Privacy policy

The data controller is [name of the publisher: to be completed], [address: to be completed].

Data protection officer (DPO): [name or department: to be completed], reachable at [dpo@example.org: address to be completed]. A data protection impact assessment (DPIA) and a record of processing activities are kept by the data controller [to be finalised before going into production].

We collect only what is strictly necessary:

• Account: email address, public name, username, password (kept only in irreversibly encrypted form), optional and strictly private real name, two-factor authentication settings.
• Participation: your registration for an event (counted in aggregate; your name is visible only if you choose to make it public, event by event) and the movements you follow.
• Roles and organisation actions: role in a movement, invitations, official publications, actions recorded in the movement’s audit log.
• Reports: category and details you write; the identity of the author of a report is never shown to the person reported.
• Sessions and security: connected devices (browser and date of last activity), technical logs; the IP address is not kept in clear in the logs [to be confirmed with operations].
• Notifications: platform messages addressed to you.

Taking part in a gathering, following a movement or being its organiser may reveal, directly or indirectly, political opinions, philosophical or religious beliefs or trade-union membership: these are special categories of data, in principle prohibited from processing unless an exception applies.

Legal basis: your explicit consent (Article 9.2.a GDPR), collected through a box that is not pre-ticked when you create the account. You can withdraw it at any time by deleting your account from the Security area; withdrawal does not affect earlier processing.

Safeguards: no data of this kind is public by default; there is no individual score, no ranking by popularity, no GPS position tracking, no advertising profiling, no resale of data.

Data is used only for the following purposes:

• providing the service you request: creating and managing the account, participation, organisation (performance of a contract, Article 6.1.b);
• securing the platform, preventing fraud and abuse, ensuring moderation (legitimate interest, Article 6.1.f);
• meeting our legal obligations, in particular to retain technical data and to respond to requests from the authorities (Article 6.1.c);
• processing the sensitive data described above (explicit consent, Article 9.2.a).

• Account: until it is deleted, which anonymises the profile; the details of the reports you wrote are erased when the account is deleted.
• Encrypted database backups: 14 rolling days.
• Notifications: 180 days.
• Technical logs: [duration: to be completed, for example 30 to 90 days]; security and audit logs: [duration: to be completed].
• Published versions of demands and charters: kept without limit, because their integrity is part of the platform’s promise; they carry only the public name of their authors [handling when an account is deleted: to be validated].
• Username of a deleted account: reserved for [one year: to be confirmed] to prevent impersonation.
• Volunteering, notification devices, private calendar feed (J2): applications and devices are deleted when the account is deleted; a device not seen for 180 days is purged; a calendar feed’s token is kept only as a fingerprint and can be revoked at any time; the history of volunteering decisions keeps only opaque identifiers.

Your data is neither sold nor handed over. It is processed by the authorised team and by the following processors:

• Hetzner Online GmbH (Germany): hosting of the servers and backups, in the European Union.
• Transactional email provider: [European provider to be designated, for example Brevo or Scaleway TEM]; receives your email address to send confirmation and security messages.
• OpenFreeMap: base map; your browser downloads the tiles directly from this service, which therefore sees your IP address [terms to be checked].
• Nominatim (OpenStreetMap Foundation): address search; the request is passed on by our servers, without your IP address or your identity [to be checked].
• Apple (APNs) and Google (Firebase Cloud Messaging): deliver push notifications to the mobile app. The content is generic (no event name, movement name or text) and does not identify the person [providers and any transfers outside the European Union: to be validated].

ARALLIA does not plan any transfer of personal data outside the European Union. Should a processor have to resort to one, it would be governed by standard contractual clauses and you would be informed [to be confirmed with each processor].

You have the rights of access, rectification, erasure, restriction, objection and portability of your data, the right to withdraw your consent at any time and to set directives on what happens to your data after your death.

You exercise them online, with no formalities: from your account’s Security area (/app/securite), you can export all your data in JSON format and delete your account. For any other request, write to the DPO (contact details above); we reply within one month.

Finally, you may lodge a complaint with the CNIL (www.cnil.fr), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

ARALLIA uses no advertising trackers and no third-party audience measurement tools. A single, strictly necessary session cookie is set at login. Your theme preference (light or dark) is kept in your browser, and your interface language choice is kept in a functional cookie (NEXT_LOCALE, one year, no personal data). These uses are exempt from consent [to be validated by a lawyer].

Passwords are kept in irreversibly encrypted form, two-factor authentication is available, exchanges are encrypted (HTTPS), backups are encrypted and sensitive actions require reconfirmation. A vulnerability can be reported following the procedure on the /securite page. In the event of a data breach, the CNIL and the people concerned are informed under the conditions laid down by the GDPR.

No decision producing legal effects concerning you is taken in a solely automated way, and no profiling is carried out.