PRIVACY POLICY
AND DATA PROTECTION

We collect the data needed for the following purposes. Site traffic measurement is anonymous and cookie-free; the only advertising measurement, by Meta, is described below.

Donations and tax receipts. The donation form collects your first and last name, postal address, email address and, if you provide it, your phone number. This information is needed to process the transaction, follow up on your support and issue your tax receipt, a personal document required by the French tax authorities. The payment itself is processed by our payment provider: card numbers never pass through our servers and are never shared with us.

Requests sent through forms. The contact, volunteer application and tax receipt request forms collect the information you enter. It is used only to reply to you and handle your request.

Newsletter. If you subscribe, we collect your email address to keep you informed of our field work and donation appeals. This subscription is based on your consent, which you may withdraw at any time.

Measuring how well our donation appeals perform. If you accept it in the consent banner, the Meta pixel is loaded: it sets cookies and sends Meta the pages you visit and, where applicable, the amount of your donation. Without your consent, it is not loaded. Independently of this choice, when a donation is recorded, our server sends Meta its amount and your email address in hashed form — made unreadable by a one-way calculation — in order to link the donation to a campaign. The source parameters of a link (utm_*, fbclid) are kept with the donation record, so that we know which campaign prompted it.

Security. When a form is sent, your IP address is processed to limit automated submissions. It is not kept beyond this check.

HuSoMe undertakes never to sell, rent or transfer your personal data to third parties for commercial purposes.

Your data is shared only with the technical providers strictly necessary for running the site and the association:

• Stripe — card payment processing, for donations.
• Brevo — sending the association’s emails (tax receipts, acknowledgements, newsletter) and managing the subscriber list. A French company, with data hosted in the European Union.
• Cloudflare — hosting the site’s photographs, anti-bot protection for forms and anonymous, cookie-free traffic measurement.
• Ahrefs — anonymous, cookie-free measurement of site traffic.
• Meta — measuring the effectiveness of our campaigns: the pixel, if you accept it; the donation amount and hashed email address, sent by our server.
• Hetzner — hosting the site and its database, in Germany.

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights:

• Right of access: obtain a copy of the data we hold about you.
• Right to rectification: have inaccurate data corrected.
• Right to erasure: ask for your data to be deleted, except for data the law requires us to keep — a tax receipt, in particular, cannot be erased before the end of the accounting retention period.
• Right to object and to withdraw consent: unsubscribe from the newsletter at any time, via the link at the bottom of each email, and change your choice about the Meta pixel via the “Manage cookies” link in the footer, without having to give a reason.
• Right to restriction of processing and to data portability.