Purpose and scope
The French Red Cross Foundation (hereinafter referred to as “FCRF” or “we”) is concerned about protecting the privacy of Internet users (hereinafter referred to as “users” or “you”) and is committed to ensuring the highest level of protection for the personal data you entrust to us.
The purpose of the present policy is to inform you of the manner in which we process the personal data that you provide to us and that we collect within the context of the use of our website fondation-croix-rouge.fr (hereinafter referred to as “our site”).
This document complies with current regulations applicable to data protection, and in particular the General Data Protection Regulation of April 27, 2016 and the amended Data Protection Act of January 6, 1978.
Purposes and basis for processing your personal data
We collect and process personal data about you for the purposes of :
- manage, process and follow up your requests for information and contact and provide you with a response;
- prospecting, building customer loyalty and communicating about our actions (newsletters, calls for donations, invitations to events, etc.);
- manage your relationship with us regarding donations, payments and tax receipts;
- manage and process your applications for jobs, internships and volunteer opportunities;
- manage and process your requests for partnership or sponsorship;
- manage and process your registration requests for online events (webinars, conferences);
- analyse your behaviour on our site and your browsing preferences in order to improve our online communication;
- to carry out studies and statistics concerning in particular the frequentation of our site or the navigation of the users of our site;
- manage, process and track your requests to exercise your data protection rights;
- comply with our legal and regulatory obligations resulting from our activities.
In view of the above purposes, the collection and processing of personal data is necessary:
- to pursue the legitimate interests of the FCRF in managing your relationship with us and processing your requests;
- to send you information about our actions, analyze your behavior and produce statistics about our site based on your consent;
- to carry out pre-contractual measures taken at your request as part of an application for a job, internship or volunteer position, or as part of a request for a partnership or sponsorship proposal;
- to comply with a legal obligation to which FCRF is subject.
Categories of personal data collected about you
The categories of personal data concerning you that may be collected on our site differ according to the purpose of the processing concerned:
Treatment purpose
Categories of data processed
Information and contact request
- Identification data: civil status, contact details
Prospecting, loyalty and communication campaigns
- Identification data: e-mail address
Managing your donations, payment and issuing tax receipts
- Identification data: civil status, postal address, email address
- Payment details: payment method, discount, credit card number, cheque number
- Transaction data
Manage online job, internship and volunteer applications
- Identification data: civil status, contact details
- Training information
- Professional information
Manage your online event registrations
- Identification data: civil status, contact details
Manage your partnership requests or sponsorship proposals
- Identification data: civil status, contact details
Improving our online communication and compiling site statistics
- IP address (if you agree to store a cookie on your equipment)
Managing requests to exercise rights
- Identification data: civil status, contact details
In the personal data collection forms on our site (request for information and contact), you are informed of the obligatory nature of the data collection by the presence of an asterisk. If you do not fill in a mandatory field, we will not be able to process your request.
Destination of your personal data
Your personal data is destined for the services and authorized persons of the French Red Cross Foundation.
Your personal data may also be communicated to service providers in order to carry out certain aforementioned purposes on our behalf. In this respect, it is specified that the latter :
- have limited access to your personal data, solely for the purpose of performing their services;
- have a contractual obligation to use them in accordance with our instructions and with the legal provisions on the protection of personal data;
- may be located outside the European Union, particularly in countries that do not provide an adequate level of data protection. These data transfers are covered by appropriate safeguards, and in particular by the signature of standard data protection clauses adopted by the European Commission.
In addition, we may disclose some of your personal data at the request of judicial, police or administrative authorities legally empowered to do so.
Storage period of your personal data
Purpose of treatment
Storage life
Information and contact request
Data kept for the time it takes to process your request, and for a maximum of 1 year from the date of your request, then deleted.
Prospecting, loyalty and communication campaigns
3 years from your last contact with the FCRF then deletion
Managing your donations, payment and issuing tax receipts
3 years from your last donation, then archived for 3 years
Manage online job, internship and volunteer applications
2 years then discontinued
Manage your online event registrations
1 year from event then discontinued
Manage your partnership requests or sponsorship proposals
- 3 years from the end of the contractual relationship in the case of a partnership or sponsorship with us
- 3 years from the last contact in the absence of a partnership/sponsorship agreement with us
Improving our online communication and compiling site statistics
13 months then discontinued
Managing requests to exercise rights
5 years from dispatch of reply then deletion
Data security
We are committed to ensuring the security of your data. To this end, we implement the appropriate technical and organizational measures to guarantee a level of security appropriate to the risk.
Our service providers are contractually bound to ensure the security and confidentiality of the personal data they process on our behalf.
Your data protection rights
In accordance with applicable data protection regulations, you have the right to access and rectify your data. In certain cases, you also have the right to have your data deleted, to restrict its processing and to have it ported. You also have the right to object to your personal data being processed for reasons relating to your particular situation, and the right to object to your data being used for prospecting purposes. Once your consent has been obtained, you can withdraw it at any time. Finally, you can define general directives concerning the fate of your personal data and the way in which you wish your rights to be exercised after your death.
To exercise your rights or for any information concerning the management of your data, please contact the French Red Cross Foundation :
- by e-mail at dpo@fondation-croix-rouge.fr
- by post to the following address :
Fondation Croix-Rouge française
21, rue de la Vanne
92120 Montrouge
You can also contact the Data Protection Officer by e-mail at dpo(at)fondation-croix-rouge.fr or by post at the above address.
Finally, you can submit a complaint to the French data protection authority (CNIL), either online or by post to the following address:
CNIL
3 Place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07
Updating this policy
This policy may change at any time. We invite you to consult it regularly in the dedicated section of our site.
You can also access them by clicking on the link on each data collection form on our site.
Last modified: 04/26/2022