GDPR
Privacy policy
Last updated: April 2026
Data controller
Association Davia (RNA W832020100)
89500 Villeneuve-sur-Yonne, France
Contact: [email protected]
Data collected
We only collect the data you voluntarily provide through our contact form:
- Your first and last name
- Your email address
- Your phone number (optional)
- The subject of your request and the content of your message
No other personal data is collected automatically by the site.
Purpose of processing
Your data is used exclusively to:
- Reply to your requests for information, visits or partnerships
- Send you, on explicit request, a tax receipt after a donation via HelloAsso (handled by HelloAsso)
- Keep you informed of the association's news if you ask us to
Your data is never sold or shared with third parties for commercial purposes.
Legal basis
The processing of your data is based on your explicit consent, given by the voluntary submission of the contact form, in accordance with Article 6.1.a of the General Data Protection Regulation (GDPR).
Retention period
Your data is kept for a maximum of 3 years from our last exchange. After that, it is automatically deleted. You can request immediate deletion at any time by writing to [email protected].
Processors and third-party services
Web3Forms (form handling)
The site's forms are handled by Web3Forms, which receives and forwards your messages to the association. The data is temporarily stored on servers located in the United States. The transfer is based on your consent (voluntary submission of the form).
Policy: web3forms.com/privacy
HelloAsso (donations)
Donations are handled directly by the HelloAsso platform, which issues the tax receipts. Payment data never passes through our site.
Policy: helloasso.com/confidentialite
Cloudflare (hosting)
The site is hosted by Cloudflare, Inc. (United States). Cloudflare may temporarily keep technical logs (IP address) for security purposes, without using them for commercial purposes.
Policy: cloudflare.com/privacypolicy
GitHub (content management)
The site's editorial content is version-controlled and hosted on GitHub, Inc. (United States). No visitor data is stored on GitHub — only the site's text content and public images.
Cookies
This site does not place any cookies on your device.
We use no audience analytics tool that uses cookies or collects personal data. No advertising, no tracking pixels, no automatic sharing with social networks.
Your rights
In accordance with the GDPR (Articles 15 to 22), you have the following rights over your personal data:
- Right of access: obtain a copy of the data we hold about you
- Right to rectification: have inaccurate or incomplete data corrected
- Right to erasure: request the deletion of your data
- Right to restriction: temporarily restrict the processing
- Right to portability: receive your data in a usable format
- Right to object: object to the processing of your data
To exercise any of these rights, write to [email protected]. We will reply within a maximum of one month.
Complaints
If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL):
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
www.cnil.fr