Privacy
Personal data protection (GDPR)
Last updated: 16 February 2026
1. Data controller
Personal data on this site is processed by The Friends of the Priory of Saint Leonard (Les Amis du Prieuré saint Léonard), French non-profit association (1901 Act), with headquarters at Prieuré saint Léonard, 50300 Vains, France.
For any question, please write to contact@prieure-saint-leonard.fr.
2. Data collected and purposes
We only collect data strictly necessary for the following purposes: membership management, event registration, Sheepfold/Stay requests, newsletter (consent-based), donations (legal compliance), contact form (legitimate interest).
3. Data recipients
Your data is never sold. It is accessible to the association's organisers (under confidentiality) and to our processors strictly necessary: Brevo (emails), SumUp (ticketing), Stripe (donations), Qonto (banking), Emergent (hosting).
4. Retention period
Active members: duration of membership + 3 years. Event registrations: 3 years. Accounting records: 10 years (legal). Newsletter: until unsubscribe.
5. Your rights
Under GDPR (EU Regulation 2016/679), you have the right to access, rectify, erase, port, restrict, object, and withdraw consent at any time. Write to contact@prieure-saint-leonard.fr — we respond within one month.
6. Complaint to the CNIL
If you believe your rights are not respected, you may file a complaint with the French data authority — CNIL, 3 place de Fontenoy, 75007 Paris — www.cnil.fr.
7. Cookies
This site only uses cookies strictly necessary for operation (language preference, authentication session, registration cart). No advertising or profiling cookies.
8. Security
Data is stored in EU-hosted databases, encrypted at rest and in transit (HTTPS). Passwords are bcrypt-hashed. Automated encrypted backups are performed regularly.