Privacy Policy & Data Protection Safeguards

SECTION 01

1. Identity of the Data Controller

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the amended French Data Protection Act (Loi n° 78-17 du 6 janvier 1978 relative à l'informatique, aux fichiers et aux libertés), the data controller responsible for personal information processed on this portal is:

SECTION 02

2. Principles of Data Minimization & Absolute Non-Commercialization

As a statutory non-profit entity, Moto Club de Dreux adheres to the strict principle of data minimization. We only collect personal data when community members voluntarily transmit information via our public inquiry and volunteer application forms.

Strict Non-Commercial Guarantee: We do not sell, rent, lease, exchange, or monetize personal information under any circumstance. We deploy zero third-party commercial advertising tracking networks or biometric data capture tools. Your information is utilized exclusively for non-profit administrative communication, safety event coordination, and volunteer scheduling.

SECTION 03

3. Categories of Personal Data Collected

The information collected through our institutional portal is limited strictly to:

• Identification Data: Full legal name, title, and contact coordinates.
• Communication Coordinates: Verified email address and optional telephone number.
• Civic Profile Information: Volunteer areas of interest (e.g., safety marshal, youth mechanic, sidecar pilot) and self-declared motivation.
• Administrative Inquiry Details: Subject of inquiry and specific messages submitted via our public desk.

SECTION 04

4. Legal Bases & Purposes of Processing

Personal data is processed in accordance with Article 6 of the GDPR under the following statutory grounds:

• Legitimate Public Interest & Association Management (Art. 6(1)(f) GDPR): Organizing non-profit road safety clinics, coordinating community group rides, managing volunteer assignments, and responding to citizen inquiries.
• Explicit Consent (Art. 6(1)(a) GDPR): Processing volunteer applications and inquiries voluntarily submitted by individuals with explicit acknowledgement of our non-profit charter.
• Statutory Compliance (Art. 6(1)(c) GDPR): Maintaining required administrative registers of association members and prefectural event filings.

SECTION 05

5. Data Retention Schedules

Moto Club de Dreux enforces clear data retention limitations:

• Public Inquiries & Messages: Retained for a maximum period of twenty-four (24) months following resolution of the inquiry, after which records are permanently purged.
• Volunteer Applications: Retained for the duration of the volunteer's active engagement plus three (3) years to comply with statutory civil liability limitation periods. Inactive applications are deleted after twelve (12) months.
• Member Statutory Registers: Retained in accordance with French non-profit archival standards for prefectural verification.

SECTION 06

6. Your Statutory Rights Under the GDPR

Under Chapter III of the GDPR and French law, you hold comprehensive rights regarding your personal information:

• Right of Access (Art. 15 GDPR): You may request full confirmation and a copy of all personal data held concerning you.
• Right to Rectification (Art. 16 GDPR): You have the right to request prompt correction of inaccurate or incomplete information.
• Right to Erasure (Art. 17 GDPR): You may request permanent deletion of your records ("right to be forgotten") when data is no longer necessary for association missions.
• Right to Restriction of Processing (Art. 18 GDPR): You may request temporary suspension of data processing during verification procedures.
• Right to Object (Art. 21 GDPR): You may object at any time to the processing of your data for legitimate association interest purposes.

To exercise any of these rights, please send a written request accompanied by proof of identity to our Data Protection Liaison at rimakhan58484@gmail.com or by postal mail to: MOTO CLUB DE DREUX, FMPI, 25 RUE ANDRE RAVALEE, 28100 DREUX. We guarantee a formal response within thirty (30) days.

SECTION 07

7. Right to Lodge a Complaint with the CNIL

If, after contacting our secretariat, you believe that your personal data rights have not been respected, you possess the legal right to lodge an official complaint with the French national supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
Website: www.cnil.fr