Privacy policy

Who is responsible for your data?

Association Petite Graine
1 allée des Bains, 31110 Luchon, France
contact@petite-graine.org

Association Petite Graine is responsible for the processing described here. You can write to this address with any questions about your data.

When you contact us

The form asks for your first name, last name, email address, subject and message. These fields and the consent checkbox are required to send the form. They let us understand your enquiry and reply.

We process your enquiry on the basis of the consent you give by ticking that checkbox. You can withdraw it by writing to us; withdrawal does not affect processing carried out before then. It may prevent us from continuing to handle your enquiry.

Messages are used only to answer enquiries. They do not subscribe you to newsletters, events or advertising communications.

Resend delivers the message to the association’s mailbox, hosted by Google Workspace. The received email also contains the submission date and time and the IP address used to submit the form.

Operating and protecting the website

Vercel hosting involves processing technical request data, such as the IP address, requested page address, date, time and information sent by the browser. Technical logs help operate the website, diagnose errors and prevent abuse.

The contact form also uses the IP address and timing information to limit abusive submissions. Its anti-abuse counter is held temporarily in server memory; the IP address included in the email is retained with the message in our mailbox.

These technical activities rely on our legitimate interest in keeping the website available and secure. Connections to the site use HTTPS, and form data is validated before sending.

APG does not add audience-measurement or advertising cookies. The website’s fonts are served from our hosting. Optional badge storage and YouTube videos are described separately below.

SDGenius: your badges in this browser

You can read lessons and answer quizzes without an account and without enabling progress saving.

• Your quiz answers and score are processed in the page to display your result. They are neither stored in your badge collection nor sent to the server.
• If you tick “Remember my progress on this device”, your browser keeps only that preference and flags for completed modules in localStorage. This is optional and off by default; enabling it expresses your agreement to this storage.
• Saved badges are shared between the French and English versions. They remain in this browser until you or the browser clears them. Anyone using the same browser profile can see them.
• No names, scores, answers, personal identifiers or timestamps are stored with badges. There is no account, cross-device syncing or upload of your collection to the server.

You can withdraw your agreement by unticking the option or choosing “Clear my progress”. Both actions remove the preference and saved badges from this browser without changing aggregate totals. When saving is off, badges earned on a page are lost when you leave it.

SDGenius: aggregate totals

The first fully answered quiz submitted during a visit sends only the module code to the server, even if badge saving is off. The server adds a completion event to that module’s total in Neon. These aggregate totals are public and retained to understand use of the learning journey.

The counting database stores no names, email or IP addresses, cookies, browser identifiers, scores or answers. It cannot retrieve your individual history. Technical data needed to handle the HTTP request is separate from these totals.

Totals represent completion events rather than unique people: a new visit or a deliberate retry of recording may add an event. Clearing local badges does not remove an event from these totals.

Who is involved, and where is data processed?

Association members handling enquiries use the APG mailbox. The following providers support the website:

• Vercel : website hosting, form and API execution, technical logs and security. Data processing information.
• Resend : delivery of contact-form emails, including message content and delivery information. Data processing information.
• Google Workspace : receipt and retention of emails in the association’s mailbox. Data processing information.
• Neon : hosting SDGenius aggregate totals, without participant records. Data processing information.

Some providers process data outside the European Economic Area, including in the United States. Their data processing documents linked above explain their commitments and applicable contractual transfer mechanisms. European hosting of Neon totals does not mean every website service processes its data exclusively within the European Union.

YouTube videos and external links

Some news articles embed a YouTube video using youtube-nocookie.com in privacy-enhanced mode. The player loads as you approach its position on the page: your browser then connects to Google before you click Play, sending the technical information needed for that connection, including your IP address and, depending on the information sent by the browser, the website’s origin.

This mode does not make the connection anonymous or mean that Google processes no data. Viewing and playing the content is also subject to Google’s privacy rules.

Other links to social networks, partners or external resources take you to separate websites when you open them. Their own policies then apply.

Google Privacy Policy

How long is data retained?

Contact emails remain in the association’s Google Workspace mailbox until manually deleted. APG currently has neither a fixed retention period nor an automatic deletion schedule for these messages. You can request erasure using the contact details below.

Providers retain technical copies and logs according to their services and terms. Their data processing documents are linked above; deleting a message from our mailbox is not a promise that every technical copy is immediately deleted.

Badges remain in your browser until cleared, while SDGenius aggregate totals are kept without an expiry date. Those totals are not individual participant histories.

Your rights and requests

Depending on the processing and the conditions set by the GDPR, you can request:

• access to, correction or erasure of your data, or restriction of processing;
• an objection to processing based on legitimate interests, on grounds relating to your particular situation;
• portability where its conditions are met, and withdrawal of consent for processing based on that consent.

Write to contact@petite-graine.org with your request and enough information to identify the relevant exchange. We may ask for additional information where needed to verify your identity. You can also use the SDGenius controls to delete local badges yourself.

contact@petite-graine.org

If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority. Lodge a complaint with the CNIL.