Privacy Policy & European GDPR Compliance

1. Institutional Data Controller Identity

The entity responsible for the collection and processing of personal data on this digital portal is MDD FAMILY, an association declared under the French Law of 1 July 1901:

• Organization: MDD FAMILY (Association Loi 1901)
• Prefecture Registration (RNA): W092001326
• National SIREN Identification: 522606318
• Headquarters: HAMEAU DE REBAILLOU, 09350 LES BORDES-SUR-ARIZE, France
• Designated Data Protection Contact: Claire Valat (General Secretary)
• Official Privacy Correspondence: contact@mddfamilys.com

2. Foundational Privacy Principles & Strict Data Minimization

As a non-profit association committed to civic solidarity and public interest service, MDD FAMILY adheres strictly to the principle of "data minimization" (Article 5.1.c of the GDPR). We collect only the absolute minimum amount of personal data necessary to respond to public community inquiries, process volunteer applications, and coordinate municipal cultural partnerships.

Zero Commercial Profiling & Zero Ad Trackers: This digital portal does not employ commercial advertising cookies, cross-site behavioral tracking scripts, behavioral profiling tools, or marketing pixel trackers. We never monetize, rent, sell, or disclose personal contact records to third-party commercial entities, marketing agencies, or corporate brokers.

3. Nature of Personal Data Collected

When you choose to communicate with our association via the public contact desk on contact.php, we collect solely the personal identifiers that you voluntarily transmit:

• Full Name (Nom et Prénom): Utilized to address our community correspondence respectfully;
• Electronic Mail Address (Email): Utilized exclusively to send replies to your inquiry;
• Inquiry Subject & Message Content: Utilized to understand your project, volunteer proposal, or municipal request.

4. Legal Grounds for Processing (Article 6 GDPR)

Our processing of personal data relies on the following lawful bases pursuant to Article 6 of the GDPR:

• Consent (Art. 6.1.a): Expressed when you voluntarily submit an inquiry through our public contact form;
• Legitimate Interests (Art. 6.1.f): Operating our non-profit association, communicating with community residents, and organizing volunteer activities;
• Legal Obligation (Art. 6.1.c): Maintaining statutory association registries and municipal grant accounting ledgers required under French law.

5. Data Retention Periods

Personal data collected through public contact inquiries is retained strictly for the duration necessary to satisfy the inquiry and subsequent community follow-up, typically not exceeding twelve (12) months from the date of final communication. Membership records and volunteer registration documents are archived for the statutory duration required by French fiscal and prefectural regulations (five years following cessation of membership). Upon expiration of the retention period, data is securely and permanently expunged.

6. Your Statutory Rights Under the GDPR

Under European and French law (Loi n° 78-17 du 6 janvier 1978 modifiée), you hold comprehensive rights regarding your personal data:

• Right of Access (Art. 15 GDPR): You may request a complete copy of all personal records held about you;
• Right of Rectification (Art. 16 GDPR): You may request the immediate correction of inaccurate or incomplete data;
• Right of Erasure / "Right to be Forgotten" (Art. 17 GDPR): You may request the permanent deletion of your personal records;
• Right to Restriction of Processing (Art. 18 GDPR): You may request temporary suspension of processing while an inquiry is investigated;
• Right to Data Portability (Art. 20 GDPR): You may receive your records in a structured, machine-readable format.

7. Exercising Your Rights & Supervisory Authority Recourse

To exercise any of your data rights, please contact our secretariat by electronic mail at contact@mddfamilys.com or by postal dispatch addressed to:

MDD FAMILY — Délégué à la Protection des Données
Hameau de Rebaillou, 09350 Les Bordes-sur-Arize, France

If you consider, after contacting us, that your data protection rights have not been respected, you have the statutory right to lodge an official complaint with the French national supervisory authority: the Commission Nationale de l'Informatique et des Libertés (CNIL) via their online portal at www.cnil.fr or by post (3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).