Privacy Policy

Who we are

The data controller is Génération Maastricht, an association under the French law of 1901, RNA W751252676, headquartered at 13bis Avenue de la Motte-Picquet, 75007 Paris, France. You can reach us at any time at hello@generationmaastricht.org.

What we collect and why

We process personal data only for the purpose stated on each form:

• Newsletter subscriptions: your email address, optional first name, the newsletters you choose, and the date and text of your consent. Legal basis: your consent. A subscription is only active after you confirm it through the link we email you.
• Contact, join and programme interest forms: the details you provide, used only to reply to you or to follow up on your enquiry. Legal basis: our legitimate interest in answering you, and your consent where a form asks for it.
• Audience measurement: only if you accept it in the cookie settings, and only through cookieless, privacy-friendly measurement that does not identify you. Legal basis: your consent.

How long we keep your data

Newsletter data is kept until you unsubscribe. Messages sent through our forms are kept for three years after our last exchange with you. Accounting records, such as payment receipts, are kept for ten years, as French law requires. You can unsubscribe or ask for deletion at any time.

Members and supporters

We process your application, contact details, date of birth, membership status and payment records to manage membership, statutory votes and the association's communication with its members. The legal basis is the membership contract. Directory participation and newsletters rely on separate, optional consent, which you can withdraw at any time. Membership records are kept for the duration of membership and for three years after it ends. Receipts are kept for ten years as accounting records. Access to the membership register is reserved to the officers named in the provisional rules of procedure and to the persons they authorise, through accounts protected by two-factor authentication. You can view your own records. Only directory details you have agreed to share are visible to other members. Card payments are handled by Stripe, which does not pass your card details to us.

Who receives your data

Your data is never sold. It is processed on our behalf, and only on our instructions, by Lovable Labs AB (Sweden), which hosts the website and its database, with data stored in the European Union, and sends our transactional emails; Cloudflare, which delivers the site's content; OVHcloud (France), which provides our domain names; Google, which provides our email accounts; and Stripe, which processes membership payments. Where a provider is established outside the European Union, any transfer relies on the European Commission's standard contractual clauses or on the EU-US Data Privacy Framework.

Your rights

Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability. To exercise any of these rights, write to hello@generationmaastricht.org. You also have the right to lodge a complaint with the CNIL, the French data protection authority, at cnil.fr.

Cookies

This site sets only strictly necessary cookies. Optional audience measurement and embedded media load only after you consent, and you can change your choice at any time through Cookie settings in the footer.