Este texto está disponible en francés y en inglés; se muestra la versión inglesa.

1. Controller

The controller is the Académie des Femmes Magistrates pour l’Émergence d’un État de Droit (AFMEED), a non-profit association. Its contact details are given on the Contact page. AFMEED’s national chapters process the data of the persons who come under them, under the authority of the International Secretariat.

2. Principles

AFMEED applies the principles of Regulation (EU) 2016/679 (GDPR) and of the applicable data protection law: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; accountability.

3. Data, purposes and legal bases

ProcessingDataPurposeLegal basis
Contact formName, e-mail address, organisation, subject, messageAnswering your requestLegitimate interest in answering enquiries (Art. 6(1)(f))
NewsletterE-mail address, language, date and proof of confirmationSending the newsletterConsent, confirmed by double opt-in and withdrawable at any time (Art. 6(1)(a))
Membership applicationIdentity, contact details, country, position, jurisdiction, grade, years of service, motivation, supporting documentsExamining the application (chapter review, possible interview, Secretariat decision)Steps taken at your request prior to membership (Art. 6(1)(b))
Event registrationName, e-mail address, organisationOrganising the event and informing youSteps taken at your request (Art. 6(1)(b))
Member spaceMembership record, dues, documents, messages, enrolments, certificates, votes (the choice cast in a secret ballot is stored apart from the voter’s identity)Managing membership and member servicesPerformance of the membership agreement (Art. 6(1)(b)); statutory obligations
Service securityIP address, technical request and session identifiers, access and audit logsPreventing abuse, ensuring security and traceabilityLegitimate interest in securing the service (Art. 6(1)(f))

Mandatory fields are marked in the forms; without them the request cannot be processed.

4. Recipients

Data is accessible only to authorised AFMEED staff and officers, according to their functions (International Secretariat, officers of the chapter concerned, Data Protection Officer). Where AFMEED relies on technical service providers to host or operate the platform, they act as processors on written instructions and with security and confidentiality guarantees (Art. 28). No data is sold or disclosed for commercial purposes.

5. International transfers

As an organisation with an international scope, AFMEED may make data available to a chapter located in a country other than yours, strictly as far as the purpose requires. Where the GDPR applies, such transfers are subject to the safeguards of its Chapter V.

6. Retention

Data is kept for as long as the purpose for which it was collected requires, then deleted or anonymised under the retention rules adopted by AFMEED. Contact requests are kept while they are handled and followed up; a subscriber’s address is deleted after unsubscription, the proof of consent being kept as long as needed to demonstrate it; unsuccessful applications are deleted once the examination and internal appeals are over; members’ data is kept for the duration of membership and then according to statutory and accounting obligations.

7. Security

Traffic is encrypted (HTTPS). Passwords are stored as hashes (Argon2id); two-factor authentication is offered to members. The browser holds no access token: the session is kept on the server. Member spaces are isolated: a member can only access their own records. Officers’ access is logged.

8. Your rights

You have the rights of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time without affecting the lawfulness of earlier processing. Members can exercise these rights from the “Privacy” section of their space; anyone can do so through the Contact page. An answer is given within one month of receipt of the request, which may be extended under Article 12(3) GDPR. Proof of identity may be requested in case of reasonable doubt.

You may lodge a complaint with the competent data protection supervisory authority.

9. Cookies

This website uses no advertising cookie and no audience measurement tool, and calls no third-party service while you browse. See the Cookies page.

10. Changes

This notice may be updated. The version in force and its date appear at the top of the page; the version accepted is recorded with each consent.