The purpose of this Personal Data Protection Policy is to define the principles and guidelines implemented by Le Pain Quotidien with regard to the processing of the personal data of users of the painquotidien.org and centrehospitalier.painquotidien.org websites. The notion of “personal data” or “personal data” corresponds to the definition given in Article 4 of the European Union’s General Data Protection Regulation (RGPD 2016/679), i.e. any information that may allow a natural person to be identified directly or indirectly: surname, first name, IP address, email address, etc. Le Pain Quotidien affirms its commitment to the protection of personal data. Le Pain Quotidien affirms its commitment to complying with applicable data protection laws and regulations, and undertakes to preserve the security, confidentiality and integrity of such data. Le Pain Quotidien formally undertakes not to sell, rent, exchange or transfer any personal information free of charge.
1. SCOPE OF APPLICATION AND EXCLUSION
This Policy applies to all processing of personal data carried out by Le Pain Quotidien from its website:
This Policy does not apply to processing carried out on third party sites or applications for which Le Pain Quotidien are not responsible for processing. The legal basis for processing is:
- the performance of a contract for the processing of online donations and solidarity fundraising;
- consent for other processing operations.
2. COLLECTED DATA
The data collected differs depending on the purpose of the associated processing.
We collect your contact details when you use our contact form.
3. USE OF COLLECTED DATA
The data collected is used for different purposes:
- Contact forms: the data collected via the contact form is used to process your request and to produce statistics.
4. RECIPIENTS OF PERSONAL DATA
Access to personal data is restricted to the departments of Le Pain Quotidien and its subcontractors with whom Le Pain Quotidien has a contractual relationship in order to achieve the purpose of the processing.
5. HOW LONG WE KEEP YOUR DATA
The length of time personal data is kept varies according to the purposes for which it is processed:
- Contact form: your personal data will be kept for 2 years after the last contact.
6. SECURITY OF YOUR DATA
Le Pain Quotidien is particularly concerned about the personal data we collect and process. These operations are carried out in a secure manner. We implement the technical, physical and organisational measures necessary to prevent, as far as possible, any alteration, loss or unauthorised access to your personal data.
7. STORAGE OF DATA
Personal data is stored in the European Union in the databases or files of Le Pain Quotidien or in those of service providers with whom Le Pain Quotidien has a dedicated contractual relationship.
8. RIGHTS RELATING TO PERSONAL DATA
In accordance with the General Data Protection Regulation 2016/679, you have the right to access, rectify, delete and port your personal data. You also have the right to limit and object to the processing of data concerning you. In accordance with article 40-1 of the French Data Protection Act, you also have the right to give instructions concerning the retention, deletion and communication of your personal data after your death. You can exercise this right by writing to the data controller:
- Contact: Communication
Le Pain Quotidien 5 avenue de l’Orme à Martin 91080 Evry-Courcouronnes, France
If you have a complaint, you can contact our DPO at firstname.lastname@example.org or DPO Le Pain Quotidien 5 avenue de l’Orme à Martin 91080 Evry-Courcouronnes, France. In accordance with the European Regulation, you also have the right to lodge a complaint with the CNIL.