The purpose of this page is to inform you of our practices concerning the collection, use and storage of the information that you are required to provide through the forms on this site, in accordance with the provisions of the Data Protection Act. Freedoms of January 6, 1978 and European Regulation No. 2016/679 of April 27, 2016 known as the “General Data Protection Regulation” or “GDPR”, which entered into force on May 25, 2018.

Who are we ?

Our website address is: https://sumus.community/

Purposes of processing

• Provide you with a messaging service to contact the SUMUS association.
• Send newsletters, provided that you have previously agreed to receive them at the email address you provided for this purpose.

The data collected are:

As part of the consultation of the website:

• IP adress. The IP address is the physical address of the computer viewing our site. It is categorized as personal data although it does not provide us, on its own, with any information about a person.
• Demographic and geographic information from Google Analytics collections that we do not store but that we view in aggregate (and not individually). Even if we wanted to know who are the people who visited our website, it would be impossible for us. The sole purpose of these anonymous statistical data is to measure the audience of the site in order to detect navigation problems, to optimize its technical performance and ergonomics, to estimate how much server power is required, for the exclusive account of the site. 'editor.

But you can prevent the recording of personal data (including your IP address) as well as the exploitation of this data by Google, by downloading and installing the Browser Plugin available using the following link: https://tools.google.com/ dlpage/gaoptout

As part of your contact using the form “I am making contact”:

• Identity and contact data: surnames, first names, email address.

As part of the “I commit myself” form:

• Identity and contact data: surnames, first names, email address.

As part of the newsletter subscription

• Contact data: email address.

Personal data that must be provided are indicated as such on the forms. The mandatory nature of the data results from the need to be able to provide appropriate processing.

As part of your donation to our association via our partner HelloAsso

• Identity and contact data, when opening your account or making a payment: last name, first name, e-mail address, postal address, date of birth
• Data allowing the verification of your identity, during payment transactions if you make a payment greater than €2,500: copy of your identity card, proof of address
• Payment information: bank card numbers, BIC and IBAN numbers in the event of SEPA direct debit
• All information that you choose to communicate to us and in particular, a profile photograph

Data retention period:

This data will only be kept:

• For a period of 1 year from the first contact request.
• For the duration of the newsletter subscription, they are automatically deleted when unsubscribing.

Data recipients:

• service providers mandated by the SUMUS association to assist it in the management and sending of newsletters.

Security :

The administrator of sumus.community determines and implements the means necessary to protect the processing of personal data to avoid any access by an unauthorized third party and prevent any loss, alteration or disclosure of data.

Rights of people:

You can access the data concerning you or request its erasure. You also have a right of opposition, a right of rectification and a right to limit the processing of your data (see cnil.fr for more information on your rights). To exercise these rights or for any questions about the processing of your data in this device, you can contact the administrator of sumus.community :

• electronically: contact@sumus.community

by specifying the subject of your request and attaching a copy of your identity document. If you consider, after having contacted them, that your IT and Liberties rights are not respected or that the access control device does not comply with data protection rules, you can send a complaint online to the CNIL or by post.

Data transfers:

Tools developed by certain web companies allow the processing of your information:

• Company OVH – 2 Rue Kellermann, 59100 Roubaix for hosting the website and the email server,
• WooCommerce Ireland Ltd. Grand Canal Dock, 25 Herbert Pl Dublin, D02 AY86 Ireland, for the newsletter,
• Google company in the USA for audience statistics.