1. Identity of the Data Controller
The controller responsible for the processing of personal data on this website is:
Entity: C A P R A CENTRE ARCHEOLOGIE PREHISTORIQUE DU RHONE ALPES
Legal Status: Non-profit association (Association Loi 1901) • RNA W263000318 • SIREN 329 153 118
Address: CHEMIN DES ILES, LOT ESPACE L'ILE GIRODET, 26500 BOURG-LES-VALENCE, FRANCE
Data Protection Officer (DPO) Contact: jakiyaliskam@gmail.com | Tel: +33 2 73 32 40 52
2. Scope of Personal Data Collected
In strict adherence to the data minimization principle (Article 5.1.c of the GDPR), CAPRA collects only the personal information strictly necessary to process your voluntary inquiries and volunteer applications:
- Public Contact Form (contact.php): Name, email address, topic category, and user-provided inquiry message. This data is collected solely to answer questions regarding our public educational activities, site reports, and research archives.
- Volunteer Registration Form (volunteer.php): Name, email address, telephone number, preferred areas of volunteering (field, laboratory, education, archiving), general availability, and self-described motivation. This information is processed exclusively to coordinate volunteer onboarding and orientation sessions.
- Technical Server Logs: Standard web server connection records (IP address, date/time stamp, requested URL, user agent) collected temporarily by our web hosting provider to ensure server stability, prevent cyber intrusions, and maintain diagnostic logging.
3. Absolute Absence of Commercial Tracking & Third-Party Cookies
Our non-profit portal operates on a privacy-by-design architecture:
- Zero Commercial Ad Trackers: We do not embed Google AdSense, Facebook Pixel, commercial tracking beacons, behavioral retargeting scripts, or cross-site fingerprinting software.
- Zero Data Brokerage: We never sell, exchange, rent, or transfer personal records to marketing agencies, financial institutions, or commercial entities under any circumstances.
- Essential Technical Operation Only: Any cookies utilized on this portal are strictly technical and ephemeral (session cookies required for form security and anti-CSRF token verification), exempt from prior consent pursuant to CNIL guidelines.
4. Data Retention Periods & Storage Security
Personal data submitted via our contact and volunteer forms is retained only for the duration necessary to accomplish the intended purpose:
- General Inquiries: Retained for a maximum of twelve (12) months following the final response, after which emails are permanently purged from our administrative inbox.
- Volunteer Applications: If a volunteer becomes an active member, their contact information is retained within our internal member directory for the duration of their association participation. If an applicant decides not to proceed, their application is deleted within six (6) months.
- Security Measures: Data is accessed exclusively by designated volunteer officers via encrypted connections (HTTPS/TLS) and secured with two-factor authentication on administrative accounts.
5. Your Rights Under the GDPR
Under European Union regulations, every citizen whose data is processed by CAPRA enjoys full legal rights:
- Right of Access (Article 15): You have the right to request a complete copy of any personal information held by our association.
- Right to Rectification (Article 16): You may request the immediate correction of inaccurate, outdated, or incomplete data.
- Right to Erasure / "Right to Be Forgotten" (Article 17): You may demand the complete deletion of your personal records from our databases at any time without justification.
- Right to Restriction of Processing (Article 18): You may request temporary suspension of data processing while a verification dispute is resolved.
- Right to Object (Article 21): You may object at any time to receiving volunteer notices or newsletters.
To exercise any of these rights, simply email our Data Protection Officer at: jakiyaliskam@gmail.com or write to our registered headquarters in Bourg-lès-Valence. Your request will be fulfilled within thirty (30) days without charge.
If you believe after contacting us that your data protection rights have not been respected, you have the right to lodge a formal complaint with the French Data Protection Authority: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy, 75007 Paris, France (www.cnil.fr).