Privacy policy

Template — to be reviewed by a DPO / lawyer before going live.Replace [bracketed] placeholders. This template covers the GDPR requirements outlined in brief §6.6 and §9 but does not constitute legal advice.

Controller

The data controller is Nature+ Coalition — [legal form and registration], [address].

Data Protection Officer: [Name and contact email of the DPO, if appointed].

Data collected

• Membership application (Join form): organization name, type, size, working-group interests, contact name, contact email.
• Member accounts: email, password (hashed), name, role, related organization.
• Member-area activity: technical logs (timestamps, IP) for security and audit.

Purposes & legal basis

• Process membership requests and contact applicants — contract / pre-contractual measures (GDPR art. 6.1.b).
• Operate the member area (authentication, member services) — contract (art. 6.1.b).
• Comply with legal obligations (accounting records, etc.) — legal obligation (art. 6.1.c).
• Security logs and abuse prevention — legitimate interest (art. 6.1.f).

Retention

• Membership application data: [e.g. 3 years from last contact].
• Member account data: duration of membership + [e.g. 5 years].
• Accounting records: 10 years (legal requirement).
• Technical logs: [e.g. 12 months].

Recipients

Personal data is accessible only to authorized members of the coalition (board, admin) and to our technical providers (hosting — Vercel; database — MongoDB Atlas EU). No data is sold or transferred outside the European Economic Area beyond what is necessary for hosting infrastructure.

Your rights

Under GDPR, you have the right to:

• Access your personal data;
• Rectify inaccurate data;
• Erase your data (right to be forgotten), within legal limits;
• Restrict or object to processing;
• Data portability;
• Lodge a complaint with a supervisory authority (e.g. CNIL in France).

To exercise these rights, write to contact@naturepluscoalition.org.

Cookies

The site uses a strictly necessary session cookie (payload-token) to keep members signed in. No analytics or advertising cookies are set.[Update this section if Plausible / Matomo / etc. is added later.]

Updates

This policy may evolve. The most recent version is always available on this page. Last update: [date of last review].