1. Core Principles of Our Data Privacy Policy
As a non-profit civic association invested with delegated public service responsibilities, the ACCA de Bénac treats personal information with the highest degree of ethical care, technical security, and legal transparency. We collect and process personal data exclusively when strictly necessary for the fulfillment of our statutory missions: managing communal hunting rights, coordinating volunteer brigades, registering landowners, organizing public safety clinics, and responding to citizen inquiries.
We categorically affirm that we never sell, rent, monetize, or transfer personal data to commercial enterprises, advertising networks, or third-party marketing brokers.
2. Categories of Personal Data Collected & Legal Processing Bases
Depending on your interaction with our association, the ACCA collects the following categories of data under specific legal grounds established by Article 6 of the GDPR:
| Processing Purpose | Data Categories Collected | Legal Basis (GDPR Art. 6) | Retention Period |
|---|---|---|---|
| Civic Contact & General Inquiries | Full name, email address, phone number, subject, message contents. | Consent (Art. 6(1)(a)) | 12 months after closure of the inquiry dossier. |
| Volunteer Brigade Applications | Full name, postal address, contact details, preferred brigade, outdoor skills, emergency contact. | Legitimate Interest & Consent (Art. 6(1)(a)(f)) | Duration of active volunteer service + 3 years for insurance auditing. |
| Event Pre-Registration & RSVPs | Full name, email, phone number, selected event, party attendance count. | Consent & Public Safety (Art. 6(1)(a)) | 6 months following conclusion of the event. |
| Statutory Member & Landowner Registry | Identity, cadastral parcel numbers, hunting license validation number, insurance certificate. | Legal Obligation (Art. 6(1)(c) - Code de l'environnement) | Duration of membership / land enrollment + 5 years (statutory archiving). |
3. Technical Security & Privacy-by-Design Architecture
Our website is engineered according to strict privacy-by-design standards:
- No Third-Party Advertising Pixels: We do not deploy Meta Pixel, Google Ads tags, TikTok trackers, or affiliate marketing cookies.
- End-to-End Transport Encryption: All data transmitted between your browser and our server is secured using modern Transport Layer Security (TLS 1.3) with 256-bit encryption.
- Confidential Access Controls: Only designated members of the Executive Committee (President, Secretary, Treasurer) and certified brigade leaders have authorized access to completed forms, secured by multi-factor authentication.
- European Data Hosting: All server infrastructure is situated exclusively within European territory under European data protection sovereignty laws.
4. Your Statutory Rights Under the General Data Protection Regulation
In accordance with Chapter III of the GDPR, you possess extensive rights regarding your personal information:
- Right of Access (Article 15): You have the right to obtain confirmation as to whether personal data concerning you is processed and receive a full copy of the data.
- Right to Rectification (Article 16): You may request the immediate correction of inaccurate or incomplete personal records.
- Right to Erasure / "Right to be Forgotten" (Article 17): You may request the deletion of your personal data when it is no longer necessary for our statutory missions.
- Right to Restriction of Processing (Article 18): You have the right to request a temporary freeze on data processing while a dispute is being investigated.
- Right to Object (Article 21): You may object at any time, on grounds relating to your particular situation, to the processing of your personal data.
To exercise any of these rights, please submit a written request accompanied by proof of identity to our data protection officer via email at privacy@acca-benac.fr or by post addressed to: Délégué aux Données, ACCA de Bénac, Mairie de Bénac, 09000 Bénac, France. We will process your request free of charge within 30 calendar days.
5. Right to Lodge a Formal Complaint with the CNIL
If you consider that the processing of personal data relating to you infringes the GDPR or French data protection laws, you have the right to lodge a formal complaint with the French national supervisory authority:
Commission Nationale de l'Informatique et des Libertés (CNIL)
Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Telephone: +33 (0)1 53 73 22 22
Official Website: https://www.cnil.fr