Privacy Policy & Personal Data Protection Charter
Upholding the strictest privacy standards in compliance with the European General Data Protection Regulation (GDPR / RGPD) and French Data Protection Act (Loi Informatique et Libertés).
Zero Commercial Monetization Pledge: STAPS BISONTIN ENTRAINEMENT SPORTIF strictly rejects the sale, rental, or marketing commercialization of student or volunteer data. We do not use third-party advertising trackers, behavior profiling algorithms, or commercial data brokers.
1. Identity of the Data Controller
The controller responsible for the processing of personal data collected through this website is:
Data Controller Contact Information
Entity: STAPS BISONTIN ENTRAINEMENT SPORTIF (Association Loi 1901)
Registration Identifiers: RNA: W251004364 | SIREN: 813 718 442
Registered Address: 36 A, 36 AVENUE DE L'OBSERVATOIRE, 25000 BESANCON, FRANCE
Data Protection Liaison Email: tamannaakter276384@gmail.com
Telephone Contact: +33 (0)7 31 67 64 4
2. Categories of Data Collected & Legal Bases for Processing
In adherence to the principle of data minimization (Article 5(1)(c) of the GDPR), we only collect data that is strictly necessary to fulfill our non-profit educational missions:
| Processing Context | Data Fields Collected | Legal Basis (GDPR) | Statutory Purpose |
|---|---|---|---|
| Contact Form Inquiries | Full name, email address, optional phone, message topic, inquiry text | Consent (Art. 6(1)(a)) & Legitimate Interest (Art. 6(1)(f)) | Responding to citizen inquiries, academic questions, and partnership proposals |
| Volunteer Registration | Full name, university email, academic year/status, preferred role, motivation | Consent (Art. 6(1)(a)) & Association Membership (Art. 6(1)(b)) | Organizing peer tutoring rosters, field clinic schedules, and volunteer orientation |
| Technical Web Logs | Masked IP address, browser type, timestamp, page requested | Legitimate Interest (Art. 6(1)(f)) | Server security monitoring, DDoS mitigation, and diagnostic uptime assurance |
3. Data Retention Schedules
Personal data is never kept indefinitely. In compliance with CNIL recommendations, we apply clear retention deadlines:
- General Inquiries: Retained for a maximum of 24 months following the resolution of the inquiry, after which electronic records are securely expunged.
- Volunteer Roster Records: Retained for the duration of the volunteer's active mandate plus one academic year to facilitate the issuance of civic certificates of competency.
- Technical Server Connection Logs: Retained for a rolling period of 12 months in compliance with French statutory anti-cybercrime obligations, then automatically purged.
4. Data Security & Strict Non-Transmission to Third Parties
All data transmitted through our web forms is encrypted in transit using industry-standard Transport Layer Security (TLS 1.3 / HTTPS). Access to administrative databases is restricted strictly to authorized executive officers bound by confidentiality pledges.
We strictly enforce a policy of zero commercial data transmission. We do not sell, rent, lease, or transfer your personal information to commercial advertising networks, social media platforms, or external marketers under any circumstances.
5. Your Rights Under European Data Protection Law
Under Articles 15 to 22 of the GDPR and the French Data Protection Act, you possess the following enforceable rights regarding your personal data:
Right of Access & Rectification
You have the right to obtain confirmation as to whether your personal data is being processed, inspect a copy of your records, and request the immediate correction of inaccurate or incomplete information.
Right to Erasure ("Right to be Forgotten")
You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.
Right to Restriction of Processing
You have the right to request a temporary freeze on the processing of your data while an accuracy contestation or legal verification is underway.
Right to Object & Data Portability
You may object at any time to the processing of your data based on legitimate interest, and request to receive your data in a structured, commonly used machine-readable format.
To exercise any of these rights, contact our Data Protection Liaison at tamannaakter276384@gmail.com or by postal mail addressed to STAPS BISONTIN ENTRAINEMENT SPORTIF, 36 A, 36 Avenue de l'Observatoire, 25000 Besançon. Requests are answered within 30 days without charge.
If you consider that our processing of your personal data violates the GDPR, you have the statutory right to lodge a formal complaint with the French supervisory authority: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 (www.cnil.fr).