Privacy Policy - Accréditation Sans Frontières

Accréditation Sans Frontières (ASF) is a non-profit organisation registered in France, headquartered at 32, Boulevard de Rochechouart, 75018 Paris, France. We operate this website and the services associated with it. This Privacy Policy explains how we collect, use, store, share and protect personal data when you interact with france-asf.fr or contact us directly.

This policy is designed to comply with the following applicable legal frameworks: the EU General Data Protection Regulation (GDPR 2016/679); the French Loi Informatique et Libertés (as amended); the Swiss Federal Act on Data Protection (nFADP, in force 1 September 2023); the Georgian Law on Personal Data Protection; Canadian privacy legislation including PIPEDA and provincial equivalents; and, where applicable, United States state privacy laws including the California Consumer Privacy Act (CCPA/CPRA).

1. Data controller

The data controller is Accréditation Sans Frontières, 32, Boulevard de Rochechouart, 75018 Paris, France. Contact: info@accreditation.ge.

2. Data we collect and why

2.1 Data you provide directly

When you use our contact form, we collect your name, organisation, country, email address, telephone number (optional) and the content of your message. Legal basis: legitimate interests (to respond to your enquiry) and, where relevant, pre-contractual measures.

2.2 Technical data collected automatically

When you visit france-asf.fr, our server logs collect your IP address, browser type, operating system, referring URL and pages visited. This data is used solely for security and performance monitoring and is retained for a maximum of 90 days. Legal basis: legitimate interests.

2.3 Cookies

We use only strictly necessary cookies required for the website to function. We do not use advertising cookies, tracking pixels or third-party analytics without your explicit consent. See our Cookie Policy for full details.

3. How we use your data

We use the data we collect to: respond to your enquiry or request; process membership applications and administer accreditation relationships; send you information you have requested; comply with legal obligations; protect the security and integrity of our systems.

We do not sell, rent or trade your personal data to any third party. We do not use your data for automated profiling or decision-making.

4. Data sharing

We may share your data with: our operational partners (PHIG, Georgian Medical Journal) where strictly necessary for the delivery of services you have requested; service providers who process data on our behalf under a data processing agreement (e.g. hosting provider Hostnodes); competent authorities where required by law.

Any transfer of personal data outside the European Economic Area or Switzerland is carried out under appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

5. Retention

Contact form data is retained for 24 months from last contact unless you ask us to delete it sooner. Accreditation records are retained for the duration of the accreditation relationship plus 5 years. Server logs are retained for 90 days.

6. Your rights

Depending on your jurisdiction, you have the right to: access your personal data; correct inaccurate data; request erasure (“right to be forgotten”); restrict or object to processing; request data portability; withdraw consent at any time (where processing is based on consent); lodge a complaint with a supervisory authority.

EU/EEA residents: Your supervisory authority is the CNIL (Commission Nationale de l’Informatique et des Libertés), cnil.fr.
Swiss residents: Your supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch.
Georgian residents: Your supervisory authority is the Personal Data Protection Service of Georgia.
Canadian residents: You may contact the Office of the Privacy Commissioner of Canada, priv.gc.ca.
California residents (CCPA/CPRA): You have the right to know, delete, and opt out of the sale of personal information. ASF does not sell personal information. To exercise your rights, contact us at info@accreditation.ge.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Our website is hosted on secured servers with TLS encryption (HTTPS). Access to personal data is restricted to authorised personnel only.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent update. Continued use of our website after a change constitutes acceptance of the updated policy.

9. Contact

To exercise your rights or ask any question about this policy: info@accreditation.ge — Accréditation Sans Frontières, 32, Boulevard de Rochechouart, 75018 Paris, France.