Privacy Policy

1. Categories of personal data collected by the Intérêt à agir Endowment Fund

The Intérêt à agir Endowment Fund reminds users that personal data means any information relating to an identified or identifiable natural person.

The Intérêt à agir Endowment Fund may collect the following categories of personal data through its website and digital or paper-based media:

1.1 Donations made through the HelloAsso platform

• Identification data: surname, first name, title, date of birth
• Contact data: email address and postal address
• Transaction and payment data: date and time of donation, donation amount

These data are mandatory. The bank card number is collected only by HelloAsso and is not transmitted to the Intérêt à agir Endowment Fund.

1.2 Volunteer applications

• Identification data: surname, first name
• Contact data: email address
• Other data: interests, skills, academic and professional background, experience related to the Fund's mission, spoken languages and availability

1.3 Contact requests

• Identification data: surname, first name
• Contact data: email address

1.4 Grant requests and/or grant allocation

• Identification data: surname, first name
• Contact data: email address and postal address
• Other data: applicant status, facts, locations, persons, associations or victims concerned

1.5 Declaration of interests of Board members and secretariat

• Identification data: surname, first name, year of birth
• Contact data: email address
• Other data: positions, mandates and any other relevant information

2. Purposes of collecting personal data

• Requesting your involvement through donation appeals and/or mobilisation campaigns
• Managing requests (volunteering, contact, grant requests, etc.)
• Managing donations, including automatic payments and tax receipt issuance
• Complying with legal obligations

3. Legal basis for collecting personal data

• Legal obligation: certain processing operations require the processing of personal data (donation management, tax receipts, etc.)
• Legitimate interest: responding to requests, communicating information related to our mission and projects, or requesting support
• Consent: where certain data are optional, collection is based on consent

4. Data retention period

• Donations: 10 years for donation management and tax receipts; 3 years for donation appeals
• Volunteer applications: 2 years
• Administrative management (General meetings, Minutes, declarations of interests): 30 years
• Grant requests: 1 year after the last contact or end of the agreement if no procedure is ongoing. Where a procedure is underway, data are retained for 1 year from the end of the procedure.
• General contact requests: 3 years

5. Security measures

The Intérêt à agir Endowment Fund attaches great importance to the security and integrity of your personal data.

Your data are processed in a secure environment, remain confidential and are only used for the purposes for which they were provided.

6. Transfer of collected personal data

Your personal data are for the exclusive use of the Intérêt à agir Endowment Fund and will never be transferred or sold to unauthorised third parties.

7. Hosting location

The collected personal data are hosted on computer servers located in Europe.

8. Your rights regarding your data

• Right of access
• Right of rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability
• Right to define instructions regarding your data after your death
• Right to lodge a complaint with the CNIL

To exercise these rights, please contact the Intérêt à agir Endowment Fund at: sophie.lemaitre@fondsdedotationinteretaagir.fr

9. Complaints

For exercising your rights or asking questions about the processing of your personal data, you can contact the Intérêt à agir Endowment Fund. If you believe your rights have not been respected, you may lodge a complaint with the French Data Protection Authority (CNIL).

10. Changes to this Privacy Policy

The Intérêt à agir Endowment Fund reserves the right to modify this personal data protection policy at any time to reflect changes in its practices or new regulations.