Privacy Policy, Data Protection & GDPR Compliance

1. Principles and Commitment to Data Dignity

At CONSEIL PARENT ELEVE FEDERATION CORNEC, we regard privacy not merely as a regulatory requirement, but as a core ethical responsibility. In an era where digital surveillance and unauthorized corporate data harvesting are widespread, our association upholds the highest standards of digital confidentiality. We treat all information entrusted to us by parents, students, educators, and volunteers with the utmost care, transparency, and respect.

We operate under a strict principle of data minimization: we collect only the minimal personal information strictly necessary to coordinate non-profit educational activities, safeguard participating children, and communicate with our members. We never monetize, sell, lease, trade, or share personal data with commercial advertisers, third-party marketing firms, or private data brokers.

2. Identification of the Data Controller

In accordance with Article 4(7) of the General Data Protection Regulation (GDPR), the legal data controller for all personal information collected through this website and through our association’s activities is:

3. Categories of Personal Data Collected and Legal Bases

Our association processes personal data exclusively under legitimate, non-commercial legal bases recognized by the GDPR:

A. General Inquiries and Public Contact

When you submit an electronic inquiry via our contact form or contact our secretariat by telephone or email, we collect your full name, email address, optional telephone number, and message content.
Legal Basis: Legitimate interest (GDPR Art. 6(1)(f)) and explicit user consent (GDPR Art. 6(1)(a)) in receiving an administrative response to your inquiry.

B. Volunteer Applications and Onboarding

When you apply to volunteer with our association, we collect your name, contact coordinates, preferred volunteer tracks, personal availability, and background motivations. For approved volunteers working with minors, we verify the official Casier Judiciaire Bulletin N°3 extract as required by French child protection statutes.
Legal Basis: Performance of pre-contractual and voluntary engagement steps (GDPR Art. 6(1)(b)) and compliance with legal obligations for child safeguarding under the French Education Code (GDPR Art. 6(1)(c)).

C. Workshop Enrollment & Child Emergency Details

When parents enroll a student in our free extracurricular arts workshops or theatrical recitals, we collect the child’s name, grade level, guardian contact details, and vital emergency medical or allergy notices necessary to provide immediate first-aid care during after-school sessions.
Legal Basis: Explicit parental consent (GDPR Art. 6(1)(a) and Art. 9(2)(a) for vital health precautions) and protection of vital interests of the child (GDPR Art. 6(1)(d)).

4. Data Retention Periods

We do not retain personal information longer than necessary to fulfill the civic purpose for which it was gathered:

• General Inquiries: Retained for a maximum of 12 months following resolution of the inquiry, after which electronic correspondence is securely purged.
• Volunteer Records: Retained for the duration of the volunteer's active engagement plus 3 years following cessation of activity to satisfy statutory civil liability insurance limitation periods.
• Workshop Registration Slips: Destroyed at the conclusion of each academic school year, with emergency medical notices shredded within 14 days of the final workshop session.
• Statutory Association Registers: General Assembly attendance sheets and board election ballots are preserved for 5 years in compliance with French associative corporate record obligations.

5. Strict Cookie and Tracking Policy

This website is built upon ethical, non-commercial web standards:

Zero Marketing or Tracking Cookies: We do not deploy third-party advertising cookies, behavioural profiling trackers, cross-site re-targeting beacons, or monetization analytics on this website.

Zero Third-Party Advertising Scripts: Our portal contains no Google AdSense, Facebook Pixel, TikTok trackers, or commercial affiliate code.

Essential Session Technical Cookies Only: If our web server issues any technical session cookie, it is strictly operational (exempt from prior consent under CNIL guidelines) and is automatically destroyed when you close your web browser session.

6. Security Measures and Data Protection Architecture

We implement rigorous technical and organizational security safeguards to prevent accidental loss, unauthorized access, alteration, or disclosure of personal records:

• Encrypted Web Transmissions: All website traffic is protected by end-to-end Transport Layer Security (TLS 1.3 / HTTPS) with modern 256-bit cryptographic ciphers.
• Access Control Restrictions: Only designated executive bureau officers with authorized administrative duties hold credentials to access inquiry records and volunteer application archives.
• Physical Document Security: Physical registration slips, emergency health slips, and membership files are stored securely in locked archival cabinets within the school association office.

7. Your Legal Rights Under the GDPR

Under Articles 15 through 22 of the GDPR and the French Data Protection Act, you possess clear, enforceable rights concerning your personal information:

1. Right of Access (Art. 15): You have the right to request a complete copy of all personal data held about you by the association.
2. Right of Rectification (Art. 16): You may request immediate correction of inaccurate or incomplete records.
3. Right to Erasure / "Right to be Forgotten" (Art. 17): You may request deletion of your personal records where there is no overriding statutory obligation to retain them.
4. Right to Restriction of Processing (Art. 18): You may request that we limit the processing of your data under specific contested circumstances.
5. Right to Data Portability (Art. 20): You may receive your provided personal data in a structured, commonly used, machine-readable format.
6. Right to Object (Art. 21): You may object at any time to the processing of your data on grounds relating to your particular situation.

To exercise any of these rights, simply transmit a written request to our Data Controller by email at [email protected] or by postal mail addressed to:
CONSEIL PARENT ELEVE FEDERATION CORNEC • Data Protection Officer • ECOLE PUBLIQUE, 22250 TREMEUR, FRANCE.
We will respond to all verified requests within thirty (30) calendar days without charge.

8. Right to Lodge a Complaint with the Supervisory Authority

If you believe that the processing of your personal data by CONSEIL PARENT ELEVE FEDERATION CORNEC infringes applicable data protection regulations, you have the statutory right to lodge an official complaint with the French national supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France
Telephone: +33 (0)1 53 73 22 22 • Website: www.cnil.fr