Privacy policy

from Yes Breizh

Last updated: December 2025

1. Who is responsible for the processing?

This website www.yes.bzh is published by the association :

  • Name : Yes Breizh
  • Form : association loi 1901
  • SIREN : 991 979 568
  • Registered office: 75 rue du Rody, 29490 Guipavas, France
  • Contact email : darempred@yes.bzh

Yes Breizh acts as data controller for personal data collected and processed via this site.

2. What data do we collect and for what purposes?

We only collect data that is strictly necessary for the purposes described below.

2.1. Contact and committee forms (Contact Form 7)

Data collected :

  • Full name
  • E-mail address
  • Telephone number (committee form)
  • Municipality (committee form)
  • Message content

Purpose :

  • Responding to your contact requests
  • Organising and leading local committees (making contacts, establishing relationships, follow-up)

Legal basis :

  • Legitimate interest Yes Breizh to respond to requests and structure its citizens' committees
  • Where applicable, pre-contractual measures (if the application is for future membership or cooperation)

2.2. Newsletter (Brevo)

Data collected :

  • E-mail address
  • First name and surname (if requested on the form)

Purpose :

  • Sending information about Yes Breizh: news, publications, calls for action, life of the movement, etc.

Legal basis :

  • Consent (you voluntarily subscribe to the newsletter and can unsubscribe at any time)

Tool used :

  • The newsletter is managed using the Brevo (ex-Sendinblue).

2.3. Memberships and donations (HelloAsso & PayPal)

Memberships and donations to Yes Breizh are managed via the following platforms HelloAsso and PayPal.

Data collected via these platforms :

  • Identity (surname, first name)
  • Contact details (address, e-mail)
  • Amount and details of membership or donation
  • Payment details (managed by HelloAsso and PayPal)

Purpose :

  • Managing membership of the association
  • Management of donations and associated accounting
  • Monitoring relations with members and donors

Legal basis :

  • Performance of the contract (membership, donation)
  • Legal obligations accounting and tax matters

HelloAsso and PayPal act as processors for the payment part and have their own processing centres. own confidentiality policies, to which we invite you to refer.

2.4. Comments on the site

Data collected :

  • Name or pseudonym
  • E-mail address
  • Content of the commentary
  • IP address (for anti-spam purposes)

Purpose :

  • Allowing visitors to express themselves via comments
  • Moderation and prevention of abuse (spam, illegal comments, etc.)

Legal basis :

  • Legitimate interest Yes Breizh to run and secure a forum for debate

2.5. Audience measurement (Google Analytics 4)

Data collected :

  • Browsing data (pages visited, clicks, length of visit, etc.)
  • Technical identifiers (shortened/anonymised IP address, browser type and version, device, etc.)

Purpose :

  • Measuring site traffic
  • Improving content and ergonomics

Legal basis :

  • Consent via the cookies banner, for cookies and trackers that are not strictly necessary

The solution used is Google Analytics 4 (GA4). You can refuse these cookies at any time using the cookie management module.

2.6. Technical logging and security

For security purposes and to ensure the smooth operation of the site, technical logs may be kept (IP addresses, time stamps, URLs consulted, etc.), in particular by the host.

Purpose :

  • Ensuring site safety
  • Prevent or detect malicious activity
  • Enable diagnostics in the event of a technical incident

Legal basis :

  • Legitimate interest Yes Breizh to secure its website and services

3. Data retention period

We keep your personal data for limited periods, proportionate to the purposes for which it is held and to legal obligations.

  • Contact forms : the data is kept for a maximum of 3 years from the last contact, then deleted or anonymised.
  • Committee forms : the data is kept for the duration of participation in the life of the committee, then at the most 3 years after the last exchange or withdrawal request.
  • Newsletter (Brevo) : the data is kept until you unsubscribe. In the event of prolonged inactivity, data may be deleted or anonymised after a period of 3 years.
  • Memberships and donations (HelloAsso & PayPal) : the data required for accounting purposes is kept for the applicable legal period (generally 6 to 10 years for accounting documents), in accordance with legal requirements.
  • Comments : comments may be kept for as long as the site is online, unless a request for deletion or a particular obligation (moderation, litigation, etc.) is made.
  • Audience measurement (GA4) : Statistical data are generally kept for a period of between 14 and 26 months, depending on how the tool is set up.
  • Technical journals : logs required for security purposes are kept for a limited period of time, in general 12 months maximum, unless there is a particular need.

4. Data recipients and processors

Access to personal data is strictly limited:

  • Authorised members of Yes Breizh, as part of their duties (management of the site, committees, communication, etc.).
  • To our technical service providers and subcontractors acting on our behalf and in accordance with our instructions:
    • TrendyCorp (website maintenance and development) ;
    • OVH (website hosting) ;
    • Brevo for sending the newsletter; ;
    • HelloAsso and PayPal for managing memberships and donations; ;
    • Google for audience measurement (Google Analytics 4).

These service providers are subject to an obligation of confidentiality and may under no circumstances use your data for any purpose other than to provide services for Yes Breizh.

The data is not never sold to third parties.

5. Data transfers outside the European Union

Some of the third-party services we use (in particular Google Analytics, and possibly certain features of Brevo or PayPal) may involve the use of cookies. data transfers outside the European Union.

In this case, these transfers are governed by the appropriate legal mechanisms (such as the standard contractual clauses approved by the European Commission or adequacy decisions), in order to guarantee an adequate level of protection for your personal data.

6. Data security

We are setting up technical and organisational measures adapted to protect your personal data against loss, unauthorised access, modification, disclosure or destruction.

This includes

  • Website hosted by OVH, in France; ;
  • Restricted access to the site's back office and the tools used, reserved for authorised persons; ;
  • Regular updates of the site and extensions; ;
  • Use strong passwords and, where possible, two-factor authentication.

7. Your rights to your data

In accordance with the General Data Protection Regulation (RGPD) and the French Data Protection Act (Loi Informatique et Libertés), you have the following rights with regard to your personal data:

  • Right of access To obtain confirmation that data concerning you is being processed and, if necessary, to receive a copy of it; ;
  • Right of rectification To request the correction of inaccurate or incomplete data; ;
  • Right to erasure request the deletion of your data within the limits set by law; ;
  • Right to object To object to certain processing operations, in particular e-mail canvassing; ;
  • Right to limitation request temporary suspension of treatment ;
  • Right to portability To receive the data you have provided in a structured format, where processing is based on consent or contract and carried out using automated processes; ;
  • Right to define post-mortem directives about what happens to your data after your death.

To exercise your rights, please contact us at the following address:

Yes Breizh
75 rue du Rody
29490 Guipavas - France
E-mail : darempred@yes.bzh

We will endeavour to respond to your request within one month, which may be extended if the request is complex or if there is a large number of requests.

If, after contacting us, you feel that your rights have not been respected, you may lodge a complaint with the’competent supervisory authority :

CNIL - Commission Nationale de l'Informatique et des Libertés (French Data Protection Authority)
https://www.cnil.fr

8. Cookies and tracers

The use of cookies and other tracers on the site is the subject of specific information in our Cookie policy / Cookie management, accessible from the site footer.

A consent banner allows you to accept, refuse or configure non-essential cookies at any time.

9. Changes to this policy

This privacy policy may be amended to take account of legal, regulatory, technical or organisational developments.

In the event of significant changes, we may inform you by any appropriate means. The most recent version will always be available on this page.