Privacy policy — ARD Rosso

Data controller

The Association des Rossossois de la Diaspora (ARD), 21 avenue du Président Salvador Allende, 93000 Bobigny, France — SIREN 890 763 584 — is the controller for the processing described here. Contact: assodiaspo.rosso@gmail.com.

This policy applies to the website ard-rosso.org, in French and in English. It describes the site as it is actually configured: what is not listed here is not collected.

What we collect, and why

Membership request and newsletter

The “Join” form is a Brevo form. It collects: surname, first name, e-mail address, country, city, occupation, your goals and expectations, and a telephone number. This data is used to handle your membership request and to get back to you (the association’s legitimate interest in answering a request you made). If you tick the corresponding box, it is also used to send you our newsletter (consent, which you can withdraw at any time through the unsubscribe link in every message).

After submission you are taken to a confirmation page; the site itself keeps no data from the form.

Comments on articles

When you comment on an article, we record your name, e-mail address, the comment, your IP address and your browser identifier (to prevent abuse). The name and the comment are published after moderation; the e-mail address never is. If you tick “Save my name…”, cookies keep this information for one year for your next comments. An avatar may be requested from the Gravatar service using a hashed fingerprint of your e-mail address.

Donations

Online donations are made on the PayAsso platform, in a new tab. Your details and payment data are processed there by PayAsso under its own privacy policy; ard-rosso.org has no access to them and stores no banking data. For donations by post, your details are used to thank you and to issue a receipt.

Audience measurement

With your consent, given in the cookie banner, we use Google Analytics 4 (measurement ID G-V1FEPH4FV1) to understand how pages are visited: page views, duration, device type, country. Google Analytics 4 does not retain IP addresses. Until you accept, no measurement script is loaded. You can withdraw your consent at any time via “Cookie preferences”.

Interactive map

The home page displays a map of Rosso provided by OpenStreetMap (OpenStreetMap Foundation, United Kingdom). Loading it transmits your IP address and your browser’s characteristics to OpenStreetMap’s servers, as with any image loaded from a third-party site. The map sets no tracking cookie.

Technical logs

Like any web server, ours — a virtual private server hosted by IONOS, in Europe — automatically records the IP address, date, requested page and browser used. These logs are used for security and troubleshooting (legitimate interest). They are kept for one year at most.

Cloudflare proxy: performance and security

The site sits behind Cloudflare’s network, which relays every request between your browser and our server. Cloudflare speeds up display by serving images, style sheets and scripts from the data centre closest to you, encrypts exchanges over HTTPS and protects the site against denial-of-service attacks, malicious bots and intrusion attempts.

To do so, Cloudflare processes your IP address, the address of the requested page and your browser’s technical headers, and may set cookies that are strictly necessary for security (see the list below). These cookies contain only a technical token; they are used neither to identify you nor to track you from one site to another. Legal basis: our legitimate interest in keeping the site available and secure. Cloudflare keeps its technical logs for a limited period, under its own privacy policy.

Language preference

The site exists in French and in English. A technical cookie remembers the language you chose so that it is shown on your next visit.

Cookies

These are the cookies the site may set. “Necessary” cookies do not require consent; audience-measurement cookies are only set after you agree.

pll_language (Polylang) — remembers the displayed language — 1 year — necessary
bs_cookie_settings — remembers your cookie choices — 182 days — necessary
__cf_bm, cf_clearance, __cfruid, _cfuvid (Cloudflare) — security: telling human visitors from bots, remembering a passed security check, rate limiting — session to 30 minutes (cf_clearance: 30 minutes to 1 year depending on the security level) — necessary
cf_use_ob, cf_ob_info (Cloudflare “Always Online”) — display of a cached copy if the server is temporarily unavailable — 30 seconds — necessary
wordpress_test_cookie, wordpress_logged_in_*, wordpress_sec_*, wp-settings-*, wp-postpass_* — WordPress operation (test, session and preferences of logged-in contributors, protected posts) — session to 1 year — necessary
comment_author_* — your details for your next comments, if you asked for it — 1 year — at your request
_ga, _ga_V1FEPH4FV1 (Google Analytics 4) — audience measurement — 2 years — after consent

You can change your choices at any time via “Cookie preferences”, at the bottom of every page, or delete cookies from your browser settings. Refusing audience-measurement cookies does not affect browsing in any way.

Recipients and providers

Your data is accessible only to the members of the association who need it (handling memberships, moderation). It is processed on our behalf by providers bound by contract:

Brevo (Sendinblue SAS, Paris) — membership form and newsletter — data hosted in the European Union;
Google Ireland Ltd (Google Analytics) — audience measurement, after consent — transfers to the United States covered by the EU–US Data Privacy Framework;
IONOS SARL (Sarreguemines, France) — hosting of the virtual private server, physically located in Europe; storage and technical logs;
Cloudflare, Inc. (San Francisco, USA) — content delivery network, HTTPS encryption and protection against attacks, as a processor; Cloudflare is certified under the EU–US Data Privacy Framework and is bound by standard contractual clauses; requests pass through the Cloudflare data centre closest to the visitor;
OpenStreetMap Foundation (United Kingdom, recognised as adequate by the European Union) — home-page map;
PayAsso — online donations, as controller of its own processing.

We neither sell nor rent your data, and we do not pass it on to any other third party unless required by law.

Retention periods

Membership requests: for the duration of membership, then three years after the last contact;
Newsletter: until you unsubscribe;
Comments: as long as the article is online, unless you ask for deletion;
Audience measurement: fourteen months at most, in aggregated form;
Technical logs: one year at most on our server; limited period at Cloudflare;
Cookies: see the periods listed above.

Security

The site is served over HTTPS and sits behind the Cloudflare proxy, which filters malicious traffic (web application firewall, protection against denial-of-service attacks, bot detection) before it reaches our IONOS server; access to the administration is restricted, accounts are protected and extensions are kept up to date. Membership data is processed by a provider established in Europe. As no measure is infallible, please do not send through the form any sensitive information that is not requested.

Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to set instructions about your data after your death.

To exercise them, write to assodiaspo.rosso@gmail.com or to the association’s registered office. We reply within one month; if there is any doubt about your identity, proof may be requested. If you believe your rights are not respected, you may lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr).

Minors

The site is not aimed at children under fifteen and does not knowingly collect their data. If you believe a minor has sent us information, contact us: we will delete it.

Changes

This policy may evolve with the site. The date of the last update is shown at the top of the page; in the event of a significant change, we will let you know through a visible notice on the site. See also our legal notices.