Privacy and Data Protection Policy

This document, titled “Privacy and Data Protection Policy,” applies to any individual (hereinafter “Data Subjects”) whose Personal Data is processed by the Fondation Napoléon, in compliance with the General Data Protection Regulation (GDPR) adopted on 27 April 2016, by the European Parliament and the Council.

When you visit our website, the Fondation Napoléon (hereinafter “we”) collects your Personal Data to use in various automated processing activities.

1 – Processing of Your Personal Data

Definitions

  • Personal Data: Refers to any information relating to an identified or identifiable natural person (hereinafter “Personal Data”).
  • DPO: The Data Protection Officer (DPO) is responsible for ensuring compliance with the GDPR within the organization. Contact our DPO here
  • Data Controller: The Data Controller is the natural or legal person who determines the purposes and means of processing. Typically, this is the legal entity represented by its legal representative. The Data Controller is the Fondation Napoléon.

Our Commitments

We process your Personal Data in accordance with Regulation (EU) 2016/679 of the European Parliament and Council, known as the GDPR.

We are committed to safeguarding your Personal Data. Only authorized personnel trained in confidentiality rules participate in the management of the www.fondationnapoleon.org website.

Moreover, the Fondation Napoléon implements appropriate technical and organizational measures to prevent the loss, misuse, alteration, and deletion of your Personal Data. These measures are adapted according to the sensitivity of the data and the level of risk involved in processing or implementing it.

In the event of a data breach affecting your Personal Data, the Fondation Napoléon will notify you within the timeframe and according to the procedures specified by applicable laws and regulations.

Information Obligations

Article 13 of the GDPR requires us to inform you about:

  • The identity and contact details of the Data Controller and, where applicable, the Data Controller’s representative;
  • The purposes of the processing for which the Personal Data is intended and the legal basis for the processing;
  • The recipients or categories of recipients of the Personal Data, if any;
  • The period for which the Personal Data will be stored or, if that is not possible, the criteria used to determine that period.

2 – Personal Data We Process

We collect and process the following Personal Data:

 

 

 

Type of data collected

  

Processing purpose

  

Basis of processing

  

Retention period
 

Data collected by the contact form
●        Last name

●        First name

●        Title

●        Email address

●        Message (if any)

 Contact form management Legitimate interest 3 years
 

Data collected when you contact us via our e-mail hyperlinks
●        Email address

●        Content of message

 Managing your contact emails Legitimate interest 3 years
 

Data collected when subscribing to the newsletter
·        Email address Newsletter management at your request Consent 3 years
 

Data collected via the online donation form
·        Title

·        Last Name

·        First name

·        Adress

·        Postal code

·        City

·        Country

·        Email address

·        Phone number

 Management of the donation to the Fondation Napoléon Consent 3 years for personal data

 

 

10 years (billing)
 

Data collected by the PDF ‘Donation form’

·        Title

·        Last Name

·        First name

·        Address

·        Postal code

·        City

·        Country

·        Email address

 

 Managing the donation request to the Fondation Napoléon Consent 3 years for personal data

 

 

10 years (billing)
 

 

Data collected by the PDF form “Appel à projets pédagogiques pour le jeune public” [‘Request for a competition for young people’].
·        Last name

·        Adress

·        Email address

·        Phone number

 

 Management of the application file for projects for young audiences ‘Application for a competition for young audiences’. Legitimate interest 3 years
 

Data recorded when you browse our website
IP Address Management of visitor navigation data Legitimate interest 3 years
 

Cookies

 
List of cookies used on our website Cookies management Consent 6 months

 

3 – Recipients of Personal Data

Personal Data collected on the www.fondationnapoleon.org website is primarily intended for the Fondation Napoléon. However, it may be shared with our partners.

To facilitate website maintenance, newsletter registration, and banking transactions, some of your data may also be shared with our subcontractors.

You can access the list of our subcontractors, partners, and/or service providers upon request by asking our DPO.

We ensure that all our partners and subcontractors are subject to adequate Personal Data protection mechanisms and comply with GDPR requirements, and that data is processed only by authorized personnel bound by a confidentiality agreement or equivalent contractual document.

4 – EXERCIZING YOUR GDPR RIGHTS 

According to the applicable regulation you have the following right on your personal data:

  • Access
    To request a copy of the personal data we process in relation to you and to be informed about how we use and share your personal data.
  • Object
    To object to the processing of your personal data if (1) we are processing your personal data on the grounds of legitimate interests or for the performance of a task in the public interest (including profiling); or () if we are processing your personal data for direct marketing purposes.
  • Correction
    To request that we update the personal data we process in relation to you, or to correct personal data that you think is incorrect or incomplete.
  • Erasure
    To ask that we delete personal data that we process in relation to you where we do not have a legal or regulatory obligation or other valid reason to continue to process it.
  • Restriction
    To request that we restrict the way in which we process your personal data , for example, if you dispute the accuracy of your personal data or have raised an objection which is under consideration.
  • Portability
    To request a copy of your personal data that you have provided to us in a commonly used electronic format such as through the completion of an application form.
  • Automated decision making
    To request manual intervention if you are subject to automated decisions where the decision results in a legal or similar effect to you.

You can exercise your rights by sending your request to the following email address: dpo@datae-consulting.com, or, by mail, accompanied by a copy of an identity document, to the Fondation Napoléon at the following address: 7, Rue Geoffroy-Saint-Hilaire, 75005 Paris. You may also lodge a complaint with the CNIL.

Updates

To comply with regulatory changes and reflect our practices, we reserve the right to modify this policy. We will publish any changes in this document, and we recommend that you regularly review our privacy policy.

Last updated: 12 September 2024.