1. Identity of the Data Controller
The Data Controller responsible for the processing of personal data collected through this website and during our public civic activities is:
- Entity: HONFLEUR, UN PATRIMOINE POUR DEMAIN (Association loi 1901)
- RNA Identifier: W143000501
- SIREN: 835091554
- Postal Address: Mairie de Honfleur, Place de l'Hôtel de Ville, 14600 Honfleur, France
- Data Protection Officer (DPO) Contact: monirkamrujamana40@gmail.com
- Telephone: +33 2 25 78 86 85
2. Ethical Data Principles: Privacy by Design
As a non-profit association serving the public interest, our digital infrastructure is designed from the ground up to minimize data collection. We adhere strictly to the principle of data minimization (Article 5-1-c of the GDPR), ensuring that we only collect the bare minimum information strictly required to communicate with our members, coordinate volunteer teams, and address public architectural or environmental queries.
3. Categories of Data Collected and Processing Purposes
We collect personal information solely in the following clearly defined civic contexts:
-
Contact and Volunteer Registration Form: When you send a message through our interactive portal on
contact.php, we collect your full name, email address, optional telephone number, area of civic interest, and message content. This processing is based on your explicit consent (Article 6-1-a GDPR) and our legitimate civic interest in responding to community inquiries. - Official Association Membership Ledger: For individuals who formally enroll as active members, we maintain an internal statutory register containing names, postal addresses, and membership contribution records as required by French association law and fiscal audit standards.
- Server Access Logs: Our web hosting server records standard, temporary technical connection logs (IP addresses, request timestamps, and HTTP response codes) strictly for security monitoring and preventing unauthorized server intrusions. These logs are automatically rotated and deleted after 30 days.
4. Strict Anti-Commercial Guarantee: Zero Third-Party Selling
HONFLEUR, UN PATRIMOINE POUR DEMAIN makes an absolute, irrevocable commitment: We do not sell, rent, lease, trade, or transfer your personal data to any commercial broker, marketing company, advertiser, or corporate third party.
Your contact details are used exclusively by our designated volunteer coordinators to provide the information you requested or to invite you to our free public assemblies, guided heritage walks, and ecological workshops. We do not engage in behavioral profiling, automated decision-making, or commercial spam.
5. Cookie-Free & Privacy-Preserving Architecture
Unlike commercial platforms that install invasive third-party tracking pixels, advertising cookies, and cross-site beacons, our website operates on a cookie-free architecture:
- No Advertising Cookies: We do not host Google AdSense, Meta Pixel, tracking pixels, or marketing beacons.
- No Third-Party Analytics Tracking: We do not track individual browsing habits across other websites.
- No Cookie Consent Banner Required: Because our website does not utilize non-essential tracking cookies or profiling tools, users can browse all pages freely without intrusive banner interruptions, in full conformity with CNIL guidelines and the ePrivacy Directive.
6. Data Retention Periods
We retain personal information only for the duration necessary to accomplish the specific civic purpose for which it was collected:
| Data Category | Legal Basis | Retention Period |
|---|---|---|
| General Civic Inquiries via Contact Form | Consent (GDPR Art. 6-1-a) | Retained for a maximum of 12 months following resolution of the inquiry, then permanently purged. |
| Active Member Registry & Dues Records | Legal Obligation (Loi 1901 & CGI) | Maintained throughout active membership duration, then archived for 5 years to comply with statutory fiscal audits. |
| Technical Security Server Logs | Legitimate Security Interest (GDPR Art. 6-1-f) | Automatically overwritten and deleted after 30 days by our secure hosting server. |
7. Your Fundamental Rights Under the GDPR
Under Chapter III of the European General Data Protection Regulation (Articles 15 through 22), you hold enforceable legal rights concerning your personal data:
- Right of Access (Article 15): You have the right to request a complete copy of any personal information we hold regarding you.
- Right to Rectification (Article 16): You may request the prompt correction of inaccurate or incomplete personal records.
- Right to Erasure ("Right to be Forgotten", Article 17): You may demand the permanent deletion of your contact data from our active records at any time.
- Right to Restriction of Processing (Article 18): You may limit how we utilize your data while an accuracy check is being conducted.
- Right to Data Portability (Article 20): You may obtain your provided personal data in a structured, commonly used, and machine-readable format.
- Right to Object (Article 21): You may object at any time to receiving civic notices, newsletter bulletins, or meeting invitations.
How to Exercise Your Rights
To exercise any of these rights, simply transmit a written request to our Data Protection Officer by email at monirkamrujamana40@gmail.com or by postal mail addressed to:
HONFLEUR, UN PATRIMOINE POUR DEMAIN
Attn: Data Privacy Officer (RNA W143000501)
Mairie de Honfleur, Place de l'Hôtel de Ville
14600 Honfleur, France
We will respond to and fulfill your verified request within 30 days, free of charge. If you believe your data protection rights have been infringed, you also have the statutory right to lodge a formal complaint with the French supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), via their official website at www.cnil.fr.