Privacy Policy


1. DATA CONTROLLER

The controller responsible for processing the data collected on this site is

the association Gandhi International, whose registered office is located at

37 rue de la Concorde, 11000 Carcassonne.

For any question regarding your data:

christophe@gandhiinternational.org]

2. WHAT DATA IS COLLECTED, AND WHY

The site collects personal data ONLY in two cases:

a) Contact form

- Data: your name, your e-mail address, your message.

- Important: this information IS NOT stored on the

site. It is sent directly by e-mail to

the association, for the sole purpose of processing your request and

responding to it.

b) Newsletter subscription

- Data: your e-mail address.

- Purpose: to send you the association's newsletters.

- Registration is done by double confirmation: you receive a

validation e-mail and must click on the link to confirm

your subscription (you are not registered until you have

confirmed).

The site does not create any visitor account, does not profile

visitors and does not collect any other personal data.


3. LEGAL BASIS FOR PROCESSING

- Newsletter subscription: your CONSENT (which you confirm

through double opt-in and may withdraw at any time).

- Contact form: the LEGITIMATE INTEREST of the association in

responding to requests addressed to it.

4. RECIPIENTS AND PROCESSORS

Your data is never sold or transferred to third parties.

It may be processed by our technical service providers:

- Brevo (Sendinblue SAS): management of newsletter sending.

- Infomaniak Network SA (Switzerland): website hosting and

e-mail delivery.


5. RETENTION PERIOD

- Contact form messages: they are not stored on the

site. Sent by e-mail, they are kept in the association's

mailbox until the person unsubscribes from the Newsletter

- Newsletter subscription addresses: kept until your

unsubscription.

- Technical anti-abuse data from the newsletter form

(see section 8): kept for only a few hours, then

automatically deleted.


6. YOUR RIGHTS

In accordance with the General Data Protection Regulation

(GDPR), you have the following rights over your data: access,

rectification, erasure, objection and portability.

To exercise these rights:

christophe@gandhiinternational.org

You may also lodge a complaint with the CNIL

(French Data Protection Authority): www.cnil.fr


7. UNSUBSCRIBING FROM THE NEWSLETTER

Each newsletter sent contains an unsubscribe link. You

may unsubscribe at any time, immediately and without

justification.


8. COOKIES

The site uses ONLY cookies that are strictly necessary for its

operation:

- a language preference cookie (kept for one year), which remembers

your choice between French and English;

- a technical session cookie (for the duration of your browsing session),

used for the security of forms (administration area,

contact, subscription).

No audience measurement, advertising or tracking cookie is

set. These strictly necessary cookies do not require your

consent, and no cookie banner is therefore displayed.

(Factual information, based on how the site operates.)

9. PROTECTION OF THE NEWSLETTER FORM

In order to prevent abuse of the subscription form (mass sending

of confirmation e-mails to third parties), your IP address is

stored in PSEUDONYMISED form (transformed through a hashing

process, never kept in plain text) for a short period. This

data is used solely to limit the number of requests and is

automatically deleted after this period.