The purpose of this page is to inform you of our practices regarding the collection, use and storage of information that you provide through the forms on this site, in accordance with the provisions of the French Data Protection Act of 6 January 1978 and European Regulation No. 2016/679 of 27 April 2016 known as the "General Data Protection Regulation" or "GDPR", which came into force on 25 May 2018.

Who are we ?

Our website address is: https://sumus.community/

Purposes of the processing

• We provide you with a messaging service to contact the SUMUS association.
• Sending newsletters, provided that you have previously agreed to receive them at the email address you have provided for this purpose.

The data collected is:

As part of consulting the website:

• IP address. The IP address is the physical address of the computer accessing our site. It is categorized as personal data, although it does not, on its own, provide us with any information about an individual.
• Demographic and geographic information collected by Google Analytics is not stored by us but is viewed in aggregate (not individually). Even if we wanted to know who visited our website, it would be impossible. This anonymous statistical data is used solely to measure website traffic in order to detect navigation problems, optimize its technical performance and usability, and estimate the necessary server capacity, exclusively for the benefit of the website publisher.

However, you can prevent the collection of personal data (including your IP address) and its use by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout

As part of your initial contact via the "Contact Us" form:

• Identity and contact details: names, surnames, email address.

As part of the "I commit" form:

• Identity and contact details: names, surnames, email address.

As part of subscribing to the newsletter

• Contact details: email address.

The personal data that must be provided is indicated as such on the forms. The mandatory nature of the data stems from the need to be able to provide appropriate processing.

As part of your donation to our association via our partner HelloAsso

• Identity and contact details, when opening your account or making a payment: surname, first name, email address, postal address, date of birth
• The following information is required to verify your identity during payment transactions if you are making a payment exceeding €2,500: a copy of your identity card and proof of address
• Payment information: bank card numbers, BIC and IBAN numbers in the case of SEPA direct debit
• Any information you choose to provide us, including a profile picture

Data retention period:

This data will only be kept:

• For a period of 1 year from the first contact request.
• For the entire duration of the newsletter subscription, they are automatically deleted upon unsubscription.

Data recipients:

• the service providers mandated by the SUMUS association to assist it in the management and sending of newsletters.

Security :

The administrator of sumus.community determines and implements the necessary means to protect the processing of personal data in order to prevent any access by an unauthorized third party and to prevent any loss, alteration or disclosure of data.

Rights of individuals:

You can access your personal data or request its deletion. You also have the right to object, the right to rectification, and the right to restrict the processing of your data (see cnil.fr for more information on your rights). To exercise these rights or for any questions about the processing of your data within this system, you can contact the administrator of sumus.community :

• electronically: contact@sumus.community

specifying the purpose of your request and attaching a copy of your identity document. If, after contacting them, you believe that your data protection rights are not being respected or that the access control system does not comply with data protection rules, you can file a complaint online with the CNIL or by post.

Data transfers:

Tools developed by certain web companies allow for the processing of your information:

• OVH – 2 Rue Kellermann, 59100 Roubaix for website hosting and mail server,
• WooCommerce Ireland Ltd. Grand Canal Dock, 25 Herbert Pl Dublin, D02 AY86 Ireland, for the newsletter,
• Google, a company in the USA, provides audience statistics.