1. Identity of the Data Controller
The data controller responsible for the processing of personal data collected through this website is the non-profit organization LE CINQ COTE JARDIN, registered with the Prefecture under RNA W283002862 and SIREN 823401559, having its registered office at:
LE CINQ COTE JARDIN
5 RUE DE LA MAIRIE, 28170 SAINT-ANGE-ET-TORCAY, France
Email: lamiyaakter9237@gmail.com
Phone: +33 5 05 43 46 00
2. Fundamental Principles of Data Processing
As an organization operating exclusively in the public interest, LE CINQ COTE JARDIN observes strict principles of data minimization, purpose limitation, transparency, and integrity:
- Zero Commercial Monetization: We never sell, rent, lease, trade, or monetize personal information. Data provided to our association is never transmitted to commercial marketing vendors.
- Lawful Basis for Processing: All data collection is grounded either in the explicit consent of the data subject (e.g. submitting a contact or volunteer form) or in our legitimate interest as an association managing civic activities and statutory insurance coverage.
- Proportionality: We only collect data strictly necessary to communicate with you, coordinate non-monetized workshops, or fulfill legal obligations under French non-profit legislation.
3. Categories of Personal Data Collected
Depending on your interactions with our public platform, we may collect the following limited categories of personal data:
- Contact Inquiries: Full name, email address, telephone number (optional), inquiry category, and message text submitted via our contact form.
- Volunteer & Workshop Registrations: Full name, email address, phone number, area of artistic or technical interest, availability, and relevant background experience.
- Technical Browsing Data: Standard server logs (anonymized IP addresses, browser user agent, date and time of request) collected strictly for cybersecurity, denial-of-service defense, and server health.
4. Purposes and Legal Bases for Processing
| Data Processing Purpose | Legal Basis (GDPR Art. 6) | Retention Period |
|---|---|---|
| Responding to public inquiries | Art. 6(1)(a) Consent | 12 months following last communication |
| Volunteer coordination and onboarding | Art. 6(1)(b) Contract / Consent | Duration of volunteer engagement + 3 years |
| Workshop registration and safety insurance | Art. 6(1)(c) Legal Obligation | Duration of session + statutory accounting retention |
| Server security and anti-abuse protection | Art. 6(1)(f) Legitimate Interest | Maximum 6 months (anonymized server logs) |
5. Data Security Measures & Hosting Safeguards
LE CINQ COTE JARDIN employs stringent physical, organizational, and technological safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmission across this website is encrypted using industry-standard Transport Layer Security (TLS/HTTPS). Our servers are hosted exclusively in European data centers subject to rigorous GDPR oversight and ISO 27001 physical security standards.
6. Your Statutory Rights under GDPR
Under the General Data Protection Regulation and the French Data Protection Act, you hold the following fundamental rights regarding your personal data:
- Right of Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether your personal data is being processed, and to receive a copy of that data.
- Right to Rectification (Art. 16 GDPR): You may request the prompt correction of inaccurate or incomplete personal information.
- Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data ("right to be forgotten") when it is no longer necessary for the purposes for which it was collected.
- Right to Restriction of Processing (Art. 18 GDPR): You may ask us to restrict the processing of your data under specific statutory circumstances.
- Right to Data Portability (Art. 20 GDPR): You may receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time with future effect.
7. Exercising Your Rights & Supervisory Authority
To exercise any of the rights enumerated above, please send a written request to our Data Protection Officer by email at lamiyaakter9237@gmail.com or by post addressed to:
Data Protection Secretariat
Association LE CINQ COTE JARDIN
5 RUE DE LA MAIRIE, 28170 SAINT-ANGE-ET-TORCAY, France
If you believe, after contacting us, that your data protection rights have not been respected, you have the statutory right to lodge a complaint with the French supervisory authority:
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
Official Website: https://www.cnil.fr