Data protection policy

Triangle Génération Humanitaire (TGH) respects and protects your privacy and your personal data and undertakes to comply with French and European regulations on the protection of Personal Data ( General Data Protection Regulation 2016/679 of 27 April 2016, hereinafter ‘GDPR’ and the 1978 amended ‘Data Protection Act’ in particular).

I. Purpose of the data protection policy

The purpose of this policy is to describe the processing of personal data carried out by TGH, as data controller, on its website: www.trianglegh.org/ and to describe your rights under French and European regulations on personal data.

This policy therefore covers all processing relating to:

The creation, use and management of your account on our donor area https://www.trianglegh.org/en/make-a-donation/ and (registration, payments, etc.);
Use of our recruitment section https://www.trianglegh.org/en/join-us/ (management of your applications for our job offers).

II. General principles

In carrying out these processing operations, TGH acts as a data controller within the meaning of the RGPD.

The personal data covered by this policy will only be processed by TGH employees who have been duly informed and made aware of this privacy policy. It will not be disclosed to service providers, technical/commercial partners or subcontractors.

TGH undertakes never to sell, rent or transfer your personal data for purposes other than management (in particular for commercial or marketing purposes).

TGH undertakes to secure and protect the systems used to process the data you entrust to it from any attack or leakage.
In accordance with the legislation in force, you have the right to access, rectify and delete the data you have sent us at any time.

III. Types of data collected

When you visit the TGH website, you may provide us with the following information:

A. If you make a donation :

Personal details,
Postal and/or e-mail addresses,
Bank details.

B. If you are applying for a job offer

Identification data: civil status
Contact details: e-mail address, postal address, telephone number
Educational information: level of study, qualifications
Information relating to your professional life: professional experience, references, etc.

The www.trianglegh.org website also uses ‘cookies’, which are text files (.txt) placed on your computer. Please see the dedicated page for more information.

IV. Finalités du traitement de vos données

We process your data only for specified purposes and in accordance with those purposes. The relevant purposes on this website are as follows:

Administering your donations and subscriptions
Manage your applications and create a CV database
Managing your requests to exercise your rights;
Processing carried out by means of cookies (see Legal Notice).

A. Making a donation
This section concerns the processing of personal data carried out when you make a donation via the https://www.trianglegh.org/en/make-a-donation/ page.

This processing is based on the pursuit of TGH’s legitimate interests: it is necessary to process the donations you make online in our space. All the information requested is necessary for this processing. Without this information, it is not possible to process the donation and/or issue the certificate.

Your postal and/or e-mail address may be used by TGH for informational and non-commercial prospecting purposes. (For example, to solicit donations in relation to a particular humanitarian crisis). As part of the management of your data, it will not be transferred abroad.
You may exercise your right to access, rectify and delete your data at any time by sending an e-mail to dataprotection@trianglegh.org.

B. Management of applications
This section concerns the processing necessary for the recruitment area: Careers” section, accessible at the following address: https://www.trianglegh.org/en/join-us/

Personal data is collected in order to manage your various applications (internships, employment contracts). This processing is based on our pre-contractual or contractual relationship (article 6.1.b of the RGPD). The information collected is stored in a database by TGH and is intended to be used by the TGH Human Resources Department for internal management purposes, to respond to your application requests and to manage recruitment.

As part of the management of your data, it may be transferred within the European Union and to a country outside the European Union. Such transfers may take place in accordance with the applicable legislation and only in the context of the recruitment process. They will therefore be made only to members of the TGH teams involved in the recruitment process so that they have access to the necessary information.

The information provided may be stored in our databases for future use or as part of the ‘pool’, which consists of storing your profiles in case TGH needs to use them in the future (CV library). This use of data is based on TGH’s legitimate interest in creating a recruitment pool.

All the information requested is necessary for this processing. Without this data, your request cannot be processed.

You may exercise your rights of access, rectification and deletion of your data at any time by sending a request by e-mail to dataprotection@trianglegh.org.

C. Management of your requests to exercise your rights
This section concerns the processing necessary for the management of your requests for access to personal data via the address dataprotection@trianglegh.org.

This processing is based on the fulfilment of the legal obligation to which we are subject (i.e. to respond to your requests regarding the management of your personal data). The information collected for this purpose is recorded for internal management purposes in order to respond to your requests.

As part of the management of the response to your request, your data will not be shared with our partners or our teams.

Please note that the address dataprotection@trianglegh.org will only be used to respond to requests and queries relating to the management of your personal data. Any other request will not be dealt with.

D. Statistical processing
The www.trianglegh.org website may also carry out statistical processing of your data, in particular via Google Analytics, in order to monitor the site’s performance, user navigation and profile knowledge. This processing is based on the pursuit of TGH’s legitimate interests in order to optimise our activities and actions and to improve our communication and actions.

The information collected in this way is stored by TGH in a database and is intended for the TGH communication department. This statistical information is collected in particular by means of cookies, which you can choose to accept or not.

V. Recipients of your data

Your personal data is intended for TGH departments and authorised persons. The departments that process your data are:

The Finance Department for donations and subscriptions
The Human Resources Department for the management of applications, as well as any TGH employee involved in the recruitment process in question.
The RGPD for your requests to exercise your rights.

In this respect, it is specified that these different departments and services:

Have access to your personal data for the sole purpose of performing their respective functions;
Have a contractual obligation to use your personal data in accordance with the rules and values of TGH and with the applicable legal provisions on the protection of personal data.

Your Personal Data will not be disclosed to service providers, technical or commercial partners or subcontractors.

VI. How long we keep your data

Your personal data will be kept for as long as is necessary to achieve the purposes of the processing of personal data set out above.

Your Personal Data will be destroyed once we no longer use it, or upon your request in the exercise of your rights and subject to certain legal and regulatory provisions requiring the retention of certain of your data.

A. Management of your donations

Donor information is retained until a request is made to delete an account;
Donation data will be kept in the ‘active database’ for 6 years from the last donation or consent, and then archived for 5 years (‘intermediate archiving’);
Payment card data will be kept in the ‘active database’ for the time necessary to complete the transaction, and then archived for 5 years (‘intermediate archiving’).

B. Management of your applications

Data relating to rejected applications are kept on the ‘active database’ for 2 years (unless you request their deletion) and then archived for 3 years (‘intermediate archiving’);
Data relating to applications that have been accepted will be kept for as long as they remain with the Association; thereafter, the data will be kept for the duration of the Association’s human resources management activities.

C. Access management (activity reports and requests for deletion)
Data will be kept for the time necessary to respond to requests and then archived for the applicable legal and regulatory periods.

VII. Measures to protect your data

We undertake to take both physical and electronic measures to ensure the security and confidentiality of your data and to ensure that it is accurate and up to date:

Regular maintenance of our IT equipment;
Empowering staff;
Training staff in good IT practice;
Using tools to guard against computer attacks (such as anti-virus, anti-spam, firewalls, etc.);
Control of the organisation’s access to the Internet;
Controlling access to the organisation’s information, especially sensitive information;
Hosting data in secure, monitored environments, both physical and software;
Implementing appropriate, secure, redundant back-up procedures.

In addition, TGH is committed to choosing service providers and partners who guarantee compliance with French and European regulations on personal data.

VIII. How to exercise your rights

In accordance with French and European legislation on personal data, you may access, rectify, request the deletion of or exercise your right to restrict the processing of your data. You can also request the withdrawal of your consent and define guidelines for the management of your data after your gone.

You can exercise your rights without having to prove your identity. You will be asked to provide proof of identity if we cannot identify you with certainty or if you are acting on behalf of another person.

To exercise your rights or if you have any questions about your personal data, please contact us:

At the following email address: dataprotection@trianglegh.org
By post: Triangle Génération Humanitaire – 1, rue de Montribloud 69009 LYON
By telephone: 04 72 20 50 10

IX. Making a claim or complaint

If, after contacting TGH, you feel that your rights have not been respected, you can lodge a complaint online with the CNIL.
You can lodge a complaint with the CNIL, which guarantees the protection of your rights. You can contact the CNIL:

online: https://www.cnil.fr/fr/plaintes/internet ,
by post: 3, place de Fontenoy, TSA 80715-77334.