1. Introduction
This privacy policy explains how MATIÈRES LIBRES Association collects, uses and protects your personal data when you use this website, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable French data protection law.
2. Data controller
- MATIÈRES LIBRES Association
- Address: [Association registered office address]
- Email: info@alexandrapr.com
- Phone: +33 (0)1 47 58 08 03
Data Protection Officer (DPO): [DPO name and contact details, if applicable — or "not appointed"]
3. Personal data collected
We may collect the following categories of data:
- Identity data: first name, surname;
- Contact data: email address, phone number, postal address;
- Membership data: information submitted with a membership application;
- Correspondence data: messages sent via the contact form;
- Browsing data: IP address, connection logs, browser type, pages viewed;
- Cookie data: as described in our cookie policy.
4. Purposes and legal bases
- Handling contact requests — legitimate interest and/or pre-contractual steps;
- Managing memberships — performance of the membership agreement and legal obligations;
- Organising the Mathias Prize and events — legitimate interest and, where applicable, consent;
- Institutional communications — consent or legitimate interest, depending on the channel;
- Website security and operation — legitimate interest;
- Legal compliance — legal obligation.
5. Data recipients
Your data may be shared with authorised board members and staff, technical service providers (hosting, email, online payment provider: [Payment provider name, if applicable]), APR — Alexandra Public Relations, and authorities where required by law.
We do not sell your personal data.
6. Retention periods
- Contact requests: 3 years from the last exchange;
- Memberships: duration of membership, then legal archiving period of [archiving period, if applicable];
- Marketing data: 3 years from last contact or until consent is withdrawn;
- Technical logs: up to 12 months;
- Cookies: as stated in the cookie policy, up to 13 months where consent is required.
7. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure [add further measures if applicable].
8. Transfers outside the European Union
Data is generally processed within the European Union. Any transfer to a third country would be subject to appropriate safeguards under the GDPR.
Current transfers identified: [List transfers outside the EU, if any — or "none identified to date"]
9. Your rights
Under applicable law, you have the right to access, rectify, erase, restrict, object to and port your data, withdraw consent, and define post-mortem instructions regarding your data.
To exercise your rights, contact us at info@alexandrapr.com or by post: MATIÈRES LIBRES Association — [Association registered office address].
We will respond within one month. Proof of identity may be requested where necessary.
10. Complaint to the supervisory authority
You may lodge a complaint with the CNIL (French data protection authority): www.cnil.fr.
11. Changes
This policy may be updated to reflect legal, regulatory or technical changes.
Last updated: [Last update date]