Last updated: November 2024
This website is owned by Agapé en Action France and is operated in accordance with this Personal Data Protection Policy. When we use the terms « we », « us », or « our », we refer to Agapé en Action France.
Protecting and properly managing your personal and private data is a priority for us. We publish this Personal Data Protection Policy to inform you of how we collect, process, use, and share your personal data.
The definition of « personal data » varies depending on applicable law. In the European Union, this includes any information that relates to you directly or indirectly, including « personal data » as defined under the General Data Protection Regulation (GDPR). Where the GDPR or other EU data protection laws apply to you, this policy informs you of how you can exercise your rights.
We may update this policy from time to time, so we encourage you to review it periodically. We will keep you informed (by email or via a prominent notice on this site) of any changes concerning how we process your personal data and the potential impact of those changes on you.
1. Use of Digital Tools
Please read our legal notices on the website regarding the use of our digital tools, particularly concerning intellectual property regulations. Please note that our applications are governed by specific terms of use.
2. How We Use Your Personal Data
In general, we collect and use your personal data only as necessary to achieve our legitimate interests in encouraging spiritual growth, which includes providing advice, spiritual counseling, events, church meetings, and digital tools. We may also use your personal data to provide you with products and services, process your donations, or comply with our legal obligations.
Below is a table specifying how we use your personal data, the types of personal data involved, and the applicable legal basis. Where the legal basis is « legitimate interest », further details are provided.
| Purpose / How We Use Your Personal Data | Type(s) of Data | Legal Basis | Legitimate Interest Details |
| Event registration and participation: To enable you to register for and participate in an event, and conduct follow-up work with you afterward. | Identity information; Contact information; Marketing/communication information; Travel details; Preferences and requests | Contract | N/A |
| Electronic marketing communications: To send marketing messages via email, SMS, etc. | Identity information; Contact information; Marketing or communication information | Consent OR Legitimate interest | When you engage with us (e.g., financially), the law permits our organization to send you appropriate marketing emails following a purchase, donation, or event participation. |
| Print and non-marketing electronic communications: To keep you informed about our ministry and resources. | Identity information; Contact information; Marketing or communication information | Legitimate interest | To keep you informed about our ministry; to send you information about resources we believe may interest you. |
| Contact information management: Managing participant records across departments. | Identity information; Contact information; Marketing/communication details; Preferences/requests; Demographic data | Legitimate interest | To manage your participation in our ministry and oversee contact information across different ministry branches. |
| Improving digital tool experience: Enhancing platform performance and user relevance. | Identity information; Contact details; System data; Transaction history; Preferences/requests; Demographic data | Legitimate interest | To improve the functioning of our digital tools and display information most relevant to you. |
| Authentication & account access: Logging in to digital tools safely. | Identity information | Contract AND Legitimate interest | To ensure your accounts on our digital tools remain secure and private. |
| Mission projects & volunteering: Applying for or participating in short/long-term projects or volunteer work. | Identity information; Contact information; Application details | Contract | N/A |
| Spiritual advice and support: Providing discipleship, counseling, and prayer. | Identity information; Contact information; Information regarding your beliefs and personal circumstances; Preferences and requests | Legitimate interest | To provide spiritual advice and support; to enable us to pray for you; to offer resources helping you grow spiritually. |
| Digital forums & communities: Providing online spaces for mission and faith discussions. | Identity information; Contact information; Your discussion posts | Legitimate interest | To provide a space for spiritual and mission-related discussions. |
| Fundraising: Offering opportunities to partner through donations, prayer, or outreach. | Identity information; Financial data; Financial transaction data; Contact details; Information on beliefs/circumstances; Preferences/requests | Legitimate interest | To offer partnership opportunities through financial donations, communication, or prayer. |
| Donation processing: Securely handling financial contributions. | Identity information; Financial data; Transaction data; Contact details; Tax status | Contract AND Legitimate interest | To securely process your donations for our public-interest activities. |
| Mandatory reporting: Complying with regulatory reporting requirements. | Identity information; Contact details; Tax status | Legal obligations AND Legitimate interest | We may be required to submit mandatory reports to regulatory authorities in other countries. |
| Providing products and services: Fulfilling orders for materials or services. | Financial data; Transaction data; Contact details | Contract | N/A |
| System maintenance & analytics: Issue resolution, access logs, data analysis, tool improvements. | Transaction history; System data; Audit logs; Location data | Legitimate interest | To manage and protect our digital tools, ensure effective operations, and maintain access audit logs. |
| Managing complaints and inquiries: Responding to user requests or disputes. | Identity information; Transaction history; Application data | Legal obligations AND Legitimate interest | To ensure your complaints and inquiries are properly processed and resolved. |
3. How We Collect Your Personal Data
We obtain information about you through:
- Direct interactions: When you inquire about our activities, participate in an event, make a donation, register through one of our websites, or otherwise provide us with your personal data. If you meet with us for discipleship or spiritual counseling, we may take confidential notes. If you prefer that we do not take notes, please inform us. Providing this information is entirely at your discretion.
- Cookies and automated technologies: When you interact with our digital tools, we may use cookies or similar technologies to track activity (see Section 9). We also track mobile application usage via analytics.
- Third parties and public sources: We may obtain personal data from third parties and public sources (such as census data), provided those third parties obtained the data lawfully and ethically.
- Referrals from individuals: Your name and contact details may be shared with us by an acquaintance who indicated that you might be interested in our ministry.
4. Types of Personal Data We Collect
We collect the following categories of personal data:
- Contact information: Email address, postal address, phone number, and instant messaging handles;
- Demographic information: Data enabling us to better understand who you are and which services interest you;
- Financial data: Bank account and payment details;
- Financial transaction data: Details of your donations, purchases, and activities joined;
- Transaction history: Communication history, past donations, purchases, applications, and interactions;
- Identity information: First and last name, date of birth, gender, marital status;
- Beliefs and personal circumstances: Religious beliefs/background and details you voluntarily disclose regarding your personal situation;
- Location data: Geographic location, including IP address, latitude/longitude, and country of origin;
- Marketing and communication data: Your preferences regarding marketing materials and communications;
- Requests and preferences: Communication preferences, interests, and prayer requests;
- Security credentials: Usernames and passwords;
- System data: Information about how you interact with and use our digital tools;
- Tax status;
- Travel information: Travel details, participant requirements, dietary needs, and housing preferences.
5. How and When We Disclose Your Personal Data
We will not disclose or share your personal data (including your email address) with parties outside our organization without your authorization. However, we may share data with trusted partners or service providers who deliver services on our behalf.
Data may be disclosed to:
- Other departments within our organization;
- Public or regulatory authorities;
- Third-party service providers, including:
- Cloud hosting providers for applications and websites;
- Direct marketing and email distribution services (e.g., Mailchimp);
- Payment and donation processing organizations.
All service providers are contractually bound to safeguard your data and process it strictly according to our instructions.
6. Your Rights
If you are located in the European Economic Area (EEA), you have the following rights under the GDPR. To exercise these rights, please write to contact@agapeenaction.org. We will respond within 30 days. Proof of identity may be requested before fulfilling your request.
- a. Rectification and Updates: You may update your data directly on our website (e.g., donor/customer profile details) or contact us at contact@agapeenaction.org to request manual updates.
- b. Access: You may request details regarding the personal data we hold about you, processing purposes, retention periods, and safeguards. We provide one copy of your personal data free of charge (administrative fees may apply for manifestly unfounded or repetitive requests).
- c. Erasure (« Right to be Forgotten »): You may request data deletion if it is no longer necessary, if consent is withdrawn, or if processing was unlawful. Erasure may be refused if data is required for legal compliance, public interest, or legal defense.
- d. Restriction of Processing: You may request that we suspend processing your data while accuracy is verified or during legal claims.
- e. Right to Object: You may object to processing based on legitimate interests or automated decision-making that significantly affects you.
- f. Data Portability: You may request your data in a structured, commonly used, machine-readable format for transfer to a third party where processing is automated and based on consent or a contract.
- g. Withdrawal of Consent: Where processing relies on consent, you may withdraw it at any time. You may opt out of direct marketing instantly upon request.
- h. Lodging a Complaint: You have the right to lodge a complaint with your national data protection authority (in France, the CNIL).
7. International Data Transfers
We belong to an international network and may need to transfer data outside the EEA. All international data transfers are conducted using adequate security safeguards (such as standard contractual clauses) in full compliance with applicable laws.
8. Security
We maintain technical, administrative, and physical measures to protect your data against loss, misuse, unauthorized access, or disclosure. We enforce SSL (Secure Sockets Layer) encryption for data collection and process credit card transactions using PCI-compliant systems. We do not store full credit card details.
9. Cookies and Technology-Collected Data
Our digital tools use cookies to save preferences, facilitate logins, and analyze site traffic. You can adjust your browser settings to refuse cookies, though some website features may become unavailable. For a full list of active cookies, please visit our Cookies page.
10. Data Retention Periods
We retain personal data only for as long as necessary to fulfill the operational purposes described above, up to a maximum of 3 years following your last interaction with us (e.g., donation, event registration, or tool usage), unless legal, accounting, or technical requirements mandate longer retention.
11. Third-Party Sites
Our digital tools may contain links to third-party websites. Once you click an external link, our Privacy Policy no longer applies, and we accept no responsibility for third-party privacy practices or content.
12. Children’s Privacy
We do not intentionally collect data from minors under 16 without parental authorization. Children under 13 must not submit personal data beyond what is strictly necessary to participate in authorized activities. Parents or guardians may request the deletion of their child’s data at any time.
13. Contact Us
For questions regarding this Privacy Policy or your personal data, please contact:
- Email: contact@agapeenaction.org
- Address: 69003 Lyon, France
- Version: 1.0