Privacy Policy

1. Data Controller

Legal name: MRE et Généreux

RNA number: W943009823

Registered office: 94110 Arcueil, Val-de-Marne, France

Email: contact@mreetgenereux.org

Legal representative: Mr. Mostapha Lahouaoui, President

2. What data do we collect?

As part of your use of the website www.mreetgenereux.org, we may collect the following categories of data:

Data collected during a donation:

• First and last name
• Email address
• Amount and date of the donation
• Payment information (processed exclusively by Stripe or PayPal — MRE et Généreux does not store any banking data)
• Country of residence

Data collected via the contact form:

• First and last name
• Email address
• Message content

Data collected automatically during browsing:

• IP address
• Browser type and operating system
• Pages visited and duration of visit
• Traffic source (referrer)

3. Why do we collect your data?

Your personal data is collected and processed for the following purposes:

• Processing your donation and issuing a confirmation receipt
• Issuing tax receipts for donors eligible for tax reduction in France
• Communication regarding your donations and the association's activities
• Newsletter and campaign reports (only with your explicit consent)
• Website improvement and traffic statistics analysis
• Compliance with the association's legal and accounting obligations

4. Legal basis for processing

Each data processing operation carried out by MRE et Généreux is based on one of the following legal bases, in accordance with Article 6 of the GDPR:

• Performance of a contract: processing your donation and issuing the receipt
• Legal obligation: retention of accounting and tax data
• Legitimate interest: website improvement and fraud prevention
• Consent: newsletter and marketing communications (you can withdraw your consent at any time)

5. Data retention period

Your personal data is retained for the following periods:

• Donation-related data: 10 years from the date of the donation, in accordance with French accounting and tax obligations
• Contact form data: 3 years from the last contact
• Browsing data: 13 months maximum
• Newsletter data: until you unsubscribe

At the end of these periods, your data is securely deleted or anonymized.

6. Sharing data with third parties

MRE et Généreux never sells, rents, or transfers your personal data to third parties for commercial purposes. Your data may only be transmitted in the following cases:

• Stripe and PayPal: for the secure processing of your payments. These providers have their own privacy policies available on their respective websites.
• Cloudflare hosting: for hosting and securing the website.
• Competent authorities: where expressly required by law (tax audit, legal proceedings).

7. Cookies and trackers

The website www.mreetgenereux.org uses cookies and trackers to improve your browsing experience and analyze website traffic.

Strictly necessary cookies
These cookies are essential for the proper functioning of the website. They do not collect any personal data and cannot be disabled.

Analytics cookies
These cookies allow us to measure the website's audience (pages visited, session duration, traffic source). The data collected is anonymized and does not allow you to be personally identified. They are only placed with your consent.

Payment cookies
Stripe and PayPal place technical cookies necessary for the secure processing of your transactions during a donation.

You can manage your cookie preferences at any time via the consent banner on the website, or by configuring your browser to refuse non-essential cookies. Refusing certain cookies may affect the operation of some features of the website.

8. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

• Right of access: obtain a copy of the data we hold about you
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request the deletion of your data, within the limits of legal obligations
• Right to restriction of processing: temporarily suspend the use of your data
• Right to portability: receive your data in a structured and readable format
• Right to object: object to certain processing operations, in particular for marketing purposes
• Right to withdraw consent: withdraw at any time your consent for processing based on it

To exercise any of these rights, please contact us at: contact@mreetgenereux.org

We undertake to respond to any request within a maximum period of one month from its receipt.

If you believe your rights are not being respected, you have the option to lodge a complaint with the CNIL (French Data Protection Authority):

CNIL — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Website: www.cnil.fr

9. Data security

MRE et Généreux implements all appropriate technical and organizational measures to protect your personal data against any loss, unauthorized access, disclosure or alteration. The website is secured by the HTTPS protocol and benefits from Cloudflare protection.

In the event of a data breach likely to pose a risk to your rights and freedoms, we undertake to notify the CNIL within 72 hours in accordance with Article 33 of the GDPR.

10. Changes to this policy

MRE et Généreux reserves the right to modify this Privacy Policy at any time, in particular to comply with any legal or regulatory change. The last update date shown at the top of this page will be systematically updated. We encourage you to consult this page regularly.

11. Contact

For any question regarding this Privacy Policy or the processing of your personal data:

MRE et Généreux
94110 Arcueil, Val-de-Marne, France
Email: contact@mreetgenereux.org
Website: www.mreetgenereux.org