ARTS PASSANTS & ITINÉRANTS (A.P.I.), a registered association, places great importance on the protection of your personal data and is committed to processing it in accordance with the General Data Protection Regulation (GDPR—EU Regulation 2016/679) and the French Data Protection Act.

1. Data Controller

The data controller is the A.P.I. association, whose legal notices can be viewed on the “Legal Notices” page of this website (see the website footer).

No sensitive data is processed on a systematic basis. The association does not have a designated Data Protection Officer (DPO), as data processing remains limited.

2. Data Collected and Purposes

We collect and process your personal data in the following cases:

- Contact form: last name, first name, email address, message (and possibly phone number).

Purpose: to respond to your request. Legal basis: legitimate interest or consent, depending on the context.

- Newsletter subscription: email address.

Purpose: to send information about the association’s activities. Legal basis: consent (you can unsubscribe at any time via the link included in each email).

- Member portal: last name, first name, email address, login credentials (and possibly mailing address or phone number if you provide them).

Purpose: managing membership and providing access to member-only services. Legal basis: performance of the membership agreement.

- Event registrations: last name, first name, email address, and, if applicable, other information necessary for organization (dietary restrictions, etc.).

Purpose: managing registrations and organizing events. Legal basis: consent or performance of pre-contractual measures.

- Google Analytics (and audience measurement cookies): browsing data (pages viewed, duration of visit, anonymized IP address, etc.).

Purpose: statistical analysis of the website’s audience and improvement of its services. Legal basis: consent (for non-essential cookies).

We do not collect sensitive data (ethnic origin, political opinions, health data, etc.) unless you voluntarily provide it in a message or registration form (in which case, we process it only with your explicit consent).

3. Recipients of the Data

Your data is intended for the ARTS PASSANTS & ITINÉRANTS (A.P.I.) association and its authorized volunteers.

It may be shared with processors (technical service providers) strictly within the scope of the purposes outlined above, including:

- Wix (website hosting and forms)

- Google (Analytics and any email services)

- Newsletter distribution provider (if applicable)

These processors act on our instructions and are bound by confidentiality and security obligations.

No data is transferred outside the European Union, except via Google Analytics (United States). In this case, appropriate safeguards are in place (European Commission’s Standard Contractual Clauses or Privacy Shield, if applicable).

4. Retention Period

- Contact and newsletter data: up to 3 years after the last contact or until you withdraw your consent.

- Membership data: for the duration of membership plus a maximum of 5 years after its termination (for administrative or legal reasons).

- Event registration data: 1 year after the event (unless required by law).

- Browsing data (Analytics): up to 14 months.

5. Your Rights

In accordance with the GDPR, you have the following rights:

- Right of access, rectification, and erasure of your data

- Right to restrict processing

- Right to object (including to processing for marketing purposes)

- Right to data portability

- Right to withdraw your consent at any time (for processing based on consent)

- Right to provide instructions regarding the handling of your data after your death

To exercise these rights, contact us at: contact@associationapi.fr.

We will respond within one month (which may be extended in complex cases). You may also file a complaint with the CNIL (www.cnil.fr) (www.cnil.fr).

6. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

7. Policy Updates

This policy may be amended to reflect changes in the law or changes in our data processing practices. We encourage you to review it regularly.