Association Loi 1901 Public Interest Mission • RNA: W142010010 • SIREN: 791143647 • NAF: 93.19Z
Data Protection • GDPR Compliance

Privacy Policy & Data Protection Framework

OCEAN Ouistreham Colleville-Montgomery places paramount importance on the protection of personal data and individual privacy. In compliance with European Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (Loi Informatique et Libertés), review our non-commercial data commitments.

Bureau data protection officer reviewing GDPR data flow registers and member security policies
Figure 9.1: Data governance review meeting held by the General Secretariat to audit volunteer record security protocols.

1. Identity of the Data Controller

The entity responsible for the processing of personal data collected via this website and association activities is:

OCEAN OUISTREHAM COLLEVILLE MONTGOMERY ECOLE D'ACTIVITES NAUTIQUES
Association Loi 1901 • RNA: W142010010 • SIREN: 791143647
Headquarters: RUE PAUL EMILE VICTOR, 14150 OUISTREHAM, FRANCE
Data Protection Officer: General Secretariat (Marie-Hélène Dubreuil)
Direct Contact: devidnabaf@gmail.com | Tel: +33 1 68 22 24 30
Secretariat personnel auditing member consent forms and data security registers
Figure 9.2: Internal audit of data registers and volunteer consent forms to guarantee complete GDPR compliance.

2. Data Collection Categories & Purpose Matrix

We adhere strictly to the principle of data minimization. We only collect personal data that is strictly necessary to fulfill our public interest missions:

Category Data Elements Legal Basis Retention Period
Civic Inquiries Full name, email address, topic, message contents. Legitimate public interest (Art. 6.1.f GDPR) 12 months following resolution of the inquiry.
Volunteer Applications Name, email, phone, city of residence, skills, charter consent. Consent & pre-contractual steps (Art. 6.1.a & b) Duration of civic volunteer engagement + 2 years.
School & Group Safety Supervising educator names, emergency contact phones. Legal maritime safety obligation (Art. 6.1.c) End of academic school cycle (1 year).

3. Absolute Prohibition on Commercial Data Monetization

As an organization of recognized public utility, OCEAN Ouistreham Colleville-Montgomery operates with an absolute prohibition on data monetization. We do not sell, rent, lease, trade, or transfer any personal data to commercial advertisers, marketing brokers, or third-party commercial platforms.

Your information is used solely by the executive bureau and certified instructors to organize maritime safety, school sessions, and volunteer field actions.

General assembly members voting on strict data sovereignty and privacy policies
Figure 9.3: Democratic affirmation of the association's zero-commercialization data privacy charter during the General Assembly.

4. Exercise of Fundamental Data Rights

Under Articles 15 to 22 of the GDPR, every citizen whose data is processed by our association holds explicit rights:

  • Right of Access (Art. 15): Obtain confirmation as to whether your personal data is being processed, and receive an intelligible copy.
  • Right to Rectification (Art. 16): Request immediate correction of inaccurate or incomplete contact details.
  • Right to Erasure (Art. 17): Request deletion of your personal records ("right to be forgotten"), subject to statutory safety retention mandates.
  • Right to Restriction of Processing (Art. 18): Request temporary freezing of processing under statutory dispute conditions.
  • Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used machine-readable format.
  • Right to Object (Art. 21): Object at any time to the processing of your data for legitimate reasons.

To exercise any of these rights, submit a written communication accompanied by proof of identity to the Secretariat:

Email: devidnabaf@gmail.com • Subject: [GDPR / Data Protection Request]
Postal: OCEAN, RUE PAUL EMILE VICTOR, 14150 OUISTREHAM, FRANCE

Public consultation desk informing community members of their rights under French and European data protection laws
Figure 9.4: Public information sessions explaining member rights, transparency registries, and data confidentiality policies.

5. Cookies & Tracking Technologies

Our non-profit website does not use tracking cookies, commercial retargeting beacons, or invasive advertising telemetry. Only essential technical session identifiers necessary for secure form submission and cache-busting operation are utilized, exempt from prior consent under CNIL guidelines.

Field coordinators and volunteers operating with full respect for member confidentiality
Figure 9.5: Community field teams adhering to privacy standards during operational volunteer coordination.

6. Right to Lodge a Regulatory Complaint

If you believe, after contacting our secretariat, that your data protection rights have not been respected, you are entitled to lodge a complaint with the French supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07
Web: www.cnil.fr