01 · Responsible
Who processes the data?
The person responsible is theNational Association for Domain and Internet Regulation (ANRDI), 5 Allée de la Pommeraie, 78520 Limay. Identifiers: RNA W781010834, SIREN 105 588 388 and SIRET 105 588 388 00014.
For any questions relating to personal data: [email protected]. No officially designated DPO was identified in the sources consulted.
02 · Purposes and durations
Site processing
Contact form and exchanges
Data: name or first name, email address, chosen reason and text of the message. Attachments and telephone number are not requested. The form includes an anti-robot measure and a limitation on submissions; the IP address is not recorded in the contact card, but may appear in the server's technical logs.
Purpose and legal basis: receive, qualify and respond to your request, on the basis of ANRDI’s legitimate interest in managing its correspondence; when a request concerns a possible relationship with the association, processing of pre-contractual measures requested by the person.
Recipients: persons authorized to process contacts, site database, hosting provider and messaging provider used for notifications and confirmations. The message is kept in the contact management interface. The application rule provides for a purge beyond 36 months after the last response or modification; its execution is opportunistic and does not guarantee deletion on an exact date. Email copies, logs, and backups have distinct durations that could not be verified.
Do not transmit passwords, banking details, identity documents, health data, information relating to an offense or sensitive details concerning a minor. The form does not provide for attachments, filing of complaints, or automatic transfer to an external organization. If a message nevertheless contains such information, its necessity, its basis for processing and its access must be assessed on a case-by-case basis; a simple consent box does not justify its collection.
Subscribe to the News newsletter
The form asks for an email address and separate agreement to receive news. The code records the address, source, information text, status and dates of registration or unsubscription. The legal basis is your consent, which can be withdrawn at any time via the unsubscribe link in the message or by writing to [email protected]. Registration remains active until withdrawal; the code then keeps the unregistered row with no set purge duration. The sending service provider and the campaigns actually used must still be confirmed by the association.
Login to an existing account
The login page processes the email address and password to verify access to an existing account and manage the session. Reset requests use the email address and a token valid for one hour. This processing is based on the management of the requested account and the security of the service. The sending provider and the actual purging of expired data depend on services and settings that could not be confirmed. Account creation is proposed according to the available routes; Member areas or other services may have their own conditions and information.
Login or create an account with Google
If you choose “Continue with Google”, Google transmits to ANRDI the basic profile data authorized by the fields requested by the site (openid, email and profile): stable Google account ID, email address and verification status of this address, first name, last name and profile picture address when available. The site verifies that the address is confirmed; it does not ask for or receive your Google password. These permissions do not provide access to Gmail, Drive, Calendar, Contacts, or other Google content.
This data is only used to find or create your ANRDI account, associate this account with your Google ID and open your session. The Google ID and email address are saved in the account; the first name, last name and image address are recorded when the account is created or, for an existing account, when they are not already entered. Address verification status is checked at login time and is not persisted in the profile. The temporary access token is used to retrieve this information from Google during login; the site does not keep it after this operation.
Google processes login data as part of its own service. The ANRDI host processes the data necessary for storing the account. When a new registration triggers a welcome message, the email address and name are passed to the email provider for sending this message. ANRDI does not use Google data for advertising, does not sell it or use it to train artificial intelligence models.
Google profile data remains associated with the ANRDI account as long as it exists. To request access, rectification or deletion of this data or the account, write to [email protected]. A revocation of authorization in Google does not alone delete the ANRDI account or the data already stored.
Session, security and operation
The browser receives cookies necessary for the session and maintaining your preferences. The server processes the technical data required to respond to pages, limit abuse and diagnose errors: IP address, date, requested URL, browser and connection data. Server logs are managed outside of application code; their duration has not been verified. Theme or accessibility preferences may be retained in the browser's local storage until cleared.
03 · Trackers and third parties
Cookies and external resources
The consent history manager has been removed: no declared optional tracker is loaded on this version. The page therefore does not ask you to accept or reject a category without corresponding active service. If a tracker subject to consent is added, it must be blocked before your choice and be subject to updated information.
Google Fonts, certain icons loaded from cdnjs/Cloudflare and brand images served by the ANRDI CDN may be directly requested when displaying the affected pages. These services receive the technical data necessary for the request, including the IP address and URL of the resource. The image CDN contract has not been identified.
The Map page can load Apple MapKit if a service key is configured; it was not present during the code check carried out for this version. The Facebook SDK is disabled with Facebook login and is not enabled as a tracker on public pages. The template provides for Elfsight, but no pages reviewed enable it. The processing locations and contractual guarantees of external suppliers have not all been established; no general data localization commitment is made here.
04 · Transmissions and perimeter
Recipients and related services
Authorized people from the association can access the data necessary for their missions. Technical service providers are involved in hosting, security, sending emails and displaying external resources. Depending on their infrastructure, some providers can process data from different countries; not all transfer contracts and guarantees have been verified.
The “Suspicious site” page gives advice and directs to the contact form. It does not constitute an official report. No automatic transfer to PHAROS, 3018 or another organization is made from this route. ANRDI informs and guides and does not speak on behalf of these services.
The public site does not currently offer a donation, membership or volunteer application form with supporting documentation. Services available on other domains have their own routes and information.
05 · Your rights
Access, rectification and complaint
Depending on the situation and the basis of the processing, you can request access to your data, their rectification or erasure, limitation of processing, object to processing based on legitimate interest and request portability when the conditions are met. If the processing is based on consent, you can withdraw it at any time; this does not call into question previous operations.
Write to [email protected] indicating the processing concerned. ANRDI may request reasonable information necessary to verify your identity. You can also file a complaint with the CNIL.
06 · Protection
Security and updates
The site implements technical and organizational measures such as HTTPS transmission, protection against falsified requests, access controls and anti-robot measures. They reduce certain risks without guaranteeing absolute security.
This information describes the routes of the public site and the rules observed in its code. It does not constitute a global declaration of conformity. It will be updated if the forms, service providers, purposes or storage rules change.