1. Data controller
The controller of the personal data collected on this website is:
Un Cœur Qui Agit Association
16 rue de l’Hôtel-de-Ville
92400 Courbevoie – France
SIRET: 934 226 317 00014
RNA: W922021509
Email: contact@uncoeurquiagit-associationhumanitaire.fr
The association undertakes to process personal data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
2. Data collected, purposes and legal bases
Contact form
The data that may be collected include surname, first name, email address, telephone number and any information voluntarily entered in the message.
These data are used solely to receive the request, reply to it and follow it up.
Processing is based on the association’s legitimate interest in replying to people who contact it, or on pre-contractual measures taken at their request, depending on the nature of the request.
Request for assistance form
The information collected is used to review the request, contact the applicant and, where appropriate, organise the support offered by the association.
Some requests may contain sensitive personal information, in particular information relating to health, disability or social situation. People are invited to send only the information strictly necessary for the review of their request.
Where processing concerns sensitive data, it is carried out only with the explicit consent of the person concerned or where another legal basis provided for by the regulations applies.
Newsletter
The email address and, optionally, the first name are used to send the association’s news, projects and appeals for support.
This processing is based on the consent of the subscriber. Consent may be withdrawn at any time by clicking the unsubscribe link in each newsletter or by writing to:
contact@uncoeurquiagit-associationhumanitaire.fr
Donations and memberships via HelloAsso
When a person makes a donation or pays a membership fee via HelloAsso, the data required for the transaction may include their surname, first name, contact details and payment information.
Bank details are processed directly by HelloAsso and its payment providers. The association Un Cœur Qui Agit has no access to full bank card numbers.
The information passed on to the association is used to keep track of donations and memberships, keep the accounts and, where the legal conditions are met, issue a tax receipt.
This processing is based on carrying out the donor’s or member’s request and on the association’s legal, accounting and tax obligations.
People are also invited to read HelloAsso’s privacy policy at the time of payment.
Association and accounting management
The information needed to manage members, donors, payments and accounts may be recorded in the Paheko software.
This processing is based on the association’s legal and accounting obligations and on its legitimate interest in the administrative follow-up of its activities.
3. Mandatory or optional nature of the information
Fields marked as required in the forms are necessary to process the request. Without them, the association may not be able to follow it up.
The other fields are optional.
4. Recipients of the data
The data are accessible only to:
- Authorised members and persons of the association who need them in the course of their duties;
- Technical providers involved in hosting, maintaining and running the website;
- The services used by the association, in particular HelloAsso, Paheko, the newsletter sending tool and form protection services;
- Administrative or judicial authorities where required by law.
Personal data are neither sold nor rented to third parties for commercial purposes.
5. Retention periods
Data are kept only for as long as necessary for their use:
- Contact requests: for the time needed to process the request, then for a maximum of three years after the last exchange;
- Requests for assistance: while the request is being processed and for the time needed to follow it up, unless a legal obligation or particular need justifies longer retention;
- Newsletter: until unsubscription or withdrawal of consent;
- Donor and member data: for the duration of the relationship with the association, then for the periods needed to comply with legal obligations;
- Accounting documents and supporting documents: for the applicable legal period, which may be up to ten years;
- Data relating to tax receipts: for the time needed to comply with the association’s tax obligations.
At the end of these periods, the data are deleted or anonymised, unless a legal obligation requires them to be kept.
6. Security and confidentiality
The association implements reasonable organisational and technical measures to protect data against loss, unauthorised access, alteration or disclosure.
Only authorised persons bound by a duty of confidentiality may access the information needed for their tasks.
7. Protection against unwanted messages
Forms may be protected by the Google reCAPTCHA service in order to distinguish human users from automated systems.
This service may collect certain technical information, such as the IP address, browser characteristics and interactions with the page. The processing of this information is subject to Google’s privacy rules.
8. Cookies and third-party services
The website uses cookies that are strictly necessary for it to work.
Other embedded services may also use cookies or trackers, in particular:
- Google reCAPTCHA;
- Google Analytics or Google Site Kit, if enabled;
- Google Ads as part of the Google Ad Grants programme;
- HelloAsso on the donation page;
- YouTube videos;
- buttons or content from social networks.
Where required by the regulations, these cookies and services are only activated after the user has given consent through the cookie management banner.
Users may accept, refuse or change their choices at any time using the “Manage my cookies” link available on the website.
9. Data transfers outside the European Union
Some technical providers, in particular Google, may process data outside the European Union.
Where such transfers take place, they must be governed by the protection mechanisms provided for by the GDPR, in particular an adequacy decision or the standard contractual clauses approved by the European Commission.
10. Rights of individuals
In accordance with the applicable regulations, any person may, depending on the situation, exercise the following rights:
- right of access to their data;
- right to rectification;
- right to erasure;
- right to object;
- right to restriction of processing;
- right to data portability;
- right to withdraw consent at any time.
To exercise these rights, the person may write to:
contact@uncoeurquiagit-associationhumanitaire.fr
or by post to:
Un Cœur Qui Agit Association
16 rue de l’Hôtel-de-Ville
92400 Courbevoie – France
Proof of identity may be requested only where necessary to verify the applicant’s identity. The association will reply within the time limits laid down by the regulations.
11. Complaint to the CNIL
If a person considers, after contacting the association, that their rights are not respected, they may lodge a complaint with the French data protection authority (Commission nationale de l’informatique et des libertés):
12. Changes to this policy
This policy may be amended to take account of changes to the website, the services used or the regulations.
Last updated: September 2026.