Skip to content
Join
FR EN

Legal information

Privacy policy

How accro collects, processes and protects your personal data, and how to exercise your rights.

This English version is provided for information purposes. In the event of any discrepancy, the French version prevails.

Introduction

This privacy policy applies to the website of the association accro, accro-grandest.fr, and to the procedures offered on it (applying to Tango&Scan, becoming a member, getting in touch).

accro, the association that publishes the website (see the legal notice), makes every effort to respect and protect the privacy of its users and the confidentiality of their data, in accordance with Regulation (EU) 2016/679 on data protection (General Data Protection Regulation, GDPR) and French Law no. 78-17 of 6 January 1978 on information technology, data files and civil liberties (Informatique et Libertés).

"Personal data" means any information relating to an identified or identifiable person, in particular first name and surname, email address, telephone number or IP address. This policy explains what data is processed, why, on what legal basis, for how long, to whom it is disclosed, and how to exercise your rights.

What the website collects... and does not collect

The accro-grandest.fr website is a static website: it has no user accounts, no form that sends us data, no audience measurement tool and no advertising tracker. The only data about you that reaches us is the data you choose to send us (by email, by WeTransfer or via HelloAsso), together with the technical logs kept by our hosting provider.

Data controller and data protection officer

1. Data controller

The controller of personal data is the association accro, 7 cour des Cigarières, 67000 Strasbourg, France, represented by its president. It can be contacted by email at contact@accro-grandest.fr.

2. Data protection officer (DPO)

accro has appointed a data protection officer, Ms Laetitia Schmuck, whose appointment has been notified to the French data protection authority (Commission nationale de l’informatique et des libertés, CNIL). She can be contacted by email at dpo@accro-grandest.fr, or by post at the registered office address, marked "Confidentialité".

Principles

In accordance with Article 5 of the GDPR, data is collected and processed in line with the following principles:

  • Lawfulness, fairness and transparency: each processing operation is based on one of the legal bases provided for in Article 6 of the GDPR, stated below, and is explained to you at the time of collection.
  • Purpose limitation: data is used only for the purposes described in this policy.
  • Data minimisation: only the data necessary for these purposes is requested.
  • Storage limitation: data is kept for a defined period, stated for each processing operation.
  • Integrity and confidentiality: accro takes the necessary measures to ensure the security of the data.

Data processing

1. Browsing the website

When you visit, the hosting provider's server records technical logs: IP address, date and time, page requested, browser type. They are used solely to ensure the operation and security of the website (accro's legitimate interest, Article 6(1)(f) GDPR). They are not used for statistical purposes or combined with other data, and are kept by the hosting provider for no more than one year, in accordance with its legal obligations.

2. Getting in touch

When you write to us (by email, from the Contact page or via the "Write to us" links), we process your identity, your contact details and the content of your message in order to reply to you and, where applicable, to support you, invite you to our events or training sessions, or consider a partnership or sponsorship proposal.

  • Legal basis: accro's legitimate interest in replying to the requests it receives (Article 6(1)(f)).
  • Retention period: 3 years after the last contact.

3. Applying to Tango&Scan

The form on the Apply page does not transmit any data: the information you enter stays in your browser and is used to produce a summary that you attach, together with your documents, to a WeTransfer sent to accro. Once received, the application data (identity and contact details of the members of the pair, information about the organisations, project description, budget, supporting documents) is processed to assess the application, organise the selection and, for selected projects, monitor their support and report to the funders.

  • Legal basis: pre-contractual measures taken at your request with a view to awarding a grant (Article 6(1)(b)), and accro's legitimate interest in monitoring the programme (Article 6(1)(f)).
  • Recipients: the accro team, the members of the jury and, for winners, the programme's funders.
  • Retention period: 3 years after the last contact with the applicant.

Files are transferred via the WeTransfer service, which is subject to its own privacy policy.

4. Directory of winners

The website presents the Tango&Scan award-winning projects: project name, names of the project leads and their organisations, project description, visual and grant amount. This publication aims to showcase the projects supported and to account for the use of public funds.

  • Legal basis: accro's legitimate interest (Article 6(1)(f)).
  • Duration: for as long as the entry is of documentary interest for the programme.
  • Your right to object: anyone named may at any time request that their name or entry be amended or removed by writing to dpo@accro-grandest.fr.

5. Membership and donations

When you click the membership button, you are redirected to the HelloAsso platform, which collects your data and payment in accordance with its own privacy policy and terms of use. accro then receives the information needed to manage your membership.

  • Legal basis: performance of the membership contract (Article 6(1)(b)); for donations and tax receipts, compliance with a legal obligation (Article 6(1)(c)).
  • Retention period: for the entire duration of your membership and up to 3 years after it ends; at least 6 years for donation data, as supporting evidence for the tax authorities.

6. Newsletter

If you subscribe to accro's newsletter, your email address is used to send it to you, via the Mailchimp service.

  • Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time using the unsubscribe link included in every mailing.
  • Retention period: until you unsubscribe, or 3 years without opening any mailing.

7. Registration for training sessions and events

Registrations for accro's training sessions and events may be collected using Google Forms, the link to which is sent to you. The data (identity, contact details, organisation) is used to organise the session and report on it to the funders.

  • Legal basis: pre-contractual measures taken at your request (Article 6(1)(b)).
  • Retention period: 3 years after the training session or event.

Recipients and processors

Data is never sold or transferred. It is accessible to the accro team and, where necessary, disclosed to the following recipients:

  • Netlify (United States), the website's hosting provider;
  • Microsoft (Office suite), for accro's internal email;
  • Google (Drive and Forms), for storing working documents and for registrations;
  • Mailchimp (Intuit), for sending the newsletter;
  • WeTransfer (Netherlands), for receiving application files;
  • Google (Translate), only if you request a translation of a REC! 2026 page;
  • HelloAsso (France), for memberships and donations;
  • jury members, as well as our partners and funders, to the extent necessary for them.

Some of these providers (Netlify, Microsoft, Google, Mailchimp) are established in the United States or have access to the data from there. These transfers are governed by the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework), to which these companies have signed up, and failing that by the European Commission's standard contractual clauses.

Cookies, trackers and third-party content

The accro-grandest.fr website does not set any cookies and does not use any audience measurement tool or advertising tracker. Where applicable, it only stores in your browser (local storage) the third-party services you have chosen to allow (see below), for 6 months.

This information stays on your device, is not sent to us and is strictly necessary for a function you have requested: it does not require consent (Article 82 of the Informatique et Libertés Act).

Third-party content. Some pages offer videos, podcasts and posts hosted by third-party services (YouTube, Vimeo, Spotify, Dailymotion, SoundCloud, LinkedIn). These players may set cookies and collect browsing data, according to each service's own rules. That is why they are never loaded automatically: a preview or notice tells you which service is involved, and the player only loads after you click ("Show content", the play button or "Show post"). You can also tick "Always allow" for a service; this choice is kept for 6 months and can be withdrawn at any time from the Personal data page.

Machine translation. The REC! 2026 event pages offer a translation into English and German. The Google Translate service is only loaded if you choose one of these languages: Google then receives your IP address and the content of the page, and a cookie (googtrans) remembers the language chosen. Switching back to French deletes this cookie and stops the service from loading.

Links to our social media accounts are simple links: they do not load any content from these networks unless you click on them.

Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights over the data concerning you:

  • right of access: to find out whether we hold data about you and obtain a copy;
  • right to rectification: to have inaccurate or incomplete data corrected;
  • right to erasure: to have your data deleted, subject to our legal retention obligations;
  • right to restriction: to have the use of your data temporarily frozen;
  • right to data portability: to receive the data you have provided to us in a structured, commonly used format;
  • right to object: to object to processing based on our legitimate interest, on grounds relating to your particular situation;
  • right to withdraw your consent at any time, where processing is based on it, without affecting processing already carried out;
  • right to set instructions regarding what happens to your data after your death (Article 85 of the Informatique et Libertés Act).

accro does not take any decision based solely on automated processing, including for the selection of applications, which is the responsibility of a jury.

How to exercise your rights

Write to the data protection officer at dpo@accro-grandest.fr, or by post:

accro / Confidentialité
7 cour des Cigarières
67000 Strasbourg
France

The Personal data page offers ready-made requests. We will reply within one month of receiving your request. This period may be extended by two months owing to the complexity or number of requests; you will be informed if so. Proof of identity will only be requested if there is reasonable doubt about your identity.

If you consider that your rights are not being respected, you may at any time lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

Security

accro implements appropriate technical and organisational measures to protect data against loss, unauthorised access or disclosure: access restricted to those who need it, protected accounts, website served over HTTPS. In the event of a data breach posing a risk to your rights and freedoms, accro notifies the CNIL within 72 hours and, if the risk is high, informs you as soon as possible.

Changes to the privacy policy

This policy can be consulted at any time on this page, as well as from the legal notice and the website footer. It may be amended to reflect changes to the website or to applicable law; the date of the last update is shown below. If a processing operation concerning you changes significantly, you will be informed through our usual channel of communication.

This privacy policy was last updated on 10 October 2026.