{"id":3,"date":"2025-11-30T00:27:16","date_gmt":"2025-11-29T23:27:16","guid":{"rendered":"https:\/\/www.yes.bzh\/?page_id=3"},"modified":"2025-12-04T16:05:26","modified_gmt":"2025-12-04T15:05:26","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.yes.bzh\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<p><em>Last updated: December 2025<\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Who is responsible for the processing?<\/h2>\n\n\n\n<p>This website <strong>www.yes.bzh<\/strong> is published by the association :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Name :<\/strong> Yes Breizh<\/li>\n\n\n\n<li><strong>Form :<\/strong> association loi 1901<\/li>\n\n\n\n<li><strong>SIREN :<\/strong> 991 979 568<\/li>\n\n\n\n<li><strong>Registered office:<\/strong> 75 rue du Rody, 29490 Guipavas, France<\/li>\n\n\n\n<li><strong>Contact email :<\/strong> <a href=\"mailto:darempred@yes.bzh\">darempred@yes.bzh<\/a><\/li>\n<\/ul>\n\n\n\n<p>Yes Breizh acts as <strong>data controller<\/strong> for personal data collected and processed via this site.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. What data do we collect and for what purposes?<\/h2>\n\n\n\n<p>We only collect data that is strictly necessary for the purposes described below.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.1. Contact and committee forms (Contact Form 7)<\/h3>\n\n\n\n<p><strong>Data collected :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Full name<\/li>\n\n\n\n<li>E-mail address<\/li>\n\n\n\n<li>Telephone number (committee form)<\/li>\n\n\n\n<li>Municipality (committee form)<\/li>\n\n\n\n<li>Message content<\/li>\n<\/ul>\n\n\n\n<p><strong>Purpose :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Responding to your contact requests<\/li>\n\n\n\n<li>Organising and leading local committees (making contacts, establishing relationships, follow-up)<\/li>\n<\/ul>\n\n\n\n<p><strong>Legal basis :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Legitimate interest<\/strong> Yes Breizh to respond to requests and structure its citizens' committees<\/li>\n\n\n\n<li>Where applicable, <strong>pre-contractual measures<\/strong> (if the application is for future membership or cooperation)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">2.2. Newsletter (Brevo)<\/h3>\n\n\n\n<p><strong>Data collected :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>E-mail address<\/li>\n\n\n\n<li>First name and surname (if requested on the form)<\/li>\n<\/ul>\n\n\n\n<p><strong>Purpose :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Sending information about Yes Breizh: news, publications, calls for action, life of the movement, etc.<\/li>\n<\/ul>\n\n\n\n<p><strong>Legal basis :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Consent<\/strong> (you voluntarily subscribe to the newsletter and can unsubscribe at any time)<\/li>\n<\/ul>\n\n\n\n<p><strong>Tool used :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The newsletter is managed using the <strong>Brevo<\/strong> (ex-Sendinblue).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">2.3. Memberships and donations (HelloAsso &amp; PayPal)<\/h3>\n\n\n\n<p>Memberships and donations to Yes Breizh are managed via the following platforms <strong>HelloAsso<\/strong> and <strong>PayPal<\/strong>.<\/p>\n\n\n\n<p><strong>Data collected via these platforms :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Identity (surname, first name)<\/li>\n\n\n\n<li>Contact details (address, e-mail)<\/li>\n\n\n\n<li>Amount and details of membership or donation<\/li>\n\n\n\n<li>Payment details (managed by HelloAsso and PayPal)<\/li>\n<\/ul>\n\n\n\n<p><strong>Purpose :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Managing membership of the association<\/li>\n\n\n\n<li>Management of donations and associated accounting<\/li>\n\n\n\n<li>Monitoring relations with members and donors<\/li>\n<\/ul>\n\n\n\n<p><strong>Legal basis :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Performance of the contract<\/strong> (membership, donation)<\/li>\n\n\n\n<li><strong>Legal obligations<\/strong> accounting and tax matters<\/li>\n<\/ul>\n\n\n\n<p>HelloAsso and PayPal act as processors for the payment part and have their own processing centres. <strong>own confidentiality policies<\/strong>, to which we invite you to refer.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.4. Comments on the site<\/h3>\n\n\n\n<p><strong>Data collected :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Name or pseudonym<\/li>\n\n\n\n<li>E-mail address<\/li>\n\n\n\n<li>Content of the commentary<\/li>\n\n\n\n<li>IP address (for anti-spam purposes)<\/li>\n<\/ul>\n\n\n\n<p><strong>Purpose :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Allowing visitors to express themselves via comments<\/li>\n\n\n\n<li>Moderation and prevention of abuse (spam, illegal comments, etc.)<\/li>\n<\/ul>\n\n\n\n<p><strong>Legal basis :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Legitimate interest<\/strong> Yes Breizh to run and secure a forum for debate<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">2.5. Audience measurement (Google Analytics 4)<\/h3>\n\n\n\n<p><strong>Data collected :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Browsing data (pages visited, clicks, length of visit, etc.)<\/li>\n\n\n\n<li>Technical identifiers (shortened\/anonymised IP address, browser type and version, device, etc.)<\/li>\n<\/ul>\n\n\n\n<p><strong>Purpose :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Measuring site traffic<\/li>\n\n\n\n<li>Improving content and ergonomics<\/li>\n<\/ul>\n\n\n\n<p><strong>Legal basis :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Consent<\/strong> via the cookies banner, for cookies and trackers that are not strictly necessary<\/li>\n<\/ul>\n\n\n\n<p>The solution used is <strong>Google Analytics 4 (GA4)<\/strong>. You can refuse these cookies at any time using the cookie management module.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.6. Technical logging and security<\/h3>\n\n\n\n<p>For security purposes and to ensure the smooth operation of the site, technical logs may be kept (IP addresses, time stamps, URLs consulted, etc.), in particular by the host.<\/p>\n\n\n\n<p><strong>Purpose :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Ensuring site safety<\/li>\n\n\n\n<li>Prevent or detect malicious activity<\/li>\n\n\n\n<li>Enable diagnostics in the event of a technical incident<\/li>\n<\/ul>\n\n\n\n<p><strong>Legal basis :<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Legitimate interest<\/strong> Yes Breizh to secure its website and services<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">3. Data retention period<\/h2>\n\n\n\n<p>We keep your personal data for limited periods, proportionate to the purposes for which it is held and to legal obligations.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Contact forms :<\/strong> the data is kept for a maximum of <strong>3 years<\/strong> from the last contact, then deleted or anonymised.<\/li>\n\n\n\n<li><strong>Committee forms :<\/strong> the data is kept for the duration of participation in the life of the committee, then at the most <strong>3 years<\/strong> after the last exchange or withdrawal request.<\/li>\n\n\n\n<li><strong>Newsletter (Brevo) :<\/strong> the data is kept until you unsubscribe. In the event of prolonged inactivity, data may be deleted or anonymised after a period of <strong>3 years<\/strong>.<\/li>\n\n\n\n<li><strong>Memberships and donations (HelloAsso &amp; PayPal) :<\/strong> the data required for accounting purposes is kept for the applicable legal period (generally <strong>6 to 10 years<\/strong> for accounting documents), in accordance with legal requirements.<\/li>\n\n\n\n<li><strong>Comments :<\/strong> comments may be kept for as long as the site is online, unless a request for deletion or a particular obligation (moderation, litigation, etc.) is made.<\/li>\n\n\n\n<li><strong>Audience measurement (GA4) :<\/strong> Statistical data are generally kept for a period of between <strong>14 and 26 months<\/strong>, depending on how the tool is set up.<\/li>\n\n\n\n<li><strong>Technical journals :<\/strong> logs required for security purposes are kept for a limited period of time, in general <strong>12 months maximum<\/strong>, unless there is a particular need.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">4. Data recipients and processors<\/h2>\n\n\n\n<p>Access to personal data is strictly limited:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Authorised members of Yes Breizh, as part of their duties (management of the site, committees, communication, etc.).<\/li>\n\n\n\n<li>To our technical service providers and subcontractors acting on our behalf and in accordance with our instructions:\n<ul class=\"wp-block-list\">\n<li><strong>TrendyCorp<\/strong> (website maintenance and development) ;<\/li>\n\n\n\n<li><strong>OVH<\/strong> (website hosting) ;<\/li>\n\n\n\n<li><strong>Brevo<\/strong> for sending the newsletter; ;<\/li>\n\n\n\n<li><strong>HelloAsso<\/strong> and <strong>PayPal<\/strong> for managing memberships and donations; ;<\/li>\n\n\n\n<li><strong>Google<\/strong> for audience measurement (Google Analytics 4).<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p>These service providers are subject to an obligation of confidentiality and may under no circumstances use your data for any purpose other than to provide services for Yes Breizh.<\/p>\n\n\n\n<p>The data is not <strong>never sold<\/strong> to third parties.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">5. Data transfers outside the European Union<\/h2>\n\n\n\n<p>Some of the third-party services we use (in particular Google Analytics, and possibly certain features of Brevo or PayPal) may involve the use of cookies. <strong>data transfers outside the European Union<\/strong>.<\/p>\n\n\n\n<p>In this case, these transfers are governed by the appropriate legal mechanisms (such as the <strong>standard contractual clauses<\/strong> approved by the European Commission or adequacy decisions), in order to guarantee an adequate level of protection for your personal data.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6. Data security<\/h2>\n\n\n\n<p>We are setting up <strong>technical and organisational measures<\/strong> adapted to protect your personal data against loss, unauthorised access, modification, disclosure or destruction.<\/p>\n\n\n\n<p>This includes<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Website hosted by <strong>OVH<\/strong>, in France; ;<\/li>\n\n\n\n<li>Restricted access to the site's back office and the tools used, reserved for authorised persons; ;<\/li>\n\n\n\n<li>Regular updates of the site and extensions; ;<\/li>\n\n\n\n<li>Use strong passwords and, where possible, two-factor authentication.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">7. Your rights to your data<\/h2>\n\n\n\n<p>In accordance with the General Data Protection Regulation (RGPD) and the French Data Protection Act (Loi Informatique et Libert\u00e9s), you have the following rights with regard to your personal data:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Right of access<\/strong> To obtain confirmation that data concerning you is being processed and, if necessary, to receive a copy of it; ;<\/li>\n\n\n\n<li><strong>Right of rectification<\/strong> To request the correction of inaccurate or incomplete data; ;<\/li>\n\n\n\n<li><strong>Right to erasure<\/strong> request the deletion of your data within the limits set by law; ;<\/li>\n\n\n\n<li><strong>Right to object<\/strong> To object to certain processing operations, in particular e-mail canvassing; ;<\/li>\n\n\n\n<li><strong>Right to limitation<\/strong> request temporary suspension of treatment ;<\/li>\n\n\n\n<li><strong>Right to portability<\/strong> To receive the data you have provided in a structured format, where processing is based on consent or contract and carried out using automated processes; ;<\/li>\n\n\n\n<li><strong>Right to define post-mortem directives<\/strong> about what happens to your data after your death.<\/li>\n<\/ul>\n\n\n\n<p>To exercise your rights, please contact us at the following address:<\/p>\n\n\n\n<p><strong>Yes Breizh<\/strong><br>75 rue du Rody<br>29490 Guipavas - France<br>E-mail : <a href=\"mailto:darempred@yes.bzh\">darempred@yes.bzh<\/a><\/p>\n\n\n\n<p>We will endeavour to respond to your request within one month, which may be extended if the request is complex or if there is a large number of requests.<\/p>\n\n\n\n<p>If, after contacting us, you feel that your rights have not been respected, you may lodge a complaint with the\u2019<strong>competent supervisory authority<\/strong> :<\/p>\n\n\n\n<p><strong>CNIL<\/strong> - Commission Nationale de l'Informatique et des Libert\u00e9s (French Data Protection Authority)<br><a href=\"https:\/\/www.cnil.fr\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.cnil.fr<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">8. Cookies and tracers<\/h2>\n\n\n\n<p>The use of cookies and other tracers on the site is the subject of specific information in our <strong>Cookie policy \/ Cookie management<\/strong>, accessible from the site footer.<\/p>\n\n\n\n<p>A consent banner allows you to accept, refuse or configure non-essential cookies at any time.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">9. Changes to this policy<\/h2>\n\n\n\n<p>This privacy policy may be amended to take account of legal, regulatory, technical or organisational developments.<\/p>\n\n\n\n<p>In the event of significant changes, we may inform you by any appropriate means. The most recent version will always be available on this page.<\/p>","protected":false},"excerpt":{"rendered":"<p>Last update: December 2025 1. Who is responsible for processing? This www.yes.bzh website is published by the association: Yes Breizh acts as the data controller...<\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.yes.bzh\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.yes.bzh\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.yes.bzh\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.yes.bzh\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.yes.bzh\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":3,"href":"https:\/\/www.yes.bzh\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":1157,"href":"https:\/\/www.yes.bzh\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/1157"}],"wp:attachment":[{"href":"https:\/\/www.yes.bzh\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}