Privacy Policy & Data Protection Charter

Data Sovereignty

Commitment to Digital Privacy & Patron Trust

CHAMP-LIVRES attaches the highest importance to respecting the privacy and safeguarding the personal data of its website visitors, library patrons, volunteers, and municipal partners. In strict conformity with European Union Regulation 2016/679 of April 27, 2016 (General Data Protection Regulation - GDPR) and French Law n° 78-17 of January 6, 1978 as amended (Loi Informatique et Libertés), this privacy policy transparently details how your personal information is gathered, processed, secured, and respected.

As a non-profit association operating exclusively for public cultural benefit, we do not monetize, profile, sell, or rent your personal data to any commercial firm, advertising agency, or commercial data broker.

1. Identification of the Data Controller

The data controller responsible for the processing of personal data collected via this website and inside the municipal library of Champrond-en-Gâtine is:

• Designation: Association CHAMP-LIVRES (Loi 1901)
• Official Registry: RNA W284000827 | SIREN 791211329
• Registered Seat: Mairie, 72 Grande Rue, 28240 Champrond-en-Gâtine, France
• Legal Representative: Habiba Akter, President
• Data Protection Contact: habibaakter4275@gmail.com | +33 8 02 23 99 88

2. Categories of Personal Data Processed

CHAMP-LIVRES applies the principle of data minimization (Article 5.1.c of the GDPR), collecting only information strictly necessary to provide non-profit public library services:

• Civic Liaison & Contact Inquiries: When you transmit a message through our contact form, we collect your full name, email address, phone number (optional), inquiry subject, and message content.
• Volunteer Application Dossiers: When applying to join our volunteer corps, we process your full name, email address, telephone number, preferred areas of community service, weekly time availability, and brief motivation summary.
• Patron Borrowing Registration: Inside the library, registration of borrower accounts requires patron name, proof of local address (to establish regional loan eligibility), telephone number, and email address for automated return reminders.
• Technical Connection Logs: Minimal server access logs (IP address, browser user-agent, timestamp) necessary to guarantee the security, stability, and integrity of the hosting infrastructure.

3. Legal Bases and Purposes of Processing

Every processing activity conducted by CHAMP-LIVRES rests upon an established legal basis under Article 6 of the GDPR:

4. Intellectual Freedom & Reading History Anonymization

A foundational tenet of public librarianship is the preservation of unconditional intellectual freedom. We believe that what a citizen reads, researches, or borrows is private and sacrosanct.

In our catalog management systems, a patron's identity is linked to a book title only while the volume is actively on loan. As soon as the book is returned and scanned at the desk, the link between the patron's name and the borrowed title is automatically erased from active circulation tables. Aggregated statistical data maintained for municipal reports tracks only anonymous borrowing numbers (e.g., "120 historical novels loaned in October"), preserving complete patron anonymity.

5. Data Retention Periods

We retain personal data only for the duration strictly necessary for the fulfillment of the specific purposes:

• General Contact Inquiries: Retained for a maximum period of twelve (12) months following the final exchange, after which records are deleted.
• Volunteer Applications: For accepted volunteers, retained throughout the duration of their active service plus one year. For applications not pursued, retained for six (6) months before complete purging.
• Patron Membership Records: Retained for the duration of active library membership. Accounts with zero borrowing activity for three consecutive years are automatically archived and deleted.
• Server Technical Logs: Retained on secure infrastructure for a rolling period not exceeding thirty (30) days in compliance with statutory digital security recommendations.

6. Your Statutory Rights Under the GDPR

In accordance with Articles 15 to 22 of the GDPR, you possess extensive statutory rights regarding your personal information:

• Right of Access (Art. 15): You have the right to obtain confirmation as to whether your personal data is being processed and receive a clear copy of that data.
• Right of Rectification (Art. 16): You may request the prompt correction of inaccurate or incomplete personal records.
• Right to Erasure / "Right to be Forgotten" (Art. 17): You may request the permanent deletion of your personal data when it is no longer required for our library operations.
• Right to Restriction of Processing (Art. 18): You may request the temporary suspension of data processing under specific statutory circumstances.
• Right to Data Portability (Art. 20): You may request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right of Objection (Art. 21): You have the right to object at any time to the processing of your data for reasons relating to your particular situation.
• Right to Withdraw Consent: Where processing is founded upon consent, you may withdraw that consent freely at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, you may contact our designated data protection coordinator by email at habibaakter4275@gmail.com or by postal mail addressed to: CHAMP-LIVRES - Protection des Données, Mairie, 72 Grande Rue, 28240 Champrond-en-Gâtine. In accordance with French guidelines, we will reply within thirty (30) calendar days.

7. Cookies, Web Beacons & Tracking Technologies

Unlike commercial websites that deploy dozens of third-party tracking pixels, behavioural advertising cookies, and cross-site fingerprinting scripts, the CHAMP-LIVRES website operates under a Zero-Tracking Architecture:

• We deploy zero commercial advertising cookies.
• We utilize zero behavioral profiling scripts.
• We do not embed third-party surveillance widgets or social network tracking pixels.
• Only strictly necessary technical session tokens (such as anti-CSRF security tokens and transient modal display cookies) are utilized to guarantee seamless, secure navigation. Under CNIL guidelines, strictly necessary technical cookies do not require prior consent banners as they do not track users across the web.

8. Right to Lodge a Complaint with the CNIL

If, after contacting our data protection coordinator, you believe that your statutory data protection rights have not been respected, you have the legal right under Article 77 of the GDPR to lodge a formal complaint with the French national supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy - TSA 80715
75334 Paris Cedex 07, France
Telephone: +33 (0)1 53 73 22 22
Website: https://www.cnil.fr

9. Non-Commercial & Reinvestment Assurance

In harmony with our non-profit identity: "All membership fees and dues are fully reinvested in the association's public interest missions." We pledge that digital data protection remains an essential component of our institutional integrity in Champrond-en-Gâtine.