{"id":16541,"date":"2026-08-15T16:02:48","date_gmt":"2026-08-15T16:02:48","guid":{"rendered":"https:\/\/achrights.org\/?page_id=16541"},"modified":"2026-08-15T16:03:13","modified_gmt":"2026-08-15T16:03:13","slug":"16541-2","status":"publish","type":"page","link":"https:\/\/achrights.fr\/en\/16541-2\/","title":{"rendered":"Our Privacy Policy"},"content":{"rendered":"\n<p><strong>1. Data Controller<\/strong><\/p>\n\n\n\n<p>Access Center for Human Rights (ACHR), a French non-profit association governed by the law of 1 July 1901, registered under RNA n\u00b0 W931023779, with its registered office at 7 Rue Puteaux, 75017 Paris, France, represented by its President. For any question relating to personal data, please contact:&nbsp;<strong>info@achrights.org<\/strong>.<\/p>\n\n\n\n<p><strong>2. No Cookies or Trackers<\/strong><\/p>\n\n\n\n<p>The website does not deposit any cookies, does not use any audience measurement tool, and does not embed any third-party content likely to collect browsing data. No consent banner is therefore required.<\/p>\n\n\n\n<p><strong>3. Data Processed and Purposes<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Data<\/strong><\/td><td>Identity and role, professional contact details, content of correspondence and any documents or testimonies voluntarily submitted (including, where relevant, information relating to human rights violations).<\/td><\/tr><tr><td><strong>Purposes<\/strong><\/td><td>Responding to inquiries received; documenting and analysing human rights situations; providing advocacy, legal referral or support assistance; managing relationships with partners, members, volunteers and donors; sending the periodic newsletter to subscribers who requested it; complying with legal and accounting obligations; and ensuring the security and confidentiality of the organisation&#8217;s work, including the protection of victims, witnesses and human rights defenders.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>No data is used for commercial prospecting and the organisation does not conduct any commercial canvassing. The newsletter is sent only to persons who have subscribed and may be unsubscribed from at any time via a link in each email or by writing to&nbsp;<strong><a href=\"mailto:info@achrights.org\">info@achrights.org<\/a><\/strong>&nbsp;OR&nbsp;<a href=\"mailto:newsletter@achrights.org\">newsletter@achrights.org<\/a><\/p>\n\n\n\n<p><strong>4. Legal Bases<\/strong><\/p>\n\n\n\n<p>\u2022 Legitimate interest (Art. 6(1)(f) GDPR): responding to inquiries, documentation and analysis of human rights situations, and protection of the organisation&#8217;s work and its sources.<\/p>\n\n\n\n<p>\u2022 Consent (Art. 6(1)(a), and Art. 9(2)(a) where special category data is concerned): collection of personal testimonies and accounts, in particular where they reveal sensitive information (e.g. health, ethnic origin, political opinions, sexual orientation, or data relating to alleged offences).<\/p>\n\n\n\n<p>\u2022 Consent (Art. 6(1)(a)): sending the newsletter to subscribers, withdrawable at any time.<\/p>\n\n\n\n<p>\u2022 Legal obligation (Art. 6(1)(c)): accounting and tax record-keeping.<\/p>\n\n\n\n<p>\u2022 Substantial public interest (Art. 9(2)(g)), where applicable, for human rights monitoring and reporting to competent national or international bodies.<\/p>\n\n\n\n<p><strong>5. Recipients and Processors<\/strong><\/p>\n\n\n\n<p>Data is neither sold nor transferred to third parties for commercial purposes. It is accessible to the President and, where relevant, to the following providers acting as processors under an agreement compliant with Article 28 GDPR:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Website hosting<\/strong><\/td><td>Infomaniak Network SA \u2014 Switzerland<\/td><\/tr><tr><td><strong>Email<\/strong><\/td><td>Google Workspace<\/td><\/tr><tr><td><strong>Storage<\/strong><\/td><td>Microsoft (Microsoft 365 \/ OneDrive)<\/td><\/tr><tr><td><strong>Accounting software<\/strong><\/td><td>QuickBooks<\/td><\/tr><tr><td><strong>Chartered accountant<\/strong><\/td><td>CABINET COGEX \u2014 France<\/td><\/tr><tr><td><strong>Legal counsel<\/strong><\/td><td>Soprogex &amp; 2k<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>Independent experts occasionally engaged by the organisation are subject to confidentiality and security obligations at least equivalent to those above, and only access what is strictly necessary for their assignment.<\/p>\n\n\n\n<p><strong>6. Transfers Outside the European Union<\/strong><\/p>\n\n\n\n<p>Transfers to Switzerland (Infomaniak) take place under the adequacy decision adopted by the European Commission in respect of Switzerland. Transfers to the United States (Google, Microsoft) are governed by the Standard Contractual Clauses adopted by the European Commission and, where applicable, by supplementary safeguards implemented by the provider.<\/p>\n\n\n\n<p><strong>7. Retention Periods<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Unanswered inquiries<\/strong><\/td><td>3 years from the last contact.<\/td><\/tr><tr><td><strong>Case and advocacy files<\/strong><\/td><td>10 years after the end of the matter or relationship, subject to any longer retention required by law.<\/td><\/tr><tr><td><strong>Testimonies and documentation of human rights violations<\/strong><\/td><td>Retained for as long as necessary for advocacy, accountability and historical record purposes, under enhanced security and, where possible, pseudonymisation to protect victims and witnesses.<\/td><\/tr><tr><td><strong>Newsletter subscribers<\/strong><\/td><td>Until unsubscription, or after 3 years of inactivity.<\/td><\/tr><tr><td><strong>Accounting and tax records<\/strong><\/td><td>10 years, in accordance with legal obligations.<\/td><\/tr><tr><td><strong>Unsuccessful applications<\/strong><\/td><td>3 years after the last contact with the candidate, unless earlier deletion is requested.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p><strong>8. Your Rights<\/strong><\/p>\n\n\n\n<p>You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability and to withdraw consent where processing is based on it. These rights may be exercised by email at&nbsp;<strong>info@achrights.org<\/strong>&nbsp;or by post to the registered office; a response will be provided within one month. Certain rights may be limited where retention is required by law or necessary to establish evidence, in particular to protect the safety of victims, witnesses or third parties. You may lodge a complaint with the Commission nationale de l&#8217;informatique et des libert\u00e9s (CNIL), 3 place de Fontenoy, 75334 Paris Cedex 07 \u2014 www.cnil.fr.<\/p>\n\n\n\n<p><strong>9. Security<\/strong><\/p>\n\n\n\n<p>The website is served exclusively over HTTPS. Data is stored on encrypted systems, protected by two-factor authentication and access restricted to what is strictly necessary. The organisation applies an internal information classification and handling policy, uses pseudonymisation where appropriate to protect the identity of victims, witnesses and human rights defenders, and handles any data breach in accordance with its legal obligations.<\/p>\n\n\n\n<p><em>Last updated: 15 August 2026<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>1. Data Controller Access Center for Human Rights (ACHR), a French non-profit association governed by the law of 1 July 1901, registered under RNA n\u00b0 W931023779, with its registered office at 7 Rue Puteaux, 75017 Paris, France, represented by its President. For any question relating to personal data, please contact:&nbsp;info@achrights.org. 2. No Cookies or Trackers [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"om_disable_all_campaigns":false,"footnotes":""},"class_list":["post-16541","page","type-page","status-publish"],"_links":{"self":[{"href":"https:\/\/achrights.fr\/en\/wp-json\/wp\/v2\/pages\/16541","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/achrights.fr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/achrights.fr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/achrights.fr\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/achrights.fr\/en\/wp-json\/wp\/v2\/comments?post=16541"}],"version-history":[{"count":2,"href":"https:\/\/achrights.fr\/en\/wp-json\/wp\/v2\/pages\/16541\/revisions"}],"predecessor-version":[{"id":16544,"href":"https:\/\/achrights.fr\/en\/wp-json\/wp\/v2\/pages\/16541\/revisions\/16544"}],"wp:attachment":[{"href":"https:\/\/achrights.fr\/en\/wp-json\/wp\/v2\/media?parent=16541"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}