ICONOstalla Misericordia International respects your privacy and handles personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This Privacy Policy explains what personal data we collect through this website, why we collect it, how we use and protect it, and what rights you have.
1. Who is responsible for your personal data?
The organisation responsible for processing personal data through this website is:
ICONOstalla Misericordia International
29 rue Émile-Forichon
36230 Neuvy-Saint-Sépulchre
France
Email: contact@iconostalla.org
2. What personal data do we collect?
Membership applications
When you apply for membership through the website, we may collect:
- your full name;
- your email address;
- your organisation or institutional affiliation;
- your postal address;
- your country;
- your membership category;
- information required to administer your membership and membership fee.
Email enquiries
When you contact us by email, we process your email address and any personal information you include in your message.
Technical website information
When you visit the website, our web server and hosting provider may automatically process limited technical information, such as:
- your IP address;
- the date and time of your visit;
- the pages and files requested;
- your browser and device type;
- technical error and security information.
This information is used to operate, secure and maintain the website and to produce general website statistics. These statistics may also include visits by automated systems, such as search-engine crawlers.
3. Why do we use your personal data?
We use personal data for the following purposes:
- to process and administer membership applications;
- to maintain our membership records;
- to communicate with members;
- to distribute the ICONOstalla newsletter to members;
- to provide information about conferences, meetings and other activities;
- to answer questions and respond to enquiries;
- to administer membership fees and related records;
- to protect the website against spam, misuse and security threats;
- to comply with legal and administrative obligations.
We do not sell personal data or use it for commercial advertising.
4. Legal grounds for processing
Depending on the circumstances, we process personal data on one or more of the following grounds:
- Performance of a contract or steps requested before entering into a contract: to process and administer your membership.
- Legitimate interests: to answer enquiries, communicate with members, operate the organisation and keep the website secure.
- Legal obligations: where records must be retained for accounting, tax or other legal purposes.
- Consent: where we expressly ask you to consent to a specific use of your personal data.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.
5. Who receives your personal data?
Personal data is accessible only to people who need it for the administration of ICONOstalla and its activities.
We may also use trusted service providers, including:
- our website hosting provider, bHosted;
- providers supporting our email and website administration;
- professional advisers or administrative service providers where necessary.
These parties may process personal data only to provide their services and must protect it appropriately.
We may disclose information if required by law or when reasonably necessary to protect the rights, safety or security of ICONOstalla, its members or others.
6. International data transfers
We aim to process personal data within the European Economic Area.
If a service provider processes personal data outside the European Economic Area, we will use an appropriate legal safeguard where required, such as an adequacy decision or approved contractual clauses.
7. How long do we retain personal data?
We retain personal data only for as long as necessary for the purpose for which it was collected.
In particular:
- membership information is generally retained while the membership is active;
- essential membership and payment records may be retained afterwards where necessary for administrative, historical, accounting or legal purposes;
- email correspondence is retained only for as long as it remains relevant to the enquiry or our activities;
- technical server and security logs are retained for a limited period for security, maintenance and troubleshooting.
Information that is no longer required will be deleted, anonymised or securely archived where continued retention is legally or historically justified.
8. Cookies and website analytics
At the date of this Privacy Policy, the website does not use advertising cookies, tracking cookies or third-party analytics tools such as Google Analytics.
The website may use strictly necessary technical functionality to operate the website, maintain security or remember a language selection. Such functionality is not used to create advertising profiles or follow visitors across other websites.
The hosting provider may compile general website statistics from technical server logs. These statistics are not used by ICONOstalla for targeted advertising or behavioural profiling.
If tracking or non-essential analytical technologies are introduced in the future, this Privacy Policy will be updated and consent will be requested where legally required.
9. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.
However, no website or method of electronic communication can be guaranteed to be completely secure. Please do not send sensitive personal information by email unless this is necessary and appropriate.
10. Your rights
Subject to the conditions of applicable data protection law, you have the right to:
- request access to your personal data;
- have incorrect or incomplete data corrected;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing;
- receive certain data in a portable format;
- withdraw consent where processing is based on consent;
- lodge a complaint with a competent data protection supervisory authority.
To exercise any of these rights, please contact us at contact@iconostalla.org. We may ask for information necessary to verify your identity before responding to a request.
You also have the right to lodge a complaint with the data protection authority in the country where you live or work. If ICONOstalla’s relevant establishment is in France, you may contact the Commission Nationale de l’Informatique et des Libertés (CNIL) at www.cnil.fr.
11. External websites
This website contains links to external websites and resources. ICONOstalla is not responsible for the privacy practices or content of those external websites. We recommend reading their privacy policies before providing personal data.
12. Changes to this Privacy Policy
We may update this Privacy Policy when our website, activities or legal obligations change. The latest version will always be published on this page, together with the date of the most recent update.
13. Contact
If you have questions about this Privacy Policy or the way ICONOstalla processes personal data, please contact:
ICONOstalla Misericordia International
Email: contact@iconostalla.org
Postal address: 29 rue Émile-Forichon, 36230 Neuvy-Saint-Sépulchre, France
Images and copyright
Unless otherwise stated, the photographs on this website are reproduced with permission from the STALLA collection.
Copyright may belong to the photographer, the holding institution or another rights holder. Images may not be copied, downloaded, reproduced or republished without prior permission from the relevant rights holder.
Image credits are provided with the individual photographs wherever possible. For questions about image rights, please contact us at contact@iconostalla.org.