1. Identity of the Data Controller
The entity responsible for the processing of personal data collected via this website and association activities is:
Association Loi 1901 • RNA: W142010010 • SIREN: 791143647
Headquarters: RUE PAUL EMILE VICTOR, 14150 OUISTREHAM, FRANCE
Data Protection Officer: General Secretariat (Marie-Hélène Dubreuil)
Direct Contact: devidnabaf@gmail.com | Tel: +33 1 68 22 24 30
2. Data Collection Categories & Purpose Matrix
We adhere strictly to the principle of data minimization. We only collect personal data that is strictly necessary to fulfill our public interest missions:
| Category | Data Elements | Legal Basis | Retention Period |
|---|---|---|---|
| Civic Inquiries | Full name, email address, topic, message contents. | Legitimate public interest (Art. 6.1.f GDPR) | 12 months following resolution of the inquiry. |
| Volunteer Applications | Name, email, phone, city of residence, skills, charter consent. | Consent & pre-contractual steps (Art. 6.1.a & b) | Duration of civic volunteer engagement + 2 years. |
| School & Group Safety | Supervising educator names, emergency contact phones. | Legal maritime safety obligation (Art. 6.1.c) | End of academic school cycle (1 year). |
3. Absolute Prohibition on Commercial Data Monetization
As an organization of recognized public utility, OCEAN Ouistreham Colleville-Montgomery operates with an absolute prohibition on data monetization. We do not sell, rent, lease, trade, or transfer any personal data to commercial advertisers, marketing brokers, or third-party commercial platforms.
Your information is used solely by the executive bureau and certified instructors to organize maritime safety, school sessions, and volunteer field actions.
4. Exercise of Fundamental Data Rights
Under Articles 15 to 22 of the GDPR, every citizen whose data is processed by our association holds explicit rights:
- Right of Access (Art. 15): Obtain confirmation as to whether your personal data is being processed, and receive an intelligible copy.
- Right to Rectification (Art. 16): Request immediate correction of inaccurate or incomplete contact details.
- Right to Erasure (Art. 17): Request deletion of your personal records ("right to be forgotten"), subject to statutory safety retention mandates.
- Right to Restriction of Processing (Art. 18): Request temporary freezing of processing under statutory dispute conditions.
- Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used machine-readable format.
- Right to Object (Art. 21): Object at any time to the processing of your data for legitimate reasons.
To exercise any of these rights, submit a written communication accompanied by proof of identity to the Secretariat:
Email: devidnabaf@gmail.com • Subject: [GDPR / Data Protection Request]
Postal: OCEAN, RUE PAUL EMILE VICTOR, 14150 OUISTREHAM, FRANCE
5. Cookies & Tracking Technologies
Our non-profit website does not use tracking cookies, commercial retargeting beacons, or invasive advertising telemetry. Only essential technical session identifiers necessary for secure form submission and cache-busting operation are utilized, exempt from prior consent under CNIL guidelines.
6. Right to Lodge a Regulatory Complaint
If you believe, after contacting our secretariat, that your data protection rights have not been respected, you are entitled to lodge a complaint with the French supervisory authority:
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07
Web: www.cnil.fr