Fondation de France and its sheltered foundations* are particularly attentive to the protection of privacy and personal data.
The aim of this policy is therefore to inform you about the principles and guidelines implemented by Fondation de France and its sheltered foundations with regard to the processing of personal data. It applies to all data processing carried out by Fondation de France and its sheltered foundations via their websites and in the context of their external relations, regardless of the nature thereof.
*Foundations sheltered by Fondation de France have no legal personality. Fondation de France therefore acts in the capacity of data controller. Consequently, the principles and guidelines presented in this policy apply to the sheltered foundations under the same terms, unless indicated otherwise.
“Personal data”: any information making it possible to identify a natural person, whether directly or indirectly.
“Data processing”: any operation carried out on personal data, such as their collection, conversion, use, transmission or communication.
“Data controller”: legal entity responsible for determining the purposes of the processing and the means employed.
Fondation de France, in its capacity as data controller, and its sheltered foundations undertake to collect and process your personal data in accordance with the provisions of French law no. 78-17 of 6 January 1978 as amended (the French Data Protection Act) and the European Regulation of 25 May 2018 on data protection (hereinafter referred to as the “GDPR").
In order to ensure compliance with these rules, Fondation de France has appointed a Data Protection Officer to be the primary point of contact for the Commission Nationale de l’Informatique et des Libertés (the French data protection authority, hereinafter referred to as the “CNIL”) and the lead within the organisation for issues concerning personal data protection. He fulfils the same role with regard to the sheltered foundations.
Should you have any questions concerning this policy, you may therefore contact the Data Protection Officer of Fondation de France at the following address: dpo@fdf.org.
Fondation de France and its sheltered foundations* seek to only collect and process personal data that are relevant, appropriate, non-excessive and strictly necessary for the purposes for which they are processed.
Fondation de France may have to collect various categories of personal data, including but not limited to the following:
The processing operations carried out by Fondation de France and its sheltered foundations* are done so for explicit, legitimate and specified purposes.
These purposes are primarily as follows:
Fondation de France and its sheltered foundations only pass on your personal data to authorised and specified recipients.
As the sheltered foundations lack any legal responsibility, Fondation de France is also the recipient of certain data they collect.
Access to your personal data is therefore limited to Fondation de France’s internal departments and to third partied appointed by Fondation de France to carry out certain processing. These third parties only act on the instructions of Fondation de France and only have access to those data necessary for them to perform their services. These third parties are also contractually bound by an obligation of confidentiality and security with regard to your personal data, as provided by the legislation in force.
Your personal data are under no circumstances transferred or passed on to other third parties, with the exception of partners in the charity sector.
The sheltered foundations respect under the same terms the principles laid down by Fondation de France on this subject.
Fondation de France only retains your personal data for as long as is necessary given the purposes for which they were collected and in compliance with the legislation in force. Fondation de France may retain your personal data for longer, however, in particular in order to fulfil its legal obligations or for evidentiary purposes.
The sheltered foundations respect under the same terms the principles laid down by Fondation de France on this subject.
Fondation de France seeks to protect your personal data. Fondation de France therefore implements appropriate technical and organisational security measures to avoid any alteration, loss or unauthorised access to your personal data.
Although Fondation de France ensures the security of your personal data, no transmission of data via the Internet is completely secure. Fondation de France cannot, therefore, guarantee the security of the information you transmit to it via the Internet.
The sheltered foundations respect under the same terms the Fondation de France’s policy regarding the security of collected data.
Fondation de France outsources certain processing operations and may, in this context, transfer data outside the European Union. With regard to such transfers, Fondation de France undertakes to enter into contractual clauses with the third parties concerned guaranteeing a suitable level of protection for your personal data.
The sheltered foundations respect under the same terms the Fondation de France’s policy regarding the transfer of collected data.
Pursuant to the applicable regulations, you have the right to lodge a complaint with the CNIL.
This may be submitted online at https://www.cnil.fr/fr/plaintes or by post at the following address:
Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07
Fondation de France may update this policy at any time to adapt it to new practices, if the legal and regulatory framework requires or in line with CNIL guidelines. In this case, the version date of this policy will be updated. You are responsible for verifying the updates to this policy on Fondation de France’s websites.