Source & Sillon takes the protection of your privacy seriously. This policy explains what data we collect, why, how long we keep it, and how you can exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
01Data controller
The controller for these processing activities is the Source & Sillon association, whose registered office and contact details appear in the legal notice.
For any question about your data: contact@source-et-sillon.org. [If a Data Protection Officer (DPO) is appointed, give their contact here.]
02Data we collect
We only collect the data needed for the purposes described below, depending on how you interact with us:
Contact form and emails
- First name, last name and email address
- The content of your message
Donations
- Identity and contact details (name, postal address, email)
- Amount and date of the donation, information needed for the tax receipt
- Payment-card details are handled directly by our payment provider; we do not store your card number. [Name the donation / payment platform used.]
Newsletter
- Email address, and first name where provided
Browsing
- Technical and any audience-measurement data (see the Cookies section)
03Purposes and legal bases
- Answering your requests — basis: your consent or our legitimate interest in replying to you.
- Processing and tracking donations and issuing tax receipts — basis: performance of the relationship with the donor and legal and accounting obligations.
- Sending you our news, where you have opted in — basis: your consent, which you can withdraw at any time.
- Improving and securing the website — basis: our legitimate interest in keeping it working properly.
04Recipients of the data
Your data is intended for authorised Source & Sillon staff. It may be shared with providers acting on our behalf (hosting, email delivery, donation platform, accounting), who are contractually bound by confidentiality and security obligations.
We do not sell or rent your data. It is disclosed to third parties only where the law requires it. [If any provider stores data outside the European Union, state the safeguards for those transfers, such as standard contractual clauses.]
05Retention periods
- Contact requests: for as long as needed to handle the exchange, then limited archiving. [e.g. 12 months]
- Donation and tax-receipt data: for the period required by accounting and tax obligations. [e.g. 6 to 10 years]
- Newsletter subscription: until you unsubscribe. [e.g. then deleted after 3 years of inactivity]
06Your rights
You have the following rights over your data: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time where processing is based on it.
To exercise them, write to contact@source-et-sillon.org. We may ask for proof of identity, and we respond within the timeframes set by the regulation.
If you believe your rights are not being respected, you may lodge a complaint with the French data-protection authority (CNIL), www.cnil.fr.
07Cookies and trackers
We aim to keep trackers to a strict minimum. Cookies that are essential to the website's operation do not require your consent. Audience-measurement or third-party cookies, if used, are only set after you agree and can be refused without degrading access to the content.
[List here the cookies actually set — audience-measurement tool, donation platform, embedded content — their purpose and duration, and how to manage them.]
08Security
We put in place appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure, including access restrictions and encryption of exchanges with the website.
09Changes
This policy may be updated to reflect changes in our activities or in the law. The date at the top of the page shows the latest revision. We encourage you to review it from time to time.