Privacy Policy & GDPR Data Protection Charter

EVREUX ETUDIANTS CERCLE places the highest value on the confidentiality, security, and integrity of the personal data entrusted to us by our players, youth members, parents, and volunteers. In strict conformity with Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 (General Data Protection Regulation - GDPR) and the French Data Protection Act (Loi Informatique et Libertés), this policy explains our data stewardship practices:

1. Data Controller Identification

The data controller responsible for personal information processed through this website and our association records is:
EVREUX ETUDIANTS CERCLE (Non-Profit Sports Association - Loi 1901)
RNA: W273000309 | SIREN: 381519156
Registered Headquarters: GYMNASE, RUE DU CANADA, 27000 EVREUX, FRANCE
Data Protection Delegate / Contact: khatunqomola@gmail.com | Telephone: +33870981626

2. Categories of Personal Data Collected

We collect only data strictly necessary for our public interest sporting and civic missions:

• Inquiry & Contact Information: Full name, email address, telephone number, and subject message submitted through our website contact form.
• Volunteer & Member Applications: Full legal name, contact information, chosen volunteer track, availability windows, athletic background, and safeguarding consent.
• Technical Access Records: Standard non-tracking server access logs (timestamp, HTTP status code, request URL) utilized strictly for cyber-security and server reliability.

3. Legal Bases & Non-Commercial Purpose of Processing

All personal data processing is performed under Article 6 of the GDPR based upon:

• User Consent (Art. 6(1)(a)): Given explicitly when submitting forms on this website.
• Contractual & Membership Fulfillment (Art. 6(1)(b)): Necessary to register participants, provide insurance coverage, and organize training schedules.
• Legitimate Non-Profit Community Interests (Art. 6(1)(f)): Conducting day-to-day administrative operations and volunteer coordination.

We strictly guarantee that your personal data is never sold, leased, rented, or transferred to commercial brokers, advertisers, or corporate entities.

4. Data Retention Timelines

Data is retained only as long as necessary for administrative and statutory compliance:

• Electronic Inquiries: Stored for a maximum of 12 months following resolution of the request, then permanently purged.
• Active Membership Records: Retained for the duration of association affiliation plus 3 years for statutory verification and insurance audit compliance.
• Financial & Subsidy Accounting Receipts: Retained for 10 years in compliance with French public accounting standards.

5. Your Rights Under European Law

Under the GDPR, you have the full right to:

• Access: Obtain confirmation and copies of your personal data held by the association.
• Rectification: Request prompt correction of inaccurate or outdated information.
• Erasure ("Right to be Forgotten"): Request deletion of personal records, subject to statutory sports federation or audit obligations.
• Restriction & Objection: Limit or object to specific processing activities.
• Data Portability: Receive your data in a structured, standard electronic format.

To exercise any of these rights, email our Data Protection team at khatunqomola@gmail.com. If you believe your data rights have not been respected, you have the right to lodge a formal complaint with the French supervisory authority: CNIL (Commission Nationale de l'Informatique et des Libertés) at cnil.fr.