DATA PRIVACY • EU REGULATION 2016/679

Privacy Policy & Personal Data Protection

Association SON SON upholds the strictest standards of data minimization, transparency, and personal privacy in accordance with the European Union General Data Protection Regulation (GDPR).

Data protection and privacy compliance discussion
• GDPR COMPLIANCE Data Minimization Pledge
Ethical data review: Association data protection delegates verifying security protocols for civic volunteer contact registries.
• SECTION 1: DATA CONTROLLER IDENTIFICATION

1. Data Controller Information

The controller responsible for the processing of personal data collected through this website is:

Organization: ASSOCIATION SON SON (Loi 1901)

Official Representative: Kaie Hilaushi, President

Registered Address: CHEZ PARADIS, 7 ROUTE DE SURIS, 16310 LESIGNAC-DURAND, FRANCE

Data Protection Contact: kaiehilaushi@gmail.com

Telephone: +33 1 08 65 62 37

• SECTION 2: DATA MINIMIZATION PRINCIPLE

2. Data Minimization & Scope of Processing

SON SON applies strict data minimization principles (Article 5(1)(c) of the GDPR). We collect only the minimum personal data strictly necessary to process your voluntary inquiries, workshop enrollments, and civic service registrations:

  • Identity & Contact: Full name, email address, telephone number, and municipality of residence.
  • Civic Capacity: Desired workshop topic, volunteer interests, or academic internship objectives.
  • Accessibility Notes: Any physical or dietary accommodations you voluntarily disclose to help us arrange barrier-free workshop environments.

Zero Commercial Profiling: We do not track users across third-party websites, do not employ invasive commercial advertising cookies, and will never sell, rent, or trade your personal information with commercial advertisers or marketing agencies.

• SECTION 3: LEGAL BASIS & RETENTION PERIODS

3. Lawfulness of Processing & Data Retention

The processing of your data is based upon your explicit consent (Article 6(1)(a) GDPR) granted when submitting an intake form, and upon the legitimate public interest (Article 6(1)(e) GDPR) of our association in managing community cultural programs.

Data retention periods are strictly limited:

  • General Inquiries: Retained for a maximum of 12 months following resolution of the query, after which records are permanently deleted.
  • Volunteer & Beneficiary Records: Maintained for the duration of the civic mission or program cycle, plus 2 years for mandatory public grant audit compliance.
  • Civic Service Applications: Unsuccessful applicant files are expunged within 6 months of cohort finalization.
• SECTION 4: YOUR INDIVIDUAL RIGHTS

4. Exercise of Your Data Protection Rights

Under Articles 15 through 22 of the GDPR, you possess the following actionable rights regarding your personal data:

  • Right of Access: Request a full copy of the personal information we maintain in our records.
  • Right of Rectification: Require the immediate correction of inaccurate or incomplete details.
  • Right to Erasure ("Right to be Forgotten"): Demand the deletion of your personal records where no statutory grant retention obligation applies.
  • Right of Portability: Obtain your data in a structured, commonly used, machine-readable format.
  • Right to Withdraw Consent: Revoke your processing consent at any time with immediate effect.

To exercise any of these rights, transmit a written request to our Data Protection Delegate at kaiehilaushi@gmail.com. You also retain the right to lodge a formal complaint with the French data protection supervisory authority: CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.