Skip to main content

MICROBIOME FONDATIONPRIVACY POLICY

The Microbiome Foundation considers respecting your privacy essential. We are committed to protecting it. This policy is intended to help you understand how we collect and process your personal data and what your rights are.

 

  1. WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

The Microbiome Foundation, a foundation registered under the number 752 692251 and headquartered at 115 rue de l’abbé Groult, 75015 Paris, France, is responsible for processing your data.

 

  1. HOW DO WE COLLECT YOUR DATA?

We collect your data in several ways, in particular:

  • when you make a donation to the Microbiome Foundation,
  • when you sign up for our newsletter,
  • more generally, every time you interact with us.

In each case, we will only ask you for the information we really need. You are free to give us this information or not; however, if you refuse, we will not be able to provide you with the requested services or process your requests.

We also collect data automatically through the use of cookies. For more information, please read our Cookie Policy.

 

  1. WHY DO WE COLLECT YOUR DATA AND HOW LONG DO WE RETAIN IT?

We process your data for defined purposes, on the basis of a legal “justification” (or legal basis), and for a limited period of time.

As a general rule, we keep your data for as long as is strictly necessary to manage our business relationship with you. However, your data may be retained for longer, for example in order to establish proof of a right under a legal obligation. In any event, your data will not be kept beyond what is strictly necessary for the purposes for which it is processed. When your data is no longer required, we will ensure that it is deleted or rendered anonymous.

The table below details the purposes and legal bases of how we process data, as well as the applicable retention periods.

Purpose Justification Retention period
Making fundraising appeals (including by organizing events such as galas) Our legitimate interest in soliciting our donors’ generosity Three years from the last donation

The data will not be retained following two unsuccessful appeals
Managing donations and sending tax receipts Compliance with our legal obligations The time required to process the donation and send the receipt, and then in the form of an intermediate archive for the legal retention period
Managing our members (donors) Our legitimate interest in galvanizing our community of members in order to disseminate our work and bring it to as many people as possible Three years from the last interaction initiated by the member
Managing your requests communicated via any means of communication (our contact form, e-mail, telephone, etc.) Your consent, as well as our legitimate interest in responding to solicitations addressed to us The time required to be able to respond to the request
Sending you our newsletter by e-mail (if you have signed up for it) Your consent Three years from when you sign up or from your last interaction with our newsletter (clicking on a link, for example). At the end of this period, we will send you an e-mail asking if you wish to continue receiving our newsletter. If you do not or if you do not reply, you will no longer receive our newsletter
Fulfilling our accounting and tax obligations Compliance with our legal obligations In the form of an intermediate archive, for the legal retention period (ten years for accounting purposes and six years for tax purposes)
Managing requests to exercise the rights of data subjects Compliance with our legal obligations The time required to respond to your request and one year
Managing an objection list Our legitimate interest in respecting your wishes regarding the processing of your data Three years from the exercise of this right
Managing litigation and pre-litigation Our legitimate interest in being able to prove a right or contract and defend our rights The duration of the related statute of limitations, usually five years

 

  1. 4. WITH WHOM DO WE SHARE YOUR DATA?

We only share your data with:

  • Persons duly authorized by the Microbiome Foundation, who need to access your data in the context of their work,
  • Our subcontractors, who process your data in the name of and on behalf of the Microbiome Foundation,
  • Our external advisors (lawyers, auditors, etc.), when necessary for the legitimate interests of the Microbiome Foundation.

Your data will not be shared, exchanged, sold, or leased to any persons other than those mentioned above.

Your personal data may be transferred outside the European Economic Area (EEA) to countries (such as the United States) that do not, a priori, offer a level of protection for your data equivalent to that which you enjoy within the EEA. In the absence of an adequacy decision by the European Commission under Article 45 of the GDPR, the transfer of your personal data will be governed by appropriate transfer mechanisms under Articles 46 et seq. of the GDPR (such as standard contractual clauses adopted by the European Commission or Privacy Shield). You may obtain a copy of these (excluding the confidential provisions) by contacting us at the contact details provided in Article 6 (“Contact”).

 

  1. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

You have certain rights with regard to your data:

  • You may revoke your consent to the processing of your data based on your consent at any time.
  • You may ask us to confirm whether we are processing your data and, if so, ask us to inform you about the nature of the processing, allow you access to it, and obtain a copy of it.
  • You may ask us to correct or complete your data if it is incorrect or incomplete.
  • In some cases, you may ask us to delete or limit the processing of your data.
  • In some cases, you may ask us to provide your data in a structured, commonly used, machine-readable format, or you may request that your data be forwarded directly to another data controller.
  • You have the right to define guidelines (general or specific) regarding the fate of your data after your death.
  • You may object to any processing of your data basedonour“legitimate interest”.. If you exercise this right, we must stop the processing unless we demonstrate theexistence of legitimate and compelling reasons that override your fundamental rights and freedoms, or for the establishment, exercise, or defense of legal claims.
  • You may object at any time to the processing of your data for marketing purposes.

You may exercise your rights by contacting us at the contact details provided in Article6 (“Contact”).

You also have the right to lodge a complaint with the competent supervisory authority regarding the processing of your data. In France, the supervisory authority for the protection of personal data is CNIL (www.cnil.fr).

 

  1. CONTACT

For more information about your rights, to exercise them, or for any questions or complaints regarding the protection of your personal data, please contact us at contact@microbiome-foundation.org.

  1. 7. CHANGES TO THE PRIVACY POLICY

We may amend this Privacy Policy from time to time, for example to take into account changes in the law, technological advances, and good business practices. We will notify you in the event of any substantive changes. We will notify you in the event of any substantive changes.

 

Lastupdated on 25 June 2020