Join

Privacy Policy

Effective from 1 August 2026

The Mauves So British association attaches great importance to the protection of the personal data of users of its website [WEBSITE URL] (hereinafter ‘the Website’).

This policy describes the processing of personal data carried out in connection with the Website, in accordance with Regulation (EU) 2016/679 (GDPR) and the amended Law No. 78-17 of 6 January 1978, known as the ‘Data Protection Act’.

ARTICLE 1: Data controller

The data controller is:

Association Mauves So British, a charity governed by the Act of 1 July 1901.

 

The association is represented by its two co-chairs, Claude BRETEAU and Valérie JOURDAN.

The association has not appointed a Data Protection Officer (DPO), as this is not mandatory given the nature of its activities. Any queries regarding your data may be addressed to the contact details above.

ARTICLE 2: Data collected

The association collects only the data strictly necessary for the purposes described below. No sensitive data (within the meaning of Article 9 of the GDPR) is collected.

The data that may be processed is as follows:

  • Via the contact form: name, email address, message content.
  • Via newsletter subscription: email address (and, where applicable, first name).
  • Via online membership registration (where applicable, carried out on the HelloAsso platform): the data required for membership and payment, collected and processed by HelloAsso.
  • Via website browsing: technical connection data (IP address, server logs), processed by the web host for security and operational purposes.

ARTICLE 3: Purposes and legal bases​

Each processing operation is based on a specific legal basis within the meaning of Article 6 of the GDPR:

Responding to enquiries via the contact form Purpose: to process and respond to messages sent to the association. Legal basis: the association’s legitimate interest in responding to enquiries addressed to it.

Sending the newsletter Purpose: to inform subscribers of the association’s news and events. Legal basis: the individual’s consent (obtained via voluntary ‘double opt-in’ registration).

Managing memberships (where applicable, via HelloAsso) Purpose: to process membership applications and payments, and to maintain the membership list. Legal basis: performance of the membership contract, and compliance with the association’s legal and accounting obligations.

Ensuring the security and operation of the Website Purpose: to maintain the availability and security of the Website. Legal basis: the association’s legitimate interest.

ARTICLE 4: Recipients of the data

The data is intended for authorised personnel within the association. It is not transferred or sold to third parties.

In the course of providing services, certain data may be processed by technical service providers acting as data processors:

  • HOSTINGER INTERNATIONAL LTD: website hosting and access logs.
  • MailPoet (Automattic Inc.): sending and managing the newsletter.
  • Google (Google Maps): displaying the location map, subject to the user’s consent.

Each data processor undertakes to comply with the GDPR and to process data only for the purposes of the service in question.

ARTICLE 5: Data transfers outside the European Union

Some service providers may process data outside the European Union, in particular in the United States:

  • MailPoet / Automattic Inc. (sending the newsletter);
  • Google (displaying the map, subject to consent).

These transfers are governed by appropriate safeguards within the meaning of Articles 44 et seq. of the GDPR, in particular these service providers’ adherence to the EU–US Data Privacy Framework and/or the use of standard contractual clauses approved by the European Commission.

ARTICLE 6: Retention periods

Data is retained for a period not exceeding that necessary for the purposes for which it is processed:

  • Contact form messages: for the time required to process the enquiry, then for a maximum of 3 years from the date of the last contact.
  • Newsletter: until the individual unsubscribes. In the event of inactivity, contact details are deleted after a period of 3 years.
  • Memberships (where applicable): for the duration of the membership, then for administrative purposes for a reasonable period; accounting records are retained in accordance with applicable legal obligations.
  • Log files: retained by the web host for a limited period for security purposes.
  • Cookies: see Article 7.

ARTICLE 7: Cookies​

The Website sets cookies. These can be categorised as follows:

  • Cookies that are strictly necessary for the Website to function and to record your consent preferences: these do not require consent.
  • Third-party cookies, in particular those set by Google Maps: these are only set once your consent has been obtained via the banner provided for this purpose. Until you have given your consent, this third-party content remains blocked.

You may accept, refuse or change your preferences at any time via the cookie management tool available on the Website. Cookies are valid for a maximum of 13 months, and your consent is renewed at the same intervals.

You may also configure your browser to refuse cookies; however, this may affect certain features of the Website.

ARTICLE 8: Data security

The association implements appropriate technical and organisational measures to ensure the security and confidentiality of data, and to protect it against unauthorised access, alteration, disclosure or destruction (including a secure HTTPS connection and restricted access to authorised personnel).

ARTICLE 9: Your rights

In accordance with the regulations, you have the following rights in relation to your data:

  • the right of access;
  • the right to rectification;
  • the right to erasure;
  • the right to restriction of processing;
  • the right to object;
  • the right to data portability;
  • the right to withdraw your consent at any time, without this affecting the lawfulness of any processing carried out prior to such withdrawal.

You may exercise these rights by writing to mauvessobritish@gmail.com, providing proof of your identity. The association undertakes to reply within one month.

Regarding the newsletter, you may unsubscribe at any time via the link at the bottom of each message.

ARTICLE 10: Complaints

If, after contacting us, you feel that your rights have not been respected, you may lodge a complaint with the French Data Protection Authority (CNIL):

CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr

ARTICLE 11: Amendments to the policy

The association reserves the right to amend this privacy policy at any time, in particular to comply with any legal, regulatory or technical changes. The applicable version is the one in force on the date you view this page.

ARTICLE 12: Contact

If you have any questions regarding this policy or the processing of your data, please contact the association at: mauvessobritish@gmail.com.