Last updated: 24 August 2026
This policy applies to the charity’s public website. When the fundraising game is open, participation is also covered by dedicated information in French.
1. Data controller
The data controller is Pas à pas avec Lana, RNA W662014349, whose registered office is at 13 rue des Arbousiers, 66600 Salses-le-Château, France.
You can contact the charity at pasapasaveclana@gmail.com.
2. Data processed and purposes
| Situation | Data concerned | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Last name, first name, email and message content | Receive and reply to your enquiry | Legitimate interest in communicating with the public |
| Online donation | Last name, first name, email, amount, optional message and transaction references | Prepare, secure, confirm and track the donation | Performance of your request and applicable legal obligations |
| Browsing and security | IP address, date, time, browser and technical logs | Display, secure and maintain the website | Legitimate interest in ensuring the service is secure and functions correctly |
Required fields are identified in the forms. Without this information, we cannot process your enquiry or prepare your donation.
3. Payments
Payments are processed by Stripe. Payment details are entered in Stripe’s secure interface and are neither received nor stored by the charity. Stripe only sends the information required to track the transaction, including its identifier, amount and status.
Learn more in Stripe’s privacy policy.
4. Recipients and service providers
Data is accessible only to authorised people within the charity and, depending on the service used, to strictly necessary providers:
- Stripe, to secure and process donations;
- Formspree, to transmit messages from the contact form;
- Render, to host the application and its technical logs;
- Cloudflare, to distribute and protect the website when enabled on the domain.
These providers may process some data outside the European Economic Area. In that event, the transfer relies on the mechanisms and safeguards required by applicable law. Data is never sold or rented.
5. Retention periods
- Contact enquiries are kept for as long as needed to process them, then for no more than three years after the last exchange when follow-up remains useful.
- Donation and transaction information is kept for as long as required to manage it, then in accordance with applicable accounting, tax and fraud-prevention obligations.
- Technical logs are kept for a limited period proportionate to security and diagnostic needs.
6. Your rights
Depending on the circumstances, you have rights of access, rectification, erasure, restriction, objection and portability. Where processing is based on consent, you may withdraw it at any time without affecting processing already carried out.
To exercise your rights, email pasapasaveclana@gmail.com and describe your request. Proof of identity will only be requested where necessary to verify your identity.
If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL.
7. Security and minors
The charity takes reasonable measures to protect data against loss, unauthorised access, alteration or disclosure. Any process involving payment or the submission of personal data by a minor must be completed or authorised by their legal guardian.
8. Cookies
The website currently uses no advertising or audience-measurement cookies. Strictly necessary trackers may be used for security, website administration or a payment requested by the user. Details are provided in the cookie policy.
9. Changes to this policy
This policy may be updated to reflect changes to the website, its service providers or applicable law. The date at the top of the page shows when it was last revised.