Privacy Policy & Data Protection (GDPR)

1. Data Controller Identification

The legal entity responsible for the processing of personal data collected via this website (Data Controller under Article 4(7) of the GDPR) is:

• Association Name: DH LA DEMEURE HISTORIQUE
• Statute: Non-Profit Association (Law of 1 July 1901)
• Official Identification: RNA W751003815 • SIREN 784 359 887
• Registered Administrative Seat: 57 QUAI DE LA TOURNELLE, 75005 PARIS, FRANCE
• Data Protection Contact & Rights Inquiries: ritazkhan985168@gmail.com
• Telephone Contact: +33 6 32 12 85 07

2. Principles of Data Processing

In accordance with Article 5 of the GDPR, all personal data processed by our association is:

• Processed lawfully, fairly, and transparently in relation to the data subject;
• Collected for specified, explicit, and legitimate non-commercial purposes (heritage documentation, voluntary civic participation, public inquiries) and not further processed in a manner incompatible with those purposes;
• Adequate, relevant, and limited to what is strictly necessary in relation to the purposes for which they are processed (data minimization);
• Accurate and kept up to date;
• Kept in a form permitting identification of data subjects for no longer than is necessary;
• Processed in a manner ensuring appropriate security, confidentiality, and integrity against unauthorized or unlawful processing, accidental loss, destruction, or damage.

3. Categories of Data Collected & Processing Purposes

We only collect personal information when voluntarily supplied by you through our interactive communication channels:

A. Institutional Inquiries & Secretariat Contact

• Data Elements: Full name, institutional or academic affiliation, email address, telephone number, inquiry subject, and description of the historical property or research query.
• Legal Basis: Legitimate interest of the association (Article 6(1)(f) GDPR) to respond to inquiries from citizens, municipal authorities, and heritage custodians.
• Retention Period: Preserved for three (3) years from the last active contact, after which records are securely purged unless required for permanent historical archive documentation.

B. Volunteer Applications & Civic Engagement

• Data Elements: Full name, email address, telephone number, geographic department of residence, preferred volunteer pathway, relevant skills, and personal motivation statement.
• Legal Basis: Explicit consent of the applicant (Article 6(1)(a) GDPR) and pre-contractual steps necessary for organizing voluntary non-profit participation.
• Retention Period: Active volunteer files are retained for the duration of the volunteer's engagement plus two (2) years following the conclusion of their active service. Unselected applicant records are deleted within twelve (12) months.

C. Server Access Logs & Technical Security

• Data Elements: Anonymized IP address, timestamp of request, HTTP request method, URL requested, HTTP status code, user agent string.
• Legal Basis: Legitimate interest (Article 6(1)(f) GDPR) to maintain server security, detect unauthorized access attempts, and ensure high availability of our public portal.
• Retention Period: Automatically overwritten and purged after thirty (30) days by our hosting infrastructure.

4. Cookie Policy & Tracking Technologies

DH LA DEMEURE HISTORIQUE applies an exemplary, privacy-by-design approach to online tracking:

• Zero Advertising Cookies: We do not deploy third-party advertising cookies, retargeting pixels, behavioral profiling scripts, or social media tracking beacons.
• Zero Commercial Monetization: We do not monetize user visits, click-paths, or reading habits.
• Strictly Technical Operation: Any cookies used on this site are strictly technical session identifiers necessary for security and form transmission integrity, exempt from prior consent under CNIL recommendations.

5. Recipients & Data Security Safeguards

Personal information collected by our association is accessed exclusively by authorized members of our secretariat, volunteer coordinators, and scientific committee members who require access to execute our non-profit missions.

We implement robust technical and organizational measures to safeguard your information, including TLS 1.3 cryptographic encryption during transit, strict access control authentication, and hosting within secure European Union data centers subject to GDPR adequacy guarantees.

6. Your Rights Under the GDPR

Under Articles 15 to 22 of Regulation (EU) 2016/679, you possess extensive statutory rights regarding your personal information:

• Right of Access (Article 15): Obtain confirmation as to whether your personal data is being processed and receive a copy of your stored records.
• Right to Rectification (Article 16): Request immediate correction of inaccurate or incomplete personal details.
• Right to Erasure / "Right to be Forgotten" (Article 17): Request the permanent deletion of your data when it is no longer needed for its initial purpose or when consent is withdrawn.
• Right to Restriction of Processing (Article 18): Request temporary freezing of data processing under specific statutory conditions.
• Right to Data Portability (Article 20): Receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Article 21): Object at any time, on grounds relating to your particular situation, to processing based on legitimate interest.

To exercise any of these rights, please send an electronic mail to our dedicated privacy contact at ritazkhan985168@gmail.com or write by postal dispatch to: DH LA DEMEURE HISTORIQUE • Privacy Rights • 57 QUAI DE LA TOURNELLE, 75005 PARIS, FRANCE. We will respond to your verified request within thirty (30) days without cost.

7. Right to Lodge a Complaint with the Supervisory Authority

If, after contacting our secretariat, you believe that your statutory data rights have not been respected, you possess the legal right to submit a formal complaint to the French National Data Protection Commission (CNIL):

• Supervisory Authority: Commission Nationale de l'Informatique et des Libertés (CNIL)
• Postal Address: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, France
• Official Web Portal: https://www.cnil.fr