Privacy policy

This Privacy Policy describes how and why Dandelign ("we," "us," or "our"), an enterprise currently in the process of formation/registration (nom propre) in France, processes your personal information when you use our services (the "Services"), including when you visit https://dandelign.org/ (the "Site").

Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services.

SUMMARY OF KEY POINTS

• What personal information do we process? The Site does not require an account, so we don't collect names, emails, or passwords. We automatically collect limited, anonymised technical/usage data, and a favourites cookie that is only set once you consent.
• Do we process any sensitive personal information? No.
• How do we process your information? To operate, secure, and improve the Site, and to comply with the law. We only process data when we have a valid legal basis under the GDPR.
• Do we process donations? The donation flow is currently a demonstration only — see Donations below.
• With whom do we share personal information? We don't share personal data with third parties, since we don't collect account or payment data.
• What are your rights? Because the Site is operated from France, you have full rights under the GDPR, including the right to access, correct, or delete your personal data.

TABLE OF CONTENTS

1. What Information Do We Collect?
2. How Do We Process Your Information?
3. Donations
4. Do We Use Cookies and Other Tracking Technologies?
5. Is Your Information Transferred Internationally?
6. How Long Do We Keep Your Information?
7. Do We Collect Information From Minors?
8. What Are Your Privacy Rights?
9. Controls For Do-Not-Track Features
10. Do We Make Updates To This Notice?
11. How Can You Contact Us About This Notice?
12. Charity Data

1. WHAT INFORMATION DO WE COLLECT?

Information you provide

The Site does not require registration or an account. If you contact us directly (for example via the contact form), we collect the email address and message you provide, solely to respond to you.

Information automatically collected

We use a self-hosted instance of Umami to collect anonymised usage statistics (page URL, referrer, country, browser, screen size). No cookies are set for analytics, no IP addresses are stored, and visitor identifiers are derived from a daily-rotating salted hash, making them unlinkable across days. Data is stored on our own infrastructure inside the EU and is not shared with any third party.

Favourites cookie

If you save a charity as a favourite, we store the organisation number in a cookie on your device. This cookie is only set once you accept it via the cookie banner and is never sent to our servers. You can change your choice at any time using the "Manage cookies" link in the footer.

2. HOW DO WE PROCESS YOUR INFORMATION?

• To operate and secure the Site: to keep it running reliably and to protect it from abuse.
• To improve the Site: aggregated, anonymised analytics help us understand which features are useful.
• To respond to you: if you contact us, we use the information you provide solely to reply.

Legal bases: Legitimate interest (GDPR Art. 6(1)(f)) for analytics and security; consent (Art. 6(1)(a)) for the favourites cookie.

3. DONATIONS

The Site currently includes a donation flow that is a demonstration only — no real payment is taken, and no payment or card data is collected, transmitted, or stored by Dandelign or any third party. When live payment processing is introduced, it will be handled by a PCI-compliant, EU-based payment provider that never shares full card details with us, and this Privacy Policy will be updated accordingly before that feature goes live.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We use only one cookie: the favourites cookie described above, set solely with your consent via the cookie banner. We do not use analytics or advertising cookies, web beacons, or pixels. You can accept, reject, or change your choice at any time via the "Manage cookies" link in the footer, or by changing your browser settings.

5. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

The Site is hosted by HOSTINGER Operations UAB, Švitrigailos str. 34, Vilnius 03230, Lithuania, within the European Union. If you access the Site from outside the EU, the limited data described above is still processed within the EU.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We do not retain analytics data linked to you personally, since visitor identifiers rotate daily and are not stored beyond aggregate statistics. The favourites cookie persists on your device until you clear it or withdraw consent. Messages sent to us via the contact form are kept only as long as necessary to handle your request.

7. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect data from individuals under 18 years of age. By using the Site, you represent that you are at least 18 years old.

8. WHAT ARE YOUR PRIVACY RIGHTS?

Because the Site is operated from France, you have the following rights under the GDPR:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data where we have no legal reason to keep it.
• Right to restrict or object to processing — object to or limit how we use your data.
• Right to data portability — request a copy of your data in a machine-readable format.
• Right to withdraw consent — withdraw consent (e.g. for the favourites cookie) at any time.

To exercise any of these rights, contact us at contact@dandelign.org. If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés), at cnil.fr.

9. CONTROLS FOR DO-NOT-TRACK FEATURES

Most browsers include a Do-Not-Track ("DNT") setting. Because no uniform industry standard exists for recognising DNT signals, the Site does not currently respond to them — though, as described above, we already minimise data collection by design.

10. DO WE MAKE UPDATES TO THIS NOTICE?

Yes. We will update this policy as needed to reflect changes to the Site or to applicable law. Any revision will be marked by an updated "Last updated" date at the top of this page.

11. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

Questions about this policy, or requests to access, correct, or delete your data? Email us at contact@dandelign.org.

Data Protection Officer: Xavier Warluzel.

12. CHARITY DATA

All charity information displayed on this Site is sourced from the UK Charity Commission Register, which is published as open data under the Open Government Licence.