This privacy policy defines and informs you of how Change Lebanon uses and protects the information you send, where applicable, when you use this website accessible at the following URL: https://change-lebanon.org  (the “Website”).

Please note that this privacy policy may be changed at any time by Change Lebanon, particularly in order to comply with any legislative, regulatory, case-law or technological development. In this case, the date of its update will be clearly identified at the top of this policy. Any changes shall be binding upon the User as soon as they are published online. The User should therefore consult this privacy policy on a regular basis in order to be informed of any changes. 

This privacy policy informs you of your rights concerning the personal information and data held by Change Lebanon.

1. DATA CONTROLLER

The data controller is Change Lebanon, a French association, whose registered office is located 2, quai des Célestins, 75004 Paris. Change Lebanon may be reached by e-mail at contact@change-lebanon.org.

The competent supervisory authority of Change Lebanon is the Commission Nationale Informatique et Libertés, the French data protection authority.

2. PURPOSES FOR WHICH PERSONAL DATA IS PROCESSED

Change Lebanon processes Personal Data via the Website for the following purposes (hereinafter the “Purposes”):

1. for the purpose of providing you with the information or services you have requested (particularly sending the Newsletter, correspondence by email, sending information…);
2. for the purpose of collecting information with a view to improving our Website and our products and services (particularly via cookies, see Cookies Policy);
3. in order to contact you about different events concerning Change Lebanon.

The information required by Change Lebanon for the above purposes is marked with an asterisk (*) on the relevant pages of the Website. If you fail to complete the required fields marked with an asterisk (*), your access to all or part of the services and functions of the Website could be blocked, and your requests may not be processed. The other fields are optional and are designed to improve the quality of the service proposed on the Website.

The other information is optional but will allow us to get to know you better and to improve the information proposed to you. Change Lebanon collects the following main pieces of information: your full name, postal address, email address and telephone number.

The legal basis for the processing your personal data is Change Lebanon’s legitimate interest to communicate with donors and people interested in its projects, as well as increase the public’s information concerning its activities and to improve its website.

3. RECIPIENTS

Your personal data will only be communicated to Change Lebanon employees on a need-to-know basis. The hosting service provider of Change Lebanon, IONOS, 7 place de la Gare, 57200 Sarreguemines, France, can also access your personal data, for maintenance purposes, as well as some of Change Lebanon’s data processors, all of which are bound by confidentiality obligations in accordance with provisions of Article 28 (3) of the GDPR.  Neither Change Lebanon nor any of its processors will sell the personal data collected from this Website to third parties.

4. DURATION OF DATA RETENTION

Your personal data will generally be actively kept by Change Lebanon for a maximum duration of 3 years, except for data collected through cookies which are kept for a shorter period (see our Cookies Policy). Upon the term of the above-mentioned period, the data may be archived separately (with restricted access rights) for an additional period of two (2) years to ensure the conservation, exercise and defense of our rights in court, as appropriate.

5. YOUR RIGHTS AS A DATA SUBJECT

You have the following rights concerning your personal data, which you can exercise by contacting us (see Article 1).

5.1. Right of access and communication of the data

You may access your personal data, in accordance with your rights under GDPR.

Change Lebanon reserves the right, if appropriate, to request identification from data subjects who request access to their data and to object to data requests that are manifestly abusive (because of their high number or their repetitive or systematic nature).

5.2. Right of rectification and erasure of data and right of limitation of data processing

You have the right to obtain, at the earliest convenience, the rectification of your personal data that may be inaccurate.

You also have the right to obtain the erasure of your data if they are not necessary with respect to the purpose for which Change Lebanon had collected them, if you withdraw your consent and there is no other legal basis for the data processing, if the data has been subject to an illicit processing or if the data must be erased in order to respect a legal obligation to which Change Lebanon is subject.

Please note that the exercise of this right is made without prejudice of Change Lebanon’s right to continue to process the data if such data processing is necessary for the assertion, the exercise or the defense of legal rights in court or to the respect of its legal obligations.

You have the right to request the limitation of the processing of your data by Change Lebanon if:

1. You contest the accuracy of the data processed by Change Lebanon, for a time period which allows Change Lebanon to verify this accuracy,
2. The data processing is illicit but you object to the erasure of the data,
3. Change Lebanon no longer needs these data for the purpose of their processing but they are necessary to you for the recognition, the exercise or the defense of your legal rights in court.

5.3. Right to data portability

If your personal data was collected on the basis of your consent or on the basis of its necessity to the performance of Change Lebanon’s obligations under a contract with you, you may have a right to the portability of your data, i.e. a right to obtain that your personal data processed by Change Lebanon be transmitted to you or another data controller in a structured, commonly used and machine-readable format. To exercise this right, please contact us as indicated above.

5.4. Right of opposition and withdrawal of consent

You have the right to object at any time to the processing of your data for legitimate reasons.

You also have the right at any time to withdraw your consent to the processing of your data by Change Lebanon when consent is the legal basis of the processing of your data. Withdrawal of consent shall not affect the lawfulness of the processing carried out prior to the withdrawal, nor the right of Change Lebanon to retain the data to ensure the preservation, defense and exercise of its rights in court.

5.5. Right to set guidelines of the fate of your data after your death

The above-mentioned rights will expire upon the death of the data subject. You can set guidelines concerning the retention, deletion and communication of your data after your death.

These guidelines are general if they concern all your personal data and are registered with a trusted digital third party certified by the Commission Nationale Informatique et Libertés. They are specific if they are registered directly with Change and concern only the data processed by Change Lebanon.

These guidelines can be changed or revoked at any time.

In the absence of instructions, the heirs of the deceased may exercise the above-mentioned rights to the extent necessary for the organization and settlement of the estate and the processing of the death by Change Lebanon.

5.6. Response times

Change Lebanon undertakes to respond to your request for access, rectification or opposition or any other additional request for information within a reasonable period of time, which may not exceed 1 month from receipt of your request.

6. TRANSFER TO A THIRD COUNTRY OUTSIDE THE EUROPEAN UNION

Change Lebanon does not transfer any personal data of Users outside the European Union.

7.  COMPLAINT TO THE COMPETENT AUTHORITY

If you consider that Change Lebanon does not comply with its obligations with regards to your personal information, you can address a complaint or a request to the competent authority. In France, the competent authority is the Commission Nationale Informatique et Libertés (the French data protection authority), to which you can send a request electronically by clicking on the following link: https://www.cnil.fr/fr/plaintes/internet.

8. SECURITY MEASURES

Change Lebanon will process user data confidentially at all times, in accordance with applicable regulations, taking necessary technical and organizational measures to guarantee the security of your data and prevent unauthorized changes, loss, processing or access, in view of the state of technology, the nature of the data stored and risks to which they are exposed.