SECURITY AND PROTECTION OF PERSONAL DATA (R. GDPR)

The collection of your personal information will be handled in compliance with the DPA (Data Protection Act), the GDPR (General Data Protection Regulation), as well as ISO 27001 and ISO 27018 standards.

PRINCIPLES OF PERSONAL DATA PROTECTION

In terms of Personal Data protection, we commit to ensuring lawful, fair, transparent, and rights-respecting processing. We align this processing with the initial goals of data collection, ensuring their adequacy, relevance, and limitation. Our commitment also involves limited time retention, maintaining data accuracy, and safeguarding their integrity and confidentiality.

RIGHTS CONCERNING THE USER

You have the right to be informed about the processing of your Personal Data, to access it and obtain a copy, to request the correction of inaccurate data, and to request deletion in certain circumstances. You can also restrict processing, obtain data portability, withdraw your consent, define directives for digital inheritance, and object to processing, especially for commercial prospecting purposes. To exercise these rights, contact us at: assistance@exegetes.org . If your request is refused, reasons will be provided. If unsatisfied, please contact us. In case of any violation of your rights, a complaint can be filed with the CNIL (www.cnil.fr).

OUR PERSONAL DATA PROCESSING

The processing of your personal data includes access requests with identifying information such as name, first name, address and email, driven by our legitimate interest in promoting the organization's publications and our legitimate interest in communicating about the organization's activities. Prospecting, communication, and awareness operations primarily involve the email address, justified by our legitimate interest in providing information about our activities. Finally, donation management involves identification data and payment information, supported by our legitimate interest in receiving donations.

DURATION OF RETENTION OF PERSONAL DATA

The retention of your personal data for prospecting, communication, and donation management activities is typically 3 years from the last contact, followed by anonymization. Subsequently, this data may be deleted or archived for longer periods, enabling the exercise of legal rights or compliance with legal obligations. It's important to note that our website does not acquire personal data via social media or browser cookies, and only these third-party services like Google are authorized to respond to cookie-related requests.

RECIPIENTS OF YOUR PERSONAL DATA

During the outlined data processing activities, we may share your personal information with third parties. This includes transmitting your personal data to our designated service providers, such as shipping services, Google LLC and Stripe Inc. Google LLC is responsible for tasks like our website hosting and maintenance operations that involve access to personal information, while Stripe Inc. facilitates payment services for collecting donations. These providers are based in the United States or in Ireland and adhere to all relevant data privacy laws, including the General Data Protection Regulation (GDPR) in the European Union, and the ISO 27001 and ISO 27018 international standards.