Privacy Policy
⚠️ Placeholder to complete : this GDPR template is generic and must be adapted to the actual data processing (newsletter, donation form, analytics, etc.) via Sveltia CMS.
Data controller
The controller of personal data collected through the dotation.org website is Écloseur SAS, whose contact details are listed in the Legal Notices.
Data collected
The site collects the following personal data:
- Newsletter signup: email address (only if you choose to subscribe)
- Donation form: [TO COMPLETE when the form is integrated — typically name, email, amount, IBAN or card]
- Contact form: name, email, message
- Anonymous analytics: Cloudflare Web Analytics (no cookies, aggregated non-personal data — pageviews, country, browser)
No data is collected without your knowledge. No third-party advertising tracking cookies are used.
Purpose of processing
| Data | Purpose | Legal basis |
|---|---|---|
| Newsletter email | Sending updates on supported projects | Consent (explicit opt-in) |
| Donation form data | Processing the donation, tax receipt | Contract performance |
| Contact form | Responding to inquiry | Legitimate interest |
| Anonymous analytics | Audience measurement (no PII) | Legitimate interest |
Retention period
- Newsletter email: until unsubscription (an unsubscribe link is present in every email)
- Donation data: legal duration (10 years for tax compliance)
- Contact form: 3 years
- Analytics: 6 months (aggregated by Cloudflare)
Your rights (GDPR)
Under the General Data Protection Regulation (GDPR) and French data protection law, you have the following rights:
- Right of access: obtain a copy of your data
- Right to rectification: correct inaccurate data
- Right to erasure (“right to be forgotten”): request deletion of your data
- Right to restriction: limit processing
- Right to portability: retrieve your data in a structured format
- Right to object: oppose certain processing
- Right to withdraw consent: at any time for the newsletter
To exercise these rights: send an email to contact@dotation.org. A response will be provided within one month.
Complaint to the CNIL
If you believe your rights are not respected, you can lodge a complaint with the CNIL (French data protection authority): www.cnil.fr.
Sub-processors
The following third-party services may process personal data on our behalf:
- Cloudflare Pages (hosting, anonymous analytics) — USA, Privacy Shield + DPA
- GitHub (source code storage, not user data) — USA
- Brevo [TO CONFIRM] (newsletter delivery) — France/EU
- [TO COMPLETE based on services integrated into the donation form]
Changes
This policy may be updated. The date of last modification appears below. In case of substantial change, newsletter subscribers will be informed by email.
Last updated: [TO COMPLETE upon first publication]