Privacy Policy & Data Protection Charter

1. Commitment to Personal Privacy & Data Ethics

The ASSOCIATION INTERCOMMUNALE DE CHASSE AGREEE ETUPES TAILLECOURT FUSION (RNA: W252002765, SIREN: 850245952) places the highest value on the confidentiality, security, and privacy of your personal data. In an age of widespread commercial data mining, our non-profit association maintains a strict policy of data minimization and ethical processing.

This Privacy Policy explains how our association collects, processes, protects, and stores personal information collected through our website, contact forms, volunteer applications, and member administration, in strict accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation - GDPR) and French Law No. 78-17 of January 6, 1978 as amended (Loi Informatique et Libertés).

2. Identity of the Data Controller

The designated Data Controller (Responsable du Traitement) for all data collected through this digital portal and associated non-profit activities is:

3. Categories of Personal Data Collected

We collect only the minimal data strictly necessary to respond to your civic inquiries, process volunteer enrollments, or satisfy statutory membership obligations under the French Environmental Code:

• Public Contact Form Data: Full name, email address, telephone number, inquiry subject, and the text of your message submitted through our contact portal.
• Volunteer Registration Data: Full name, postal address/municipality, contact details, preferred areas of contribution (e.g. bird census, carpentry, fencing), and relevant outdoor skills voluntarily disclosed.
• Statutory Member & Hunter Registry: Valid hunting license number, civil liability insurance policy certificates, proof of residence (quittance de loyer/taxe d'habitation) in Etupes or Taillecourt, and territorial parcel authorizations required by prefectural decree.
• Technical Log Data: Anonymized server access logs (IP address with the last octet masked, timestamp, browser user-agent) generated automatically for cybersecurity and server health diagnostics.

4. Legal Bases for Data Processing

In compliance with Article 6 of the GDPR, all data processing carried out by the association is justified under recognized lawful bases:

1. Consent (Art. 6.1.a GDPR): When you submit a message through our contact portal or complete a volunteer application, you provide explicit, freely given consent for us to use your contact details to reply.
2. Legal Obligation (Art. 6.1.c GDPR): As an officially approved association under the Code de l'Environnement, we are legally mandated to maintain an accurate annual register of accredited hunters and sworn wardens for inspection by the Prefect of Doubs and the French Biodiversity Office (OFB).
3. Legitimate Interests (Art. 6.1.f GDPR): Securing our web infrastructure against malicious attacks, preventing server abuse, and ensuring public safety along forest trails.

5. Data Retention Periods

We observe rigorous retention limits, ensuring data is never kept longer than required for its declared purpose:

6. Data Sharing & Third-Party Transfers

The Association Intercommunale de Chasse Agréée Etupes Taillecourt Fusion does not share, rent, or trade personal data with any commercial third party:

• No Commercial Marketing Partners: We do not engage with ad networks, data brokers, or behavioral analytics providers.
• Statutory Institutional Disclosures: Member lists and sworn warden accreditations are communicated exclusively to competent state authorities: the Prefect of Doubs, the Departmental Directorate of Territories (DDT 25), the Mayors of Etupes and Taillecourt, and the Doubs Federation of Hunters (FDC 25), as strictly required by law.
• No Extra-EU Transfers: All processing and cloud hosting occurs within secure European Union data centers subject to GDPR standards.

7. Your Rights Under European Law (GDPR)

As a data subject, you enjoy full rights guaranteed by Articles 15 through 22 of the GDPR:

• Right of Access (Art. 15): You have the right to obtain confirmation as to whether your personal data is processed, and to receive an intelligible copy of all held data.
• Right to Rectification (Art. 16): You may request the immediate correction of inaccurate or incomplete personal records.
• Right to Erasure / Right to be Forgotten (Art. 17): You may request the deletion of your personal data when it is no longer needed for its initial purpose, subject to statutory retention obligations.
• Right to Restriction of Processing (Art. 18): You may request temporary suspension of data processing while a dispute is investigated.
• Right to Data Portability (Art. 20): You may receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21): You may object at any time to the processing of your data based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time with immediate future effect.

8. How to Exercise Your Privacy Rights

To exercise any of your statutory rights, simply send a written request to our Data Protection Officer accompanied by proof of identity:

• By Email: rehmanjoiba@gmail.com (Subject: "DPO – Exercise of GDPR Rights")
• By Postal Mail:
  ASSOCIATION INTERCOMMUNALE DE CHASSE AGREEE ETUPES TAILLECOURT FUSION
  Attn: Data Protection Officer
  2 PLACE DU SOUVENIR FRANCAIS, 25460 ETUPES, FRANCE

Our DPO will process and respond to your request within thirty (30) days of receipt, free of charge.

9. Cookie Policy & Tracking Technologies

Our website is designed with a privacy-by-default architecture:

• Zero Marketing or Tracking Cookies: We do not deploy third-party advertising cookies, Facebook pixels, Google Analytics tracking scripts, or cross-site fingerprinting beacons.
• Essential Technical Session Cookies Only: Our portal uses only ephemeral, strictly necessary technical tokens required for CSRF protection and form validation. These cookies do not track your browsing history across other domains and expire automatically when your session closes.
• Because we use zero non-essential tracking cookies, intrusive cookie consent banners that obstruct viewing are unnecessary under CNIL guidelines (Recommandation Cookies et Autres Traceurs).

10. Right to Lodge a Complaint with the Supervisory Authority

If you believe, after contacting our secretariat, that your data rights have not been respected, you possess the statutory right to lodge a formal complaint with the French national supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, France
Telephone: +33 (0)1 53 73 22 22 • Website: https://www.cnil.fr