Official Non-Profit Institution Official RNA Registration: W261001475 • SIREN: 909772659 • Prefecture of Drôme
Public Legal Notice & Registry
M
Médiathèque de Grane Non-Profit Public Interest Civic Association
Contact Us
Data Protection & GDPR Compliance

Privacy Policy, Data Protection & User Rights

The Association Médiathèque Communale de Grane places the highest priority on protecting the privacy, personal autonomy, and confidentiality of our patrons and digital visitors. In full alignment with the European Union General Data Protection Regulation (GDPR 2016/679) and the French Data Protection Act (Loi Informatique et Libertés), this policy explains how your personal data is collected, handled, and protected.

GDPR Principles Your Rights DPO Contact
Auditor reviewing data protection ledgers and compliance documents
Figure 12.1: Data governance registers and patron confidentiality protocols reviewed annually by the secretariat of Médiathèque Communale de Grane.
Ethical Data Practices

1. Data Minimization & Absolute Non-Commercial Commitment

As a non-profit civic organization, our philosophy is simple: we only process personal information that is strictly necessary to answer inquiries and coordinate public library services.

Article 1.1: Data Controller Identity

The data controller responsible for the processing of personal data on this portal is:

ASSOCIATION MEDIATHEQUE COMMUNALE DE GRANE
Registration: RNA W261001475 • SIREN 909772659
Registered Address: 3 Rue des Pastouriaux, 26400 Grane, France
Designated Privacy Contact / DPO: Valérie Faure (General Secretary)
Direct Electronic Inquiries: sorderhemel378@gmail.com

Article 1.2: Scope of Personal Data Collected

We do not employ invasive tracking cookies, third-party advertising pixels, behavioral tracking scripts, or commercial data brokers. The personal data collected is limited to information voluntarily transmitted through our interactive forms:

  • General Contact Form: Full name, email address, telephone number (optional), and the message text provided by the sender. Purpose: Replying to civic questions and workshop reservation requests. Legal basis: Legitimate interest / Consent (GDPR Art. 6(1)(a)(f)).
  • Volunteer Intake Form: Full name, email, phone number, preferred volunteer tasks, and availability. Purpose: Scheduling volunteer orientation and coordinating library shifts. Legal basis: Pre-contractual civic engagement / Consent.
  • Technical Server Logs: Anonymized IP addresses and basic timestamp headers recorded automatically by our web server for system diagnostics and defense against DDoS attacks. Retained for no more than 30 days before automatic deletion.
Patrons using library computer stations in a secure, privacy-respecting environment
Figure 12.2: Digital workstations at Médiathèque Communale de Grane configured with privacy protection and automatic session wiping for user security.
Citizen Guarantees

2. Your Comprehensive Statutory Rights Under GDPR

Under Articles 15 through 22 of the GDPR and French national law, every individual whose personal data is processed by our association enjoys full control over their personal records.

Right of Access (Art. 15)

You have the right to request a complete, machine-readable copy of any personal data concerning you held by our association, along with confirmation of its processing purposes.

Right to Rectification (Art. 16)

You may ask us to correct, complete, or update any inaccurate or outdated information regarding your patron account or contact records at any time.

Right to Erasure / Deletion (Art. 17)

Commonly known as the "right to be forgotten," you may request the immediate deletion of your contact records or volunteer file from our active databases.

Right to Restrict Processing (Art. 18)

You have the right to request the temporary limitation of your data processing while an accuracy dispute or administrative verification is resolved.

How to Exercise Your Statutory Rights

To exercise any of the rights listed above, you may send a written request accompanied by proof of identity to our Privacy Representative:

  • By Email: sorderhemel378@gmail.com (Subject: "GDPR Data Rights Request - Médiathèque Grane")
  • By Postal Mail: ASSOCIATION MEDIATHEQUE COMMUNALE DE GRANE, Attn: Privacy Officer, 3 Rue des Pastouriaux, 26400 Grane, France

In accordance with statutory guidelines, our secretariat will acknowledge receipt and fulfill verified requests free of charge within thirty (30) calendar days.

Archival records and privacy management binders in our administrative office
Figure 12.3: Secure physical and digital document handling practices enforced at Médiathèque Communale de Grane.
Retention & Oversight

3. Data Retention Periods & Supervisory Authority (CNIL)

Data Retention Matrix

Data Category Purpose Retention Period
Contact Form Inquiries Civic communication & reply Retained for 12 months after resolution, then permanently purged
Volunteer Applications Coordination of civic shifts Duration of active volunteering + 1 year, or upon request
Borrower Registration Document loan tracking Active membership duration; purged after 2 years of inactivity
Server Technical Logs Security & fault detection Maximum 30 days rolling log retention

Right to Lodge a Complaint with the CNIL

If you believe after contacting us that your rights under data protection law have not been respected, you have the statutory right to lodge a formal complaint with the French national data protection supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, France
Telephone: +33 (0)1 53 73 22 22 • Website: www.cnil.fr
Peaceful library reading room embodying public trust and integrity
Figure 12.4: Trust, transparency, and patron privacy form the bedrock of community life at Association Médiathèque Communale de Grane.