Preamble
Earth Pact Project, a non-profit association of general interest with its head office at 115 cours de la Libération et du Général de Gaulle 38100 Grenoble, France (“Earth Pact Project”), is an organization independent of States, political and economic powers, which acts according to the principles of non-violence to protect the environment, biodiversity and promote peace. It relies on a movement of committed citizens to build a sustainable and equitable world.
We believe that respecting your privacy on the web and elsewhere is a fundamental right. That is why we are committed to guaranteeing the utmost transparency regarding the processing of your personal data.
The purpose of this policy is to inform you of the way in which we process the personal data that you provide to us and that we collect as part of your use of the Earth Pact Project website. It complies with current regulations applicable to data protection, and in particular the General Data Protection Regulation (GDPR) of April 27, 2016 and the French Data Protection Act of January 6, 1978 as amended.
To ensure compliance with these rules, Earth Pact Project has appointed a Data Protection Officer (Délégué à la protection des données, or DPO), who is the main contact for the French Data Protection Authority (Commission nationale de l’informatique et des libertés, or CNIL) and the Earth Pact Project point of reference for personal data protection issues. He can be contacted at hello@earthpactproject.org or at Earth Pact Project France – 115 cours de la Libération et du Général de Gaulle 38100 Grenoble, France.
The purpose of this policy is to inform you of the conditions under which Earth Pact Project collects and uses your personal data, as a :
- as a visitor to our website earthpactproject.org;
- as a supporter, having shown your interest in Earth Pact Project by signing a petition or subscribing to a newsletter for example;
- as a member, having made a one-off or regular financial contribution, or having made a donation to Earth Pact Project.
1. What data Is collected?
Earth Pact Project respects data minimization by collecting and processing only data that is strictly necessary for the purpose(s) for which it is processed.
Earth Pact Project may collect various categories of personal data, including but not limited to:
- Identification data: Earth Pact Project processes identification data when, for example, you request information via our contact form, sign a petition or make a donation. It also processes this type of data to maintain relations with third parties, in particular with supporters and members. For example, but without being exhaustive, this may include first and last names.
- Contact data: Earth Pact Project processes contact data to maintain relations with third parties and to respond to the various requests mentioned above. Examples include, but are not limited to, address, e-mail and telephone number.
- Transaction data, payment data and other economic and financial information: Earth Pact Project processes transaction and payment data when you make a one-off or regular donation, or when you share an asset transfer project (bequest, donation, life insurance, etc.). This data relates to payment (payment method, card number or iban if provided, etc.) and to the transaction.
- Connection data: Earth Pact Project processes connection data when you access its earthpactproject.org site, such as your IP address, your consent to cookies, the origin of your navigation, or the history of your navigation or actions on the earthpactproject.org site.
In the personal data collection forms on the earthpactproject.org website, the compulsory nature of the data collection is indicated by an asterisk.
The collection of certain data is mandatory:
- to enable Earth Pact Project to comply with its legal and regulatory obligations (for example, to issue tax receipts);
- to enable Earth Pact Project to protect petitions against any attempt at fraud and to establish a reliable account (for example, by deduplicating IP addresses);
- for the conclusion or execution of deeds of gift, donation, bequest, assignment of life insurance and other gifts (for example, for data relating to your identity and financial data);
- to follow up a request you have made to us (for example, your e-mail address to send you our newsletter).
The consequences of failing to collect data depend on the situation. For example, depending on the case :
- Earth Pact Project will not be able to accept or receive the donation you wish to make to it;
- Earth Pact Project will not be able to collect your signature for a petition;
- You will not be able to receive the information requested from us;
- Earth Pact Project will not be able to accommodate your request based on one of the rights arising from the GDPR and the Data Protection Act and described below.
2. What are the purposes and grounds for processing your personal data?
The processing implemented by Earth Pact Project meets explicit, legitimate and determined objectives. Furthermore, in application of the regulations, any use of personal data must, in order to be lawful, be based on one of the legal bases set out in Article 6 of the GDPR.
These purposes are mainly as follows:
- Managing your requests (downloading information, sending newsletters, exercising personal data rights): in this context, the legal basis for processing is Earth Pact Project’s legitimate interest, more specifically its interest in responding to the requests it receives and raising awareness of humanity’s sustainability.
- Carrying out awareness campaigns and appeals for donations: in this context, the legal basis for processing is the legitimate interest of Earth Pact Project, more specifically its interest in communicating information about its actions and raising funds to develop its resources.
- Management of donations and relations with members: in this context, the legal basis for processing is compliance with a legal obligation to issue tax receipts and the legitimate interest of Earth Pact Project, more specifically its interest in building loyalty among its members, carrying out statistical analyses of donations collected or defending its rights and interests in the event of litigation.
- Managing and monitoring the processing of donations: in this context, the legal basis for processing is the legitimate interest of Earth Pact Project, more specifically its interest in handling the donation files it receives and ensuring the traceability of their processing.
- Management of relations with sympathizers: in this context, the legal basis for processing is the legitimate interest of Earth Pact Project, more specifically its interest in maintaining relations with its sympathizers in order to raise their awareness, inform them and offer them other forms of involvement with Earth Pact Project (volunteering, activism, donations or gifts, for example).
- Management of relations with service providers and suppliers: in this context, the legal basis for processing is the performance of contracts binding Earth Pact Project to its service providers and suppliers, as well as compliance with legal accounting obligations.
- Analysis of your browsing (please see the article below on cookies): in this context, the legal basis for processing is the legitimate interest of Earth Pact Project, more specifically its interest in improving its website, its content and its services, and in understanding your needs in order to meet your expectations.
- Management of the exercise of rights: in this context, the legal basis for processing is Earth Pact Project’s legal obligation, more specifically its obligation to respond to requests to exercise rights and to inform requesters of their rights.
What is our cookie management policy?
You can consult our policy on the use of cookies here.
Who are the recipients of your personal data?
To the extent necessary to achieve the aforementioned objectives, Earth Pact Project shares your data with its duly authorized internal departments and teams.
To the same extent, your data may also be shared with:
- our service providers for the performance of the services we entrust to them (for example, for the technical execution of online payments, hosting our data, technical management of sending our communications, or the search for new supporters or members);
- to banking institutions in the context of collecting donations or gifts made by members;
- to financial, judicial, and administrative authorities, particularly in the context of our legal obligations, or in connection with a procedure, a dispute, an audit, and/or a request for the disclosure of data, upon request and only to the extent permitted by law and regulations. Some service providers may be located outside the European Union, particularly in countries that do not provide an adequate level of data protection. These data transfers are covered by appropriate safeguards, in accordance with the recommendations and clauses defined by the CNIL (French Data Protection Authority).
Personal data collected and hosted by Earth Pact Project is not – and will never be – sold, exchanged, rented, or given to other organizations for commercial prospecting purposes.
How long is your personal data kept?
Earth Pact Project only retains your personal data for the period necessary for the purposes for which it was collected and in compliance with applicable legislation. However, Earth Pact Project may retain your personal data for a longer period, in particular to comply with legal obligations or for evidentiary purposes.
The security of your personal data
Earth Pact Project is committed to ensuring the security of your data. As such, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
Our service providers and technical partners are subject to a contractual obligation to ensure the security and confidentiality of the personal data they process on our behalf.
What are your rights regarding personal data?
In accordance with applicable data protection regulations, you have the right to access and rectify your data. You also have the right to delete and erase your data, to limit processing, and to data portability. You also have the right to object to the processing of your personal data and the right to object to the use of your data for direct marketing purposes. Furthermore, you can define general guidelines regarding the fate of your personal data and how you wish your rights to be exercised after your death.
You can exercise your rights by writing to us at the following email address: hello@earthpactproject.org or by mail at the following address: Earth Pact Project – Data Protection Officer – 115 cours de la Libération et du Général de Gaulle 38100 Grenoble, France.
Your request will be processed within one month at the latest. However, this period may be extended by two months if necessary, given the complexity and number of requests received by Earth Pact Project.
You also have the right to file a complaint with the French Data Protection Authority (CNIL). Your request can be submitted online or sent by mail to 3 place de Fontenoy 75007 Paris, France.
Update of this policy
Earth Pact Project reserves the right to update this Privacy Policy as needed to reflect changes in its practices and new regulations regarding personal data protection.
Last modified: June 17, 2025
