This policy describes how HASDI, as data controller, protects the personal data of its donors, its members and the beneficiaries of its programmes, in accordance with the General Data Protection Regulation (GDPR) and French data protection law. It is distinct from the website's privacy policy, which covers browsing on this site.
Legal bases
Each processing operation rests on an identified legal basis: the performance of a contract or pre-contractual measures (membership, donations), compliance with a legal obligation (accounting, statutory declarations), consent (newsletters) or the organisation's legitimate interest, assessed against the rights and freedoms of the individuals concerned.
Retention periods
Data are kept for limited periods, documented for each processing operation, and are then deleted or anonymised. The periods applied take account of applicable legal obligations, in particular accounting rules.
Your rights
Everyone has the right to access, rectify and erase the data concerning them, and the rights to restriction, objection and portability. To exercise these rights, write to contact@hasdi-initiative.org. You may also lodge a complaint with the CNIL, the French supervisory authority.
Our commitments
HASDI never transfers, rents or sells the personal data it processes. Data are shared only with the service providers strictly necessary to our activities, under contractual arrangements compliant with the GDPR.
Enhanced protection in a humanitarian context
The data of our programme beneficiaries and of people who report a concern receive enhanced protection: strict data minimisation, access restricted to authorised persons only and specific confidentiality for safeguarding reports. This requirement also binds our implementing partners.