PRIVACY
AND COOKIES.
Updated: 14 September 2026.
Controller and contact
Génération R92 manages enquiries addressed to the association. For questions or data rights requests, contact generationr92@gmail.com.
Your enquiries
Forms collect your last name, first name, phone number, email, enquiry type and any details you provide. The four contact fields are required to submit the form; you may also email us directly. Phone numbers support follow-up and participation arrangements. Do not include health information, identity documents or banking details.
We use enquiries to reply and arrange volunteering, participation, partnerships and support. Our basis is the association’s legitimate interest in handling enquiries voluntarily addressed to it. Enquiries preparing a membership or partnership agreement may instead involve pre-contractual steps at your request. Forms do not subscribe you to a newsletter. Data is not sold.
Recipients and providers
Authorised association officers handle enquiries. FormSubmit receives submitted details and forwards them to our Gmail inbox, operated by Google. The site database stores no copy of these messages. Sites (OpenAI), using Cloudflare infrastructure, handles site delivery and access.
FormSubmit states that its submission archive lasts 30 days in its documentation. See the privacy policies of FormSubmit and Google. The association still needs to verify provider contracts, processing locations and safeguards for any transfers outside the European Economic Area. Exclusively European hosting is not guaranteed.
Retention
For enquiries that do not lead to further involvement, the management rule is deletion of emails within 12 months of the last exchange. Officers must clean up the inbox manually: the site cannot access or automatically delete its messages. When an enquiry leads to membership, a donation or a partnership, necessary records are handled separately according to the relationship and applicable obligations.
Events and partner logos remain published until removed by an administrator. Do not publish personal contact details in the calendar without justification and informing the person.
Cookies and browsing
The site code contains no analytics, advertising pixels or embedded Instagram feed. Fonts and images are served from the site. Instagram and sponsor websites open only after a click and apply their own policies.
The technical cookie __Host-r92admin is created on successful administrator login. It expires after 8 hours and is removed on logout. It protects administrator access. The hosting platform may also use its own access mechanisms; this notice is not an inventory of its cookies.
No advertising consent banner is added for the site’s technical functions alone. Any future non-essential trackers will require appropriate prior consent controls. The fallback anti-spam check opens FormSubmit and may use its external verification services.
Administration security
Connections use HTTPS. The password is not exposed in pages. Protected sessions expire after 8 hours and are invalidated on logout. Session identifiers are stored as hashes; login attempts are limited over a 15-minute window. Expired records are removed on the next administration API request. Platform logs follow the platform’s own retention rules.
Your rights
You may request access, correction, deletion or restriction of your data, and object to processing based on legitimate interests. Portability may apply to automated processing based on a contract. Email us with your request; proportionate identity checks may be necessary. The normal response period is one month, with extensions possible under GDPR rules.
You can complain to the CNIL. Please also email us to report a security incident.