Your data, plainly.
Last updated: 13 October 2026. This is a translation; the French version prevails.
ESC Sans Frontières collects as little data as possible. This page explains what we collect, why, how long we keep it and how to exercise your rights, under the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Who is responsible?
ESC Sans Frontières, a French non-profit association, 1 rue du Maréchal Juin, 76130 Mont-Saint-Aignan, France. For any question about your data: escsf.contact@gmail.com.
What we collect
- When you write to us (contact form or email): your name, email address and message. The form on this site opens your own email app with the message ready to send: nothing is stored on the site itself. We only use this data to reply to you and follow up on your request (volunteering, partnership, donation).
- When you donate: payment takes place on HelloAsso, which collects your contact and payment details. HelloAsso sends us your name, email, postal address if you give it, and the amount, so we can thank you and, where applicable, issue a receipt. We never have access to your bank details. See HelloAsso's privacy policy.
We never sell, rent or give away your data.
On what basis?
- Replying to your messages: our legitimate interest in corresponding with people who contact us, and steps you ask us to take (application, partnership).
- Managing donations: carrying out your donation and meeting our accounting and tax obligations.
How long?
- Email exchanges: 3 years after our last exchange.
- Donation data: as long as our accounting and tax obligations require, up to 10 years for accounting records.
Who has access?
Only the members of the association's board who need it, and our technical providers: Netlify (website hosting), Google (the association's Gmail account) and HelloAsso (donations).
Cookies and analytics
This site uses no cookies, no analytics and no advertising pixels. That is why it shows no cookie banner.
Hosting and third-party services
The site is hosted by Netlify, Inc. (United States). Like any host, Netlify records visitors' IP addresses in its technical logs. Netlify takes part in the EU–US Data Privacy Framework (Netlify's privacy policy).
The fonts, the 3D globe and the world map are hosted with the site: your browser does not connect to any other service (no Google, no content delivery network) to display it. One exception: the shop map on the Senegal page loads its map tiles from OpenStreetMap's servers, which then receive your IP address (see OpenStreetMap's privacy policy). Links to Instagram and HelloAsso send nothing until you click them.
Photos
The photos show our volunteers and the children in the programmes we support with our local partners. Anyone who appears in a photo, or their legal guardian, can ask for it to be removed by writing to escsf.contact@gmail.com.
Your rights
You can at any time access your data, have it corrected or deleted, object to its use, ask for its use to be restricted or receive a copy in a common format. Write to escsf.contact@gmail.com: we reply within one month.
If you think your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL) at cnil.fr.