Privacy Policy

1

Data Controller

Association Midezon-Togo, 19 rue Louis Pasteur, Apartment 160, 65430 Soues, France. Email: contact@midezon-togo.org

2

Data Collected

We only collect data necessary for the proper functioning of our services:

• Contact form: name, email, subject, message
• Volunteer registration: first name, last name, email, phone, motivation
• Volunteer signup: first name, last name, phone
• Donations and sponsorship: name, email, amount (bank details processed by Stripe, not stored)
• Testimonials: name, text, photo/video (with consent)

3

Purpose of Processing

Data is collected to: respond to your contact requests, process volunteer registrations, manage donations and sponsorships, publish testimonials (with consent), improve our services and communication.

4

Legal Basis

Data processing is based on: explicit user consent (Art. 6.1.a GDPR), performance of a contract or pre-contractual measures (Art. 6.1.b GDPR), legitimate interest of the association (Art. 6.1.f GDPR).

5

Data Retention

Personal data is retained for a maximum of 3 years from the last contact. Donation-related data is kept in accordance with accounting obligations (10 years). You may request deletion of your data at any time.

6

Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to restriction: restrict the processing of your data

7

Data Security

We implement appropriate technical and organisational measures to ensure the security of your data: SSL/TLS encryption, restricted data access, secure hosting (Vercel), no transmission to third parties without consent.

8

Third-Party Sharing

Your data is never sold. It may be shared with: Stripe (payment processing, PCI DSS certified), Vercel (hosting, US-based with GDPR safeguards), Google Maps (embedded on the contact page). These providers are bound by data protection agreements compliant with GDPR.

9

Cookie Policy

Our website uses only strictly necessary cookies. No advertising tracking cookies are used. You can disable cookies in your browser settings.

10

Changes

This policy may be updated. The date of last modification is indicated below. We invite you to review it regularly.

Cookies & traceurs déposés

Liste exhaustive des cookies et identifiants déposés sur votre appareil lorsque vous visitez ce site. Les cookies tiers (Google Analytics) ne sont déposés qu’après votre consentement explicite. La mesure d’audience de notre hébergeur (Vercel Web Analytics) ne dépose aucun cookie et ne stocke rien sur votre appareil : elle compte les visites de façon agrégée, et les liens personnels (espace parrain, dépôt de photos) lui sont transmis sans leur code d’accès.