms ;

Purposes of Processing

The website www.fondationarcad.org is the institutional website dedicated to the A.R.CA.D Foundation, whose contact information is as follows:
A.R.CA.D Foundation
4 rue Kléber
92300 Levallois-Perret

This website offers the following features:

• A contact form allowing you to send messages to the A.R.CA.D Foundation
• A newsletter subscription form
• A form for online donations

Who is responsible for processing your data?

The A.R.CA.D Foundation, whose contact details are provided below, is responsible for processing your data.
A.R.CA.D Foundation
45 rue de Croulebarbe
75013 Paris

Purposes – Legal Basis for Processing Your Data and Data Retention Periods

Management of Contact Requests
The processing of data resulting from contact requests meets the legitimate interests of the A.R.CA.D Foundation (Article 6.1.f of the GDPR) aimed at ensuring the achievement of its objectives, in particular by responding to external requests.
You are free to communicate the message you wish to the A.R.CA.D Foundation via the contact form. If your message contains specific data, such as health data, the processing of this data is based on your voluntary and unequivocal declaration of this information for the purpose of an appropriate response from the A.R.CA.D Foundation, constituting a clear affirmative act expressing your consent to the communication and processing of this data by the A.R.CA.D Foundation. Therefore, any communication of specific data, such as health data, is based on your consent (Article 9.2.a of the GDPR). The data you provide via the website contact form (identity, email and message) are kept for up to 6 months.

Managing newsletter subscriptions
Entering your email address constitutes an unequivocal expression of your consent and a clear, affirmative action indicating your agreement to receive our newsletter. Therefore, your subscription to the newsletter is based on your consent (Article 6.1.a of the GDPR).
The email address you provide is used to manage newsletter mailings. Your data will be retained until you withdraw your consent. You can unsubscribe from the newsletter by clicking on the unsubscribe link included in each newsletter or by contacting the A.R.CA.D Foundation using the contact information below.

Online Donation Management and Additional Data Processing
Your identity, contact information, and banking information are used to manage your online donation.
Data processing from online donations is in the legitimate interests of the A.R.CA.D Foundation (Article 6.1.f of the GDPR) to finance its activities.
Your data is retained for up to 10 years by the A.R.CA.D Foundation, due to our accounting obligations. Tax receipts are retained for 6 years (Article L102 B of the Book of Tax Procedures).
We also use our donors’ email addresses to send communications regarding the A.R.CA.D Foundation’s activities (including our newsletter) and to suggest further donations. We communicate with our donors for up to 3 years after the last contact from the donor and a positive approach on their part. Sending these communications meets the legitimate interests of the A.R.CA.D Foundation (article 6.1.f of the GDPR) aimed at promoting its missions and financing its activities.

Recipients of your data
The recipients of your personal data are the internal departments of the A.R.CA.D Foundation and its subcontractors specifically authorized by their function to carry out data processing operations.
The data may be transferred, via our subcontractors, outside the European Economic Area (EEA) or made accessible by entities located outside the European Economic Area (EEA). In such a case, we ensure that this transfer is covered by adequate data protection by signing data protection clauses provided for in Article 46 paragraph 2 of the GDPR or verify that the third country to which the transfer is made ensures, for the individuals whose data is transferred, a level of protection substantially equivalent to that guaranteed within the European Union.
If you have chosen to contribute financially to the cost of the online donation platform, IRAISER is the recipient of your data in its capacity as data controller.

Your Rights
If you subscribe to the newsletter or provide health data or other specific data via the contact form, you have the right to withdraw your consent at any time, without providing any justification, by following the unsubscribe link included in each newsletter or by contacting us using the contact details below.
If you are a donor, you may also object at any time, without providing any justification, to receiving communications from us by following the unsubscribe link included in each communication or by contacting us using the contact details below.
In other cases, you have, with certain exceptions, the right to object to the processing of your personal data for reasons relating to your particular situation.
In certain cases, you may also exercise your right to data deletion and your right to data portability.

In all cases, you may exercise your right to access your personal data, your right to rectification, and your right to restriction of processing. Restricting processing corresponds to freezing your data. This may occur when you request to exercise one of your other rights related to the processing of your personal data: the restriction (or freezing) may be activated for the time necessary to review your request. For example, if you contest the accuracy of the data or object to the processing of your data.
Finally, in accordance with the General Data Protection Regulation 2016/679 (EU) (or “GDPR”), you have the right to define guidelines regarding the retention, deletion, and communication of your data after your death, as well as the right to access, rectify, and delete your data.

To exercise any of these rights, please send your request by email to the following address:
contact@fondationarcad.org
alexandra.branco@mon-dpo-externe.com
Or by post to A.R.CA.D Foundation
Attention: Data Protection Officer
45 rue de Croulebarbe
75013 Paris
If, after requesting to exercise your rights, you feel that they have not been sufficiently respected, you have the right to file a complaint with the French Data Protection Authority (CNIL) (www.cnil.fr).

Links to Other Websites
Our website may contain links to other websites that are not owned or controlled by the A.R.CA.D Foundation. This is particularly the case with social media buttons that allow you to access the A.R.CA.D Foundation’s showcase on these media. Please be aware that we are not responsible for these other websites or the privacy practices of third parties. We encourage you to be aware when you leave our website and to read the privacy statements of each and every website that may collect personal information.

Information Security
We secure the information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We implement state-of-the-art technical and organizational security measures to protect against unauthorized access, use, modification, and disclosure of personal data.

Legal Disclosure
‍We will disclose any information we collect, use, or receive if required or permitted to do so by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

Contact Information
‍If you would like to contact us to further understand this policy or if you would like to contact us regarding any matter relating to individual rights and your personal information, you can contact the Data Protection Officer at the following address: dpo-fondation-arcad@mon-dpo-externe.com

This “Cookie Management Policy” is intended to explain to you how the A.R.CA.D Foundation and its partners deposit and/or use cookie data and other tracers. It also allows you to control their use. The A.R.CA.D Foundation is committed to the proper processing of your data and takes all necessary precautions to ensure that your data is processed securely and in compliance with the regulations in force.

When using the www.fondationarcad.org website, information relating to the browsing of your terminal (computer, tablet, smartphone, etc.) may be recorded in “Cookie” files, deposited on your terminal by the A.R.CA.D Foundation.

This Policy allows you to learn more about the origin and use of this browsing information and your rights concerning it.

What is a cookie?
A cookie is a small computer file, a tracer, deposited and read for example when consulting a website, reading an email, installing or using software or a mobile application, regardless of the type of terminal used (computer, connected TV, smartphone, digital reader, video game console connected to the Internet, etc.). These cookies are stored on your terminal and allow information to be stored. The data stored through cookies may in particular concern the number of pages visited, the chosen language, the city where the IP address of connection to the website is located, the frequency and recurrence of visits, the duration of the visit, the browser, the operator or the type of terminal from which the visit is made. Only the issuer of a cookie can read or modify the information contained therein.

In the context of this “Cookie Management Policy”:

What are the main regulations governing the deposit and use of cookies?

Several European and national texts govern the use and deposit of cookies. Although not exhaustive, this list aims to allow you to inform yourself about the main applicable regulations, and where applicable, to allow you to access and read these regulatory texts.

Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) as amended by Directive 2009/136/EC of the European Parliament and of the Council of 25 November 2009 amending Directive 2002/22/EC on universal service and users’ rights relating to electronic communications networks and services;

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”). This European regulation aims to ensure a consistent and high level of protection of natural persons and to remove obstacles to the flow of personal data within the European Union. However, it leaves the Member States of the European Union room for maneuver to clarify its rules;

Law No. 78-17 of January 6, 1978 relating to information technology, files and freedoms. This French law takes up the main principles of the aforementioned regulation while providing for rights and obligations specific to France in terms of the protection of personal data, in accordance with the room for maneuver opened up by the aforementioned regulation. It is also this law which provides for the missions and powers of the CNIL, the National Commission for Information Technology and Freedoms;

Deliberation No. 2020-091 and Recommendation No. 2020-092 of September 17, 2020 adopting guidelines relating to the application of Article 82 of the amended law of January 6, 1978 to read or write operations in a user’s terminal (in particular to cookies and other trackers).

What are the cookies used and placed on the Website for?

The cookies placed and used through the Website have several purposes. In order to allow you to understand their usefulness and control their use, we group cookies according to the purposes explained below:

The purpose of these cookies is to enable or facilitate electronic communication (detection of connection errors, identification of connection points, security of the Website, etc.) or to provide online communication services at your express request (on-screen display preferences, memorization of information entered in forms, access to your user account, etc.).

In accordance with current regulations, these functional cookies are used and/or placed without requiring your prior consent. However, you can block and/or delete them using your browser settings. As a result, your user experience and the security of your browsing may be degraded. Similarly, certain pages and features of the Website may be inaccessible.

List of operating cookies

The purpose of these cookies is to analyze the traffic and use made of the Website, to better understand how it is used and to be able to improve your browsing and use experience of it. These cookies may in particular process data relating to the pages visited, the content viewed, the durations during which the pages are visited, the browser you use to visit these pages, etc. The use and deposit of these cookies are generally conditional on obtaining your consent. However, certain cookies offering audience measurement may be exempt from consent. The A.R.CA.D Foundation uses the MATOMO solution, the configuration of which allows exemption from consent.

Activating external content results in the deposit and reading of tracers, in particular advertising or audience measurement tracers, from the providers of this content. Therefore, no tracer subject to consent may be deposited on the Internet user’s terminal until the latter has validly consented directly to the provider of this content. Exhaustive list of social network and external content buttons used on the Website:

Why can partners of the A.R.CA.D Foundation use information and data from cookies?

Third parties are authorized by the A.R.CA.D Foundation to place and/or use cookies through the Website. The cookies of these third parties perform various functions:

When these third parties process personal data from data collected through the Website, they act on their own behalf in their capacity as data controller and/or as joint data controllers and/or as subcontractors of the A.R.CA.D Foundation.

Directly on our website

We inform you that, in accordance with the regulations, cookies whose purpose is to enable or facilitate communication or necessary for the provision of a service that you have requested are not subject to your consent.

If the A.R.CA.D Foundation uses cookies and trackers subject to consent, you are offered, during your first visit to our website, to consent or refuse the deposit and/or use of these cookies, by displaying a dedicated information banner. In the event of express acceptance on your part, you consent to the use of cookies on your device. In the event of refusal or absence of response, cookies subject to consent are not deposited and/or used on your device. You can then change your choices at any time using our cookie management module: simply click on this icon located at the bottom right of each page of our website and make your choice.

The choice you make regarding the acceptance or refusal of cookies is valid for 6 months, at the end of which you will be asked again to express your agreement, refusal or a cookie setting.

However, if the A.R.CA.D Foundation adds a new cookie subject to consent in the meantime, you will then be asked again to consent or refuse the use of cookies including the new cookie used by the A.R.CA.D Foundation.

In addition to the choice made during your first visit from a terminal to the Website, you can change these choices at any time, through the mechanisms described below.

Configure your internet browser

Browsers offer numerous settings allowing users to express choices regarding cookies. Regardless of their purpose, you can authorize, block or delete cookies placed on your terminal by configuring your browser options. For the most common browsers, you will find instructions via the following links:

To find out more and exercise all of your rights in the context of the processing of personal data

If you would like to obtain more information on how the A.R.CA.D Foundation processes your personal data, we invite you to visit our Personal Data Protection Policy

The A.R.CA.D Foundation reserves the right to change this “Cookie Management Policy” at any time, in particular in application of changes made to the laws and regulations in force. We recommend that you check these rules from time to time to stay informed of our procedures and rules concerning the use of cookies and other tracers.