Which data?

The categories of data processed include identification data for the purpose of communicating with you, getting to know you better and facilitating your relationship with Graines d’Espoir.

When you make a donation or a purchase, answer a survey or participate in a fundraising event, we may also collect :

• your bank details ( except for credit card numbers) ;
• your date of birth;
• your donation or purchase information.

Your data is collected through paper or digital forms. Some data is mandatory to communicate (such as your contact details), other data are optional. The optional data are collected in order to know you better and to be able to send you communications tailored to your preferences (donors, partners, supporters, etc.).

We may obtain information about you from your accounts or social network services, such as Facebook and Twitter, provided you have set up your account to give us this permission. Please check your settings and the privacy policies of these services for more information.

Data processing

Graines d’Espoir uses your data in order to carry out its activities, monitor our communications, answer your questions, inform you about our activities and events, and provide you with information and administrative documents (tax receipts, calls for projects).

The data that you entrust to us are only intended for members of the organization and volunteers, duly sensitized to the protection of personal data, and within the limits of their respective authorizations.

We do not sell or trade your information to any third party or other charitable organization.

The way we use your data depends on the purpose for which you provide it to us. At any time, you have the opportunity to update your preferences and unsubscribe to no longer receive our communications.

We send you information and contact you by post, SMS, telephone, email and other digital media to let you know what Graines d’Espoir is doing and how your support is making a difference. We do this to raise funds or solicit other types of support. We will always respect your preferences and we will try to send you information that you find interesting, in the format and frequency that you desire.

At the bottom of each of our direct marketing emails, you have the option to unsubscribe or update your preferences. You can unsubscribe at any time.

Legal basis of the processing

Every organization needs a legal basis to collect and use personal data covered by data protection legislation. The legislation allows for six methods of processing personal data (and additional methods for sensitive personal data).

We may process your personal data on the basis of :

•  the person’s consent (for example to send you communications);
• the need to comply with a legal obligation (e.g. to process a tax reduction declaration);
• the execution of a contract (e.g. when executing an online order, a donation or a will) ;
• our legitimate interests (for example to build loyalty and get to know our donors or to promote our values and raise awareness of our actions).

Personal data may be legally collected and used if it is necessary for the legitimate interests of the organization using the data, provided that such use of the data is fair and does not infringe the rights of the data subject.

Length of data retention

We do not keep your personal data longer than necessary for the purposes for which it is processed.

These retention periods are determined on the basis of the legal obligations to which we are subject and according to the operational needs of Graines d’Espoir in relation to the processing of your data.

Your personal data is kept securely for the entire duration of its conservation by Graines d’Espoir and can also be archived securely in the event that we are required to keep it for a longer period (for example in the context of a heritage transmission project).

Data security

We take all appropriate technical and organizational measures and precautions to protect your personal data and prevent their loss, misuse or alteration.

These measures include, but are not limited to:

You trust us with your data and we thank you for your confidence. However, you have fundamental rights with regard to this data, in particular the right to request access to the processed data, its correction or deletion, or a limitation of the processing relating to the data subject, or the right to object to the processing and the right to data portability.

Whenever you give consent to the processing of your data, you may withdraw your consent at any time without prejudice to the lawfulness of the processing operation based on the consent given prior to its withdrawal.

We detail each of your rights below and how to exercise your rights.

How to exercise your rights

To exercise your rights, you can either send us a letter to the following address: Graines d’Espoir – 70A, Impasse de l’Amiradou, 83190 Ollioules, or send an e-mail to info@associationgrainesdespoir.org.

We undertake to do what is necessary to give you satisfaction within 30 days.

If we are unable to identify you in our files from the information you have provided, we will keep you informed and you will be asked for additional information.

We systematically archive all traces of your requests and all the answers we provide. These elements will be kept as proof.

Right of amendment

You have the right to obtain, as soon as possible, the rectification of data that would be inaccurate. In view of the purposes of the processing, you have the right to obtain the completion of incomplete data, including by providing an additional declaration.

Right to deletion

This right reflects the right to obtain the deletion of your data as soon as possible. We are obliged to erase your data when one of the following reasons applies:

a) Your data are no longer necessary for the purposes for which they were collected or otherwise processed ;

b) You withdraw the consent on which the processing is based and there is no other legal basis for the processing ;

c) You object to the processing and there is no compelling legitimate reason for the processing, or you object to the processing for the purpose of canvassing, you may exercise this right at any time, including to profiling insofar as it relates to such canvassing ;

d) Your data have been processed illegally;

e) Your data must be deleted in order to comply with a legal obligation under Union law or the law of the Member State to which we are subject;

f) Your data have been collected in the context of an offer of information society services addressed to a child. This processing of data relating to a child is lawful in France when the child is at least 15 years old.

g) If we have made public data that we are required to delete, taking into account available technology and the costs of implementation, we will take reasonable steps, including technical measures, to inform other data controllers who process your data that you have requested deletion, by any link to such data or any copy or reproduction thereof.

h) Please note, however, that this right does not apply to the extent that the processing is necessary:
1. To the exercise of the right to freedom of expression and information,
2. Compliance with a legal obligation requiring processing, provided for by Union law or the law of the Member State to which we are subject, or in order to perform a task carried out in the public interest or in the exercise of official authority vested in us,
3. For archival purposes in the public interest, for scientific or historical research or for statistical purposes,
4. The establishment, exercise or defense of rights in legal proceedings.

Right to limitation of treatment

You have the right to obtain the limitation of the processing of your data in particular when :

a) You dispute the accuracy of your data (for a period of time that will allow us to verify the accuracy of your data) ;

b) The processing is illegal and you object to their deletion by demanding the limitation of their use ;

c) We no longer need your data for the purposes of processing but they are still necessary for the establishment, exercise or defence of legal claims;

d) You oppose the processing by virtue of your right to object, during the verification as to whether the legitimate grounds for the processing being carried out prevail.

Where processing is restricted, data may, with the exception of storage, be processed only with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or on important grounds relating to the public interest of the Union or a Member State.

A data subject who has obtained a restriction on the processing of his or her data shall be informed before the restriction on processing is lifted.

Notification requirement

We will notify each recipient to whom your data have been communicated of any rectification or deletion of data or any limitation of the processing carried out unless such communication proves impossible or requires disproportionate effort. We will provide you with information about these recipients if you request it.

Right to data portability

You have the right to have the data you have provided us with in a structured, commonly used, machine-readable format and you have the right to pass on this data to another controller without our interference, when :

a) The processing is based on consent or on a contract and ;

b) The processing is carried out using automated procedures.

When you exercise your right to data portability, you are entitled to have your personal data transferred directly from one data controller to another, where this is technically possible.

The exercise of the right of portability is without prejudice to the right of deletion. This right shall not apply to any processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

This right shall be without prejudice to the rights and freedoms of third parties.

Right of opposition

You have the right to contest:

a) At any time, for reasons relating to your particular situation, to the processing of data concerning you, including profiling ;

b) Then we will no longer process your data, unless there are legitimate and compelling reasons for the processing that override your interests and your rights and freedoms, or for establishing, exercising or defending your rights in court ;

c) Where your data are processed for the purposes of canvassing, you have the right to object at any time to the processing of your data, including profiling insofar as it relates to such canvassing ;

d) When you object to processing for the purpose of canvassing, your data will no longer be processed for such purposes.

We will present and remind you, clearly and separately from any other information, of this right of opposition, which you have at the latest at the time of the first communication.

In the context of the use of data profiling services, you may exercise your right to oppose the implementation of automated processes using technical specifications.

Where data are processed for scientific or historical research or statistical analysis, you have the right to object, for reasons relating to your particular situation, to the processing of your data, unless the processing is necessary for the performance of a task carried out in the public interest.

Automated individual decision making, including profiling

You have the right not to be the subject of a decision based exclusively on automated processing, including profiling that would produce legal effects or affect you significantly.

This right does not apply if the decision :

a) is necessary for the conclusion or performance of a contract between the data subject and a controller ;

(b) is authorised by Union law or the law of the Member State to which we would be subject and which also provides for appropriate measures to safeguard rights and freedoms and legitimate interests, or ;

(c) Is based on your explicit consent.

Graines d’Espoir implements appropriate measures to safeguard your rights and freedoms and your legitimate interests, at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.

Such decisions cannot be based on special categories of data unless appropriate measures to safeguard rights and freedoms and legitimate interests are in place.