Le Prix des Promesses d'Exil logo

Prix des Promesses

d'Exil

Data protection

Privacy policy

What data we gather, why, how long we keep it, and how to exercise your rights.

Last updated: 22 October 2026

Translation provided for information only. Only the French version is legally binding.

Back to the association

Data controller

The controller of the data collected on this site is the association Le Prix des Promesses d'Exil, whose registered office is at 11B chemin Jean François, Le Gonidec, 35740 Pacé, France.
Contact for any question concerning data: contact@leprixdespromessesdexil.fr.
The association has not appointed a data protection officer: such an appointment is not mandatory given its size and the nature of the processing carried out. Requests concerning data are handled directly by the association's management.

Where what you send us goes

Depending on the form, your information takes one of two paths. Most of it is recorded in the association's management tool, whose database is hosted in the European Union: memberships and the member register, event registrations, newsletter subscriptions, testimonies, expert network entries, reviews and member-area accounts. Phone numbers and postal addresses are encrypted there.
The contact form is the exception: what you write is not recorded in the database. It is emailed to the association's address and kept in that mailbox.
We ask only for what the association needs in order to work. Access is restricted to authorised members, and every creation, change or deletion made from the administration is logged. That matters when the people concerned are vulnerable.

Data collected and purposes

Data is collected only when you fill in a form. Nothing is collected without your knowledge.
  • Contact form — name, email address, message. Purpose: to answer your request. Legal basis: the association's legitimate interest in handling the requests addressed to it.
  • Newsletter — email address. It is recorded only after you confirm it from the link we send you. Purpose: sending you the association's news. Legal basis: your consent, which you can withdraw at any time from the unsubscribe link in every mailing.
  • Membership request — the information entered in the membership form (identity, contact details, option chosen and answers to the consent boxes). It is stored in our own membership-management tool, hosted in the European Union; the phone number and postal address are encrypted there. Purpose: to process and manage your membership. Legal basis: performance of the membership contract and the legal obligation to keep a register of members.
  • Membership subscription — payment is made through PayPal (PayPal account or bank card via PayPal): your card details are processed by PayPal and never pass through the association. We receive only the confirmation of payment, its amount and its reference. Purpose: to collect the subscription and keep the accounts. Legal basis: performance of the membership contract and accounting obligations.
  • Event registration — name, email address, phone number, number of places, optional message. The registration is recorded in order to keep the list of participants and, where applicable, the waiting list. Purpose: organising the event. Legal basis: your consent.
  • Donation — payment details are entered directly with PayPal and never pass through our servers. We receive only the confirmation of payment. Purpose: to issue the tax receipt. Legal basis: legal obligation.
  • Sending a testimony — the account itself, its title, its section, your name or your choice of anonymity, your email address and the consents you tick. Nothing is visible on the site before the association has read and published it. If you choose anonymity, no name is kept. Purpose: publishing accounts on the page “Exile, our shared stories”. Legal basis: your consent.
  • Joining the expert network — name, field, presentation, email address, and if you wish your organisation and a portrait. You are asked for three separate agreements: publishing the entry, naming your organisation, showing your email address. Without your agreement the organisation is not kept and the address is not shown. Purpose: maintaining the network's public directory. Legal basis: your consent.
  • Reviews — the name you choose to display, a rating and your text. Nothing is published before it has been read. Purpose: publishing reviews on the site. Legal basis: your consent.
  • Member area — email address and password, never kept in the clear, together with your open sessions (date, device, IP address), which you can close yourself from your profile. Purpose: giving you access to your membership, your registrations and your receipts. Legal basis: performance of the membership contract.
  • Protecting the forms — your IP address is recorded with a testimony, an expert entry or a review, and is used to limit how many times one connection can submit. Purpose: preventing automated submissions and abuse. Legal basis: the association's legitimate interest in protecting its forms.
We never ask you for sensitive data within the meaning of Article 9 of the GDPR. A testimony, however, may contain such data by its very nature: send only what you are willing to see published, and choose anonymity if you have the slightest doubt.

Recipients and processors

Your data is accessible only to authorised members of the association. It is never sold, rented or exchanged. The following technical providers are involved:
  • Vercel Inc. (United States) — hosting of the site and storage of the expert network's portraits.
  • Neon (hosted in the European Union, Frankfurt) — the association's database: memberships, member register, registrations, testimonies, expert entries, reviews and member-area accounts.
  • Google Ireland Limited — delivery, through Gmail, of the emails generated by the forms.
  • PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) — processing of donations and membership subscriptions. Card details are processed by PayPal, never by the association.
  • Cloudflare, Inc. (United States) — anti-robot check on the public forms and on member-area sign-in (Turnstile).
  • Google Ireland Limited — audience measurement for the site (Google Analytics), only if you have consented to it.
  • Google Ireland Limited — display of maps and route planning (Google Maps).
Some of these providers are established outside the European Union. Transfers are made on the basis of the European Commission's standard contractual clauses or of the EU–US Data Privacy Framework.

Retention periods

  • Contact requests — kept for as long as it takes to handle them, then deleted from the mailbox within 12 months.
  • Newsletter — until you unsubscribe.
  • Memberships — for the duration of the membership, then according to the applicable accounting and association-law obligations.
  • Event registrations — kept until the event, then for as long as it takes to close its accounts and report on it.
  • Donations — supporting documents are kept for the period required by accounting and tax obligations.
  • Testimonies — once published, a testimony stays up until you ask for it to be taken down. A testimony the association does not publish is deleted.
  • Expert network entries — for as long as the entry is online. Deleting it also deletes the portrait that goes with it.
  • Reviews — until you ask for yours to be taken down.
  • Member area — for as long as the account exists. Deleting it erases credentials, password and sessions; the membership, the payments and the tax receipts are kept, as accounting obligations require.
  • IP addresses — the counters used to limit submissions are purged daily; an IP address attached to a testimony, an entry or a review is deleted along with it.

Cookies and trackers

The site places no advertising cookies and carries out no profiling for commercial purposes. A single tracker is subject to your consent, and it is placed only if you accept it.
  • Audience measurement (Google Analytics) — pages viewed, where you came from, type of device. No request is sent to Google and no cookie is placed until you have accepted through the banner shown on your first visit. This data is processed by Google and may be transferred outside the European Union.
  • Mapping (Google Maps) — the maps embedded in the association and event pages are provided by Google. Displaying them sends your IP address to Google, which may place its own cookies; this data may be transferred outside the European Union. The “Directions” button opens Google Maps in a new tab.
  • Technical cookies — only strictly necessary cookies are set: the running of the site, the anti-robot check on the forms, your member-area session if you sign in, and payment through PayPal when you donate or pay your subscription. They are exempt from consent.
Your choice is kept for six months, after which the question is asked again. Refusing is as simple as accepting and changes nothing about your browsing. You can change your mind at any time by clicking “Manage cookies” in the footer of any page of the site.

Your rights

In accordance with the General Data Protection Regulation and the French Data Protection Act, you have the rights of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to give instructions as to what becomes of it after your death.
To exercise them, write to contact@leprixdespromessesdexil.fr or to the postal address of the registered office. You will receive an answer within one month. Proof of identity may be requested if there is reasonable doubt as to who you are.
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL).

Security

The site is served entirely over HTTPS. Exchanges between your browser and our providers are encrypted. Access to the association's mailbox is restricted to authorised members.
Member-area passwords are never kept in the clear. Phone numbers and postal addresses are encrypted in the database. Operations carried out from the administration are logged, and sign-in attempts are rate-limited.
Given the vulnerability of the people the association supports, we ask you not to send sensitive information through a form. For a confidential exchange, a phone call is better.

Changes to this policy

This policy may be updated to reflect changes to the site or to the applicable rules. The date it was last updated appears at the top of the page.
See also our legal notice.