Privacy policy
ARTICLE 1: INTRODUCTION
This privacy policy is intended to inform users of the website www.life-ong.org
About how their personal data is collected. Personal data means any information that can identify a user. This may include, for example, their first name and surname, age, postal or email address, location or IP address (this list is not exhaustive);
About the rights they have over this data;
About the person responsible for processing the personal data collected and processed;
About who receives this personal data;
About the website's cookie policy.
ARTICLE 2: PRINCIPLES GOVERNING THE COLLECTION AND PROCESSING OF PERSONAL DATA
In accordance with Article 5 of European Regulation 2016/679, personal data shall be:
Processed lawfully, fairly and transparently in relation to the data subject;
Collected for specified (see Article 3.1 below), explicit and legitimate purposes, and not further processed in a manner incompatible with those purposes;
Adequate, relevant and limited to what is necessary for the purposes for which they are processed;
Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay;
Kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the data is processed;
Processed in a manner that ensures appropriate security of the data collected, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Processing is lawful only if, and to the extent that, at least one of the following conditions is met:
The data subject has given consent to the processing of their personal data for one or more specific purposes;
Processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the data subject's request prior to entering into a contract;
Processing is necessary for compliance with a legal obligation to which the data controller is subject;
Processing is necessary to protect the vital interests of the data subject or of another natural person;
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
Processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED WHEN YOU BROWSE THE WEBSITE
Article 3.1: Data collected
The personal data collected in the course of our activities is as follows:
identity, postal address, browsing data, IP address, telephone number
The collection (telephone number) and processing of this data serve the following purpose(s):
| Data controller | Legal basis | Retention period | Data recipients | Transfers outside the EU |
|---|---|---|---|---|
| LIFE | Art 6.1.f - legitimate interest of the data controller | 2 years in the active database from the end of the fundraiser created | The data controller | We process your data in our CRM, operated by our processor Zoho Corp., based in the United States. |
Managing comments on fundraisers
| Data controller | Legal basis | Retention period | Data recipients | Transfers outside the EU |
|---|---|---|---|---|
| LIFE | Art 6.1.b - necessary for the performance of a contract or pre-contractual measures | Deleted immediately if the applicant is not selected | The data controller | We process your data in our CRM, operated by our processor Zoho Corp., based in the United States. |
Managing job applications
| Data controller | Legal basis | Retention period | Data recipients | Transfers outside the EU |
|---|---|---|---|---|
| LIFE | Art 6.1.f - legitimate interest of the data controller | 1 year from the last contact | The data controller | We process your data in our CRM, operated by our processor Zoho Corp., based in the United States. |
Receiving requests sent via the contact form
| Data controller | Legal basis | Retention period | Data recipients | Transfers outside the EU |
|---|---|---|---|---|
| LIFE | Art 6.1.b - necessary for the performance of a contract or pre-contractual measures | 2 years in the active database from the last donation for identification data. 10 years for tax data. | The data controller and any authority legally entitled to access the data | We process your data in our CRM, operated by our processor Zoho Corp (USA). Payments are handled by our processors Stripe Inc. (USA), SamCart Inc (USA) and GoCardless ltd (UK). Some of our processors are based in the United States. We therefore cannot guarantee the integrity and security of your data. |
Managing donation records
| Data controller | Legal basis | Retention period | Data recipients | Transfers outside the EU |
|---|---|---|---|---|
| LIFE | Art 6.1.b - necessary for the performance of a contract or pre-contractual measures | 2 years in the active database from the end of the fundraiser created | The data controller and any authority legally entitled to access the data | We process your data in our CRM, operated by our processor Zoho Corp., based in the United States. |
Managing the creation of fundraisers
| Data controller | Legal basis | Retention period | Data recipients | Transfers outside the EU |
|---|---|---|---|---|
| LIFE | Art 6.1.f - legitimate interest of the data controller | 1 year from the last contact | The data controller | We process your data in our CRM, operated by our processor Zoho Corp., based in the United States. |
Managing appointment bookings
| Data controller | Legal basis | Retention period | Data recipients | Transfers outside the EU |
|---|---|---|---|---|
| LIFE | Art 6.1.c - necessary for compliance with a legal obligation | 3 years from the closure of the case | The data controller | We process your data in our CRM, operated by our processor Zoho Corp., based in the United States. |
Receiving and handling requests to exercise GDPR rights
| Data controller | Legal basis | Retention period | Data recipients | Transfers outside the EU |
|---|---|---|---|---|
| LIFE | Art 6.1.c - necessary for compliance with a legal obligation | Apache logs -> 15 days; Application logs -> 3 months; Mail logs -> 3 months | The data controller | X |
Logging of access to and use of the LIFE website
Article 3.2: How data is collected
When you use our website, the following data is collected automatically:
IP address, fingerprinting data.
Other personal data is collected when you carry out the following actions on the platform:
filling in forms for contact, donations, creating a fundraiser, comments, job applications and booking appointments.
The association may retain certain personal data beyond the periods stated above in order to meet its legal or regulatory obligations.
Article 3.3: Sharing data with third parties
When you are logged in and interact with certain services on the website, for example by leaving comments under our articles, the information you provide will be shared with third parties.
When you contribute to a fundraiser, your contact details may be passed on to the donor who set up that fundraiser.
Article 3.4: Cookie policy
When you first visit our website, we may place cookies on your computer, tablet or mobile. These cookies may be placed by us or by service providers acting on our behalf, and the information gathered is used solely in our interest. Cookies allow us to:
• optimise your browsing and the running of our services,
• carry out studies and statistics on visits to our website,
• process your requests sent via our contact forms.
You can set up your computer, tablet or mobile to notify you each time a cookie is sent to you. You can also choose to disable all cookies. You can do this in your browser settings. If you disable cookies, you will no longer have access to many features that make your experience as a customer easier, and some of our websites, applications and services will not work properly.
In accordance with current legislation, cookies cannot be kept for more than 13 months. However, information collected through trackers may be kept for a maximum of twenty-five (25) months.
Your express acceptance via the information banner constitutes acceptance of our cookie policy. You can nevertheless disable cookies at any time, as described in your browser's documentation.
The list of cookies is provided in the cookie banner on your first visit.
| Cookie type | Cookie name | Provider | Purpose | Lifespan |
|---|---|---|---|---|
| Marketing/Tracking | _fbp | Store and track visits to the website | 3 months | |
| Audience measurement | _ga_* | Store and count page views | 13 months | |
| Audience measurement | _ga | Produce statistics on website audience and usage | 13 months | |
| Marketing/Tracking | _gcl_au | Google Adsense | Store and track conversions | 3 months |
| Audience measurement | _gid | Store and count page views | 24h | |
| Marketing/Tracking | _pin_unauth | Store a unique identifier to group actions across pages | 24h | |
| Marketing/Tracking | _schn | Snapchat | Retarget and attribute traffic coming from Snapchat | Session |
| Marketing/Tracking | _scid | Snapchat | Help identify the visitor | 13 months |
| Marketing/Tracking | _uetsid | Bing Ads | Store and track visits to the website | 24h |
| Marketing/Tracking | _uetvid | Bing Ads | Store and track visits to the website | 13 months |
| Technical | fundraiseup_cid | Fundraise UP | Store a unique identifier to help prevent fraud | 10 years |
| Technical | fundraiseup_session | Fundraise UP | Store a temporary identifier for technical purposes | Session |
| Functional | axeptio_all_vendors | Axeptio | List of cookies in the CMP | 13 months |
| Functional | axeptio_authorized_vendors | Axeptio | Cookies accepted via the CMP | Session |
| Technical | __stripe_mid | Stripe | To process card payments | 13 months |
| Technical | __stripe_sid | Stripe | To process card payments | 13 months |
| Audience measurement | wooTracker | Woopra | Track user activity on the website | 13 months |
| Audience measurement | zabUserId | Zoho | Identify individual visitors and whether they are new or returning | 13 months |
| Functional | zc_consent | Zoho | Record the user's consent to cookies | 13 months |
| Marketing/Tracking | zc_cu_exp | Zoho | Analyse user behaviour on the website | 13 months |
| Marketing/Tracking | zc_cu | Zoho | Analyse user behaviour on the website | 13 months |
| Functional | zc_show | Zoho | Manage certain user preferences | 13 months |
| Marketing/Tracking | zc_tp | Zoho | Analyse user behaviour on the website | 13 months |
| Marketing/Tracking | zft-sdc | Zoho | Compile statistical reports and heatmaps for the website owner | 24h |
| Marketing/Tracking | zps-tgr-dts | Zoho | Optimise the user experience | 13 months |
ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER
Article 4.1: The data controller
You will find this information on the Legal Notice page of the website www.life-ong.org
Article 4.2: The data protection officer
LIFE's data protection officer is the company AERISS, which can be contacted by email at dpo@life-ong.org
ARTICLE 5: USERS' RIGHTS REGARDING DATA COLLECTION AND PROCESSING
Any user whose personal data is processed may exercise the following rights, under European Regulation 2016/679 and the French Data Protection Act (Loi Informatique et Libertés, Law 78-17 of 6 January 1978):
Right of access, right to rectification and right to erasure (set out in Articles 15, 16 and 17 of the GDPR respectively);
Right to data portability (Article 20 of the GDPR);
Right to restriction of processing (Article 18 of the GDPR) and right to object to processing (Article 21 of the GDPR);
Right not to be subject to a decision based solely on automated processing;
Right to decide what happens to your data after your death;
Right to lodge a complaint with the competent supervisory authority (Article 77 of the GDPR).
To exercise your rights, please send your letter or email to LIFE, for the attention of the Data Controller.
LIFE – 1 rue de Stockholm 75008 PARIS
You can also contact the data controller's DPO.
Aurélien PIRRAGLIA – dpo@life-ong.org
So that the data controller can act on their request, users may be asked to provide certain information, such as their first name and surname, their email address, and their account, personal area or subscriber number.
Visit cnil.fr for more information about your rights.
ARTICLE 6: HOW THIS PRIVACY POLICY MAY BE CHANGED
The publisher of the website www.life-ong.org reserves the right to amend this Policy at any time, to ensure that it remains compliant with the law in force for the site's users.
Any changes will not affect purchases previously made on the site. These remain subject to the Policy in force at the time of purchase, as accepted by the user when confirming the purchase.
Users are invited to read this Policy each time they use our services, without needing to be formally notified.
This policy, first published on 1 March 2020, was updated on 12 March 2023.
Ready to help?
I start a fundraiser
Support the causes close to your heart by starting an online fundraiser with LIFE.
Raising funds for a charity has never been easier!