1. Definitions

The purpose of this policy is to define the way in which personal data collected on the site change-europe.eu and change-europe.com, hereinafter "The Site". The terms listed below have the following definition:

• Site Managers: All people working on the development of the website and having legitimate access to the database, granted by Pierre SCHWARZ
• Occasional contact: refers to any person contacted or who occasionally contacts the Site Managers without maintaining regular exchanges with them;
• Regular contact: means any person who responds favorably to a contact request from the Site or who takes a positive step with them with a view to maintaining regular exchanges directly linked to their political action;
• Donor: designates any person who makes a donation (one-off or repeated) for the benefit of a partner association of this site and a list of which is available in the appendix;
• DPO: designates the Data Protection Officer, responsible for advising and monitoring the data controller with regard to the protection of personal data. Personal data or Data: designates any information making it possible to directly or indirectly identify a natural person collected and/or processed by "The Site" as part of its activities;
• Elected official: Person with a current national or European elective mandate;
• Former elected official: Person having held at least one national or European elective mandate;
• Partners: designate the service providers, particularly IT providers, who process Personal Data on behalf of the Site within the framework of a service provision contract and the associations, with which it collaborates in order to achieve a common goal;
• Associations: designates the Site's partner associations having the common objective of achieving its goal;
• The financing association: designates the national organization responsible for collecting donations from Donors.
• Data Controller: designates the legal entity which determines the purposes and means of processing Data. GDPR: means the General Data Protection Regulation and designates EU Regulation 2016/679 of April 27, 2016;
• Site: designates the website accessible at the address change-europe.eu and any other domain name pointing to the same site .;
• Sympathizer: refers to any natural person who shares the principles set out on the Site and who has registered on the Site via the form available on the Site;
• Processing: means any operation or set of operations, whether or not carried out using automated processes and applied to personal data or sets of data, such as collection, recording, organization , structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, reconciliation or interconnection, limitation , erasure or destruction;
• User: means any person having access and/or using the Site, including any Service accessible to the User, whether they have created a Personal Account or not.
• Personal data breach: means the breach leading, accidentally or unlawfully, to the destruction, loss, alteration, unauthorized disclosure of personal data transmitted, stored or otherwise processed , or unauthorized access to such data.

2. Purposes and legal bases of Data processing

The information collected is recorded in a computer file by the Site. Personal Data concerning you will be processed in particular for the following purposes and on the following legal bases:

• The processing of requests for contact and information sent by Occasional Contacts and Regular Contacts: these processing operations are based on the consent of the person concerned;
• Management of the Association's regular Contacts: the legal basis for this processing is the consent of the person to become a regular contact;
• Management of occasional Contacts with Associations: the legal basis for this processing is the legitimate interest of Associations in prospecting contacts and new Sympathizers;
• The management of communication operations, political prospecting, electoral propaganda, organization of events (including the candidate(s) that the site supports during an election and its partners), whatever the means of communication used (in particular telephone, e-mail, mail, SMS, MMS): the legal basis for this processing is the consent of the person when they are a regular contact or their acceptance during their registration and their status until modification when she is sympathetic;
• Management of the Site's relationship with its Supporters: the legal basis for this processing is the information explicitly accepted during their registration and the Site's legitimate interest in maintaining an ongoing relationship with its Supporters;
• The management of operations linked to financing, in particular the processing of donations: the legal basis for such processing is based on the legal obligation to provide Donors with a tax receipt and to keep Data relating to Donors, as proof and 'legitimate interest of the Site to carry out prospecting with a view to its financing;
• The referencing of events implemented by the Site's local teams and associations: these treatments are based on the consent of the individuals.
• The management of prospecting in order to give the Financing Association: the legal basis for such processing is consent;
• In any case, the Site, as a political site, is authorized to process Data concerning you and likely to reveal your political opinions under article 9.2.d of the GDPR allowing the processing of such Data when they relate to Sympathizers and regular Contacts of the Site. Whenever processing is carried out due to the consent of the data subjects, the latter have the right to withdraw it at any time by sending their request to the address rgpd@change-europe.eu.

3. Duration of retention of Personal Data

In accordance with the regulations in force, the Site retains Personal Data for the period strictly necessary to achieve the purposes of the processing, unless the Supporter, the User, or the regular/occasional Contact has authorized The Site to retain its Data for later use. The duration of Data retention by the Site varies depending on the purposes of the processing implemented.

• For the management of Supporters, Regular Contacts and Occasional Contacts and the communication, political prospecting, electoral propaganda and event operations of the Site and Associations: Personal Data concerning you may be kept until withdrawal of your consent when you are a Regular Contact or Supporter or (ii) up to (3) three years from the last contact at your initiative when you are an Occasional Contact.
• The management of operations linked to the financing of the Financing Association, in particular the processing of donations: the personal data concerning you may be kept as proof, for the entire duration of the legal limitation period relating to the obligations in accounting and tax matters as well as political financing.
• For the management of participation in petitions and consultations: Data concerning participants may be kept for up to 6 months from the end of the petition or consultation.
• For operations related to the referencing of events implemented by The Site and its local teams and associations: the Data of the persons concerned may be kept until their consent is withdrawn.
• For operations linked to electoral campaign operations: unless otherwise agreed by the regular or occasional Contact, the Data concerning him will be deleted within six months following the end of the campaign, subject to longer limitation periods for any action relating to litigation.

4. Communication of Personal Data

Information relating to Sympathizers, and all other regular and occasional Contacts may be communicated to the following people:

• The Site Managers who, due to their responsibilities, are authorized to manage this processing;
• Members of local and national committees and volunteers who may be required to process Personal Data of the people concerned in their territory, as part of missions that the Site, the Site Managers or the Associations have entrusted to them or special events;
• The candidates supported by the Site during an election, as well as their campaign teams authorized to manage this processing;
• The teams of the Site's Partner associations which may be required to process Personal Data in the context of specific missions or events related to its purpose. When you are elected;
• The service providers responsible for carrying out Personal Data processing operations on behalf of the Site, who are subject to confidentiality and security obligations. These are our IT service providers, storage, recruitment, telephone communication, electronic communication and Data management.

5. Transfer of Personal Data outside the European Union

Some of our partners may have activities in countries located outside the European Union, in particular for the purposes of hosting Personal Data. In this case, the Site and the Associations and Site Managers undertake to respect the appropriate guarantees set out by the GDPR (transfer to a country with an adequacy decision from the European Commission, adoption of standard contractual clauses, or binding corporate rules, implementation of a code of conduct, without this list being exhaustive).

6. Your rights

In accordance with the regulations in force, you have a right of opposition and a right to limit the processing of Personal Data concerning you, as well as a right of access, rectification, portability and erasure thereof. You also have the right to withdraw your consent at any time when your Personal Data has been collected on such a basis and to give instructions to the Association on the fate of your Personal Data after your death. You can exercise your rights directly by sending us your request to the postal address Pierre SCHWARZ, 3 rue Surrerie, 36100 Issoudun, or to the electronic address rgpd@ change-europe.eu. Finally, if the Site does not meet your request, you have the right to lodge a complaint with a personal data protection authority, namely the National Commission for Informatics and Liberties (CNIL).