Politique de Confidentialité & Personal Data Protection

1. Institutional Commitment & Regulatory Framework

In the execution of its non-profit cultural missions under the French Law of 1 July 1901 (RNA W172000054, SIREN 781328331), LA COUPE D'OR THEATRE DE ROCHEFORT places the highest priority on protecting personal privacy. We comply strictly with the European Union General Data Protection Regulation (Regulation EU 2016/679, commonly designated as GDPR / RGPD) and the amended French Law n° 78-17 of 6 January 1978 relating to information technology, data files, and civil liberties (Loi Informatique et Libertés).

2. Data Controller Identity (Responsable de Traitement)

The controller responsible for the processing of personal data collected through this digital portal is:

• Entity: LA COUPE D'OR THEATRE DE ROCHEFORT (Association loi 1901)
• Official Address: 101 RUE DE LA REPUBLIQUE, 17300 ROCHEFORT, France
• Legal Representative: The President of the Association
• Data Protection Secretariat Contact: kudumiaji@gmail.com | Telephone: +33 5 99 36 01 38

3. Principle of Strict Data Minimization & Scope of Collection

In alignment with Article 5(1)(c) of the GDPR ("data minimization"), our association collects only data that is adequate, relevant, and strictly limited to what is necessary in relation to the non-commercial purposes for which it is processed.

We collect personal information solely when voluntarily provided by users through our designated contact forms or volunteer application channels:

• Administrative Contact Inquiries: Full name, email address, telephone number, inquiry category, and message text submitted to communicate with our administrative or pedagogical team.
• Civic Volunteer Applications: Full name, email address, telephone number, preferred volunteer track, availability, and brief motivation statements.

Zero Sensitive Data: We never collect, process, or request sensitive personal data, such as racial or ethnic origins, political opinions, religious beliefs, philosophical convictions, trade union membership, genetic data, biometric identifiers, health information, or details regarding criminal convictions.

4. Absolute Prohibition of Commercial Data Exploitation

As an organization dedicated strictly to the public interest, our data practices reflect our non-commercial ethos:

Absence of Third-Party Advertising Trackers: This portal does not utilize commercial advertising networks, retargeting pixels, behavioral tracking cookies, or profiling algorithms. We do not host intrusive commercial trackers.

5. Lawful Bases & Purposes of Data Processing

All personal data processing performed by our association is grounded in specific, legitimate lawful bases under Article 6 of the GDPR:

1. Processing Based on Consent (Art. 6(1)(a)): When an individual voluntarily submits a contact inquiry or volunteer application, they provide affirmative consent for our administrative team to utilize that information exclusively to respond to their specific communication.
2. Processing Based on Legitimate Public Interest (Art. 6(1)(e) & (f)): Processing necessary to fulfill our non-profit statutory missions of cultural democratization, educational coordination with public schools, and community event organization.

6. Data Retention Periods (Conservation des Données)

Personal data is retained only for the duration strictly necessary to fulfill the specific purpose for which it was received:

• General Contact Inquiries: Retained for a maximum duration of twelve (12) months following the final response, after which all records are securely deleted.
• Volunteer Applications: Retained for the duration of the volunteer's active civic engagement with the association, plus one (1) year following the conclusion of their volunteer service for statutory administrative archiving.
• Server Log Files: Standard technical connection logs maintained by the hosting provider for server security and denial-of-service mitigation are retained for a rolling period not exceeding thirty (30) days.

7. User Rights & How to Exercise Them

Under Chapter III (Articles 15 to 22) of the European General Data Protection Regulation and the French Loi Informatique et Libertés, you possess comprehensive legal rights concerning your personal information:

• Right of Access (Art. 15): You have the right to obtain confirmation as to whether your personal data is being processed, and to receive a copy of all data stored.
• Right to Rectification (Art. 16): You may request the immediate correction of inaccurate or incomplete personal information.
• Right to Erasure / "Right to be Forgotten" (Art. 17): You may request the permanent deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to Restriction of Processing (Art. 18): You may demand that the processing of your personal data be temporarily restricted under certain legal conditions.
• Right to Data Portability (Art. 20): You may request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): You may object at any time to the processing of your data based on legitimate interests.
• Right to Withdraw Consent: You retain the absolute right to withdraw previously granted consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, simply transmit a written request accompanied by proof of identity to our dedicated Data Protection Officer via email at kudumiaji@gmail.com or by postal mail addressed to: LA COUPE D'OR THEATRE DE ROCHEFORT – Délégué à la Protection des Données – 101 RUE DE LA REPUBLIQUE, 17300 ROCHEFORT, France. Your request will be processed free of charge within thirty (30) calendar days.

8. Right to Lodge a Complaint with the CNIL

If, after contacting our data protection secretariat, you believe that your rights under the GDPR have not been respected, you have the statutory right to lodge an official complaint with the French national data protection supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, France
Telephone: +33 1 53 73 22 22 • Website: www.cnil.fr