Privacy policy

Applicable to https://www.mariacallas.fr — Published on 02/03/2025, updated on 30 August 2026.

Article 1: Preamble

The purpose of this privacy policy is to inform users of the site:

• On how their personal data is collected. (Personal data is any information that can be used to identify a user. This may include, but is not limited to: first and last names, age, postal or e-mail address, location or IP address);
• On the rights they have concerning this data;
• On who is responsible for processing the personal data collected and processed;
• On the recipients of their personal data;
• On the site’s cookie policy.

This policy supplements the legal notice and the General Terms of Use, which can be consulted by users at the following addresses: GTCU — Legal Information.

Article 2: Principles governing the collection and processing of personal data

In accordance with Article 5 of European Regulation 2016/679, personal data is:

• Processed lawfully, fairly and transparently with regard to the data subject;
• Collected for specified (see Article 3.1 hereof), explicit and legitimate purposes, and not further processed in a manner incompatible with those purposes;
• Adequate, relevant and limited to what is necessary for the purposes for which they are processed;
• Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data which is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay;
• Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which they are processed;
• Processed in such a way as to guarantee appropriate security of the data collected, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Processing is lawful only if, and insofar as, at least one of the following conditions is met:

• The data subject has consented to the processing of his/her personal data for one or more specific purposes;
• The processing is necessary for the performance of a contract to which the data subject is a party, or for the performance of pre-contractual measures taken at the data subject’s request;
• Processing is necessary to comply with a legal obligation to which the data controller is subject;
• The processing is necessary to protect the vital interests of the data subject or of another natural person;
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child.

Article 3: Personal data collected and processed when browsing the site

Article 3.1: Data collected

The site hosts no user account and no online payment. Simply browsing it requires no personal data and creates no account. No e-mail address is published on the site: the contact form is the only channel through which a message reaches the Fonds de Dotation.

Personal data is processed by the Fonds de Dotation Maria Callas in the following three cases only:

• Contact form. When a User sends a message through the contact form on the site: the chosen subject, name, e-mail address, the content of the message, and the country associated with the connection. Purpose: answering the request. Legal basis: the legitimate interest of the Fonds de Dotation in responding to those who contact it. The form is protected by Cloudflare Turnstile, which checks that the sender is not an automated program; for that sole purpose and as a processor, Cloudflare handles the IP address and technical signals from the browser. Messages are delivered to the mailbox of the Fonds de Dotation and kept for as long as handling the request requires.
• Newsletter. When a User subscribes through one of the sign-up forms on the site, or is already registered on the mailing list: e-mail address and, where provided, name. Purpose: sending news from the Fonds de Dotation. Legal basis: consent, withdrawable at any time via the unsubscribe link in each message or through the contact form on the site, choosing the “Data protection (GDPR)” subject. The mailing list is operated through the Mailchimp platform (Intuit Inc., United States), acting as processor; this involves a transfer of data outside the European Union, framed by the safeguards provided for by the GDPR.
• Donations. Donations are collected on the sites of our providers HelloAsso (HelloAsso SAS, France) and Donorbox (Rebel Idealist, Inc., United States), which alone host the donation forms and the payment. The data entered there is governed by each provider’s own privacy policy. The Fonds de Dotation receives from them the information needed to identify the donor, issue the tax receipt and meet its accounting obligations. Where Donorbox is used, this involves a transfer of data outside the European Union, framed by the European Commission’s standard contractual clauses.

Article 3.2: Data collection methods

When the site is visited, the host records connection data in its server logs — IP address, date and time of the request, page requested, browser and operating system. This data is generated automatically by any web server; it is used solely for the security and proper operation of the service, and is not cross-referenced with any other processing by the Fonds de Dotation.

The other data mentioned in Article 3.1 reaches the Fonds de Dotation only through the deliberate act of the User: sending a message through the contact form, subscribing to the newsletter, or making a donation.

Data from the contact form and from the newsletter is kept by the data controller, under reasonable security conditions, for three years from the last contact. Data relating to donations is kept for the period required by accounting and tax legislation. The Fonds de Dotation may retain certain personal data beyond these periods in order to meet its legal or regulatory obligations.

Article 3.3: Data hosting

The https://www.mariacallas.fr website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States.

Article 4: Data controller and data protection officer

Article 4.1: Data controller

Personal data is collected by the Fonds de Dotation Maria Callas, whose registration number is 877 558 965.

The person responsible for processing personal data is Mr. Tom VOLF, and he can be contacted as follows: by post at the following address: 7 avenue de Bretteville, 92200 Neuilly-sur-Seine, France; or through the contact form on the site, choosing the “Data protection (GDPR)” subject

Article 4.2: The data protection officer

The data protection officer is: Mr. Tom Volf — Fonds de Dotation Maria Callas — 7 avenue de Bretteville, 92200 Neuilly-sur-Seine, France — reachable through the contact form on the site, choosing the “Data protection (GDPR)” subject

If, after having contacted us, you feel that your “Informatique et Libertés” rights have not been respected, you can send a complaint to the CNIL.

Article 5: The User’s rights with regard to data collection and processing

Any user concerned by the processing of their personal data may avail themselves of the following rights, pursuant to European Regulation 2016/679 and the Data Protection Act (Law 78-17 of January 6, 1978):

• Right of access, rectification and right to erasure of data (laid down respectively in Articles 15, 16 and 17 of the GDPR);
• Right to data portability (Article 20 of the GDPR);
• Right to limit (Article 18 of the GDPR) and object to data processing (Article 21 of the GDPR);
• Right not to be subject to a decision based exclusively on an automated process;
• Right to determine the fate of data after death;
• Right to have recourse to the competent supervisory authority (Article 77 of the GDPR).

To exercise your rights, please send your letter to the Data Protection Officer, Fonds de Dotation Maria Callas — 7 avenue de Bretteville, 92200 Neuilly-sur-Seine, France, or through the contact form on the site, choosing the “Data protection (GDPR)” subject

In order for the data controller to process your request, you may be required to provide certain information, such as your full name and the e-mail address concerned. Consult the CNIL website for more information on your rights.

Article 6: Cookies

The site places no tracking cookies of its own. It uses no audience measurement, advertising or social network tracking, and embeds no third-party script for those purposes. No consent banner is therefore displayed.

The host may set strictly necessary cookies for the security and availability of the service, and the anti-abuse protection of the contact form (Cloudflare Turnstile) may do the same for security purposes. These cookies are exempt from consent under Article 82 of the French Data Protection Act.

Users who follow a “Donate” link leave this site for the donation pages hosted by HelloAsso or Donorbox, each of which applies its own cookie policy.

The User may configure his or her browser to refuse cookies; browsing this site is not affected.

Article 7: Conditions for modifying the privacy policy

The publisher of the https://www.mariacallas.fr site reserves the right to modify the present Policy at any time, in particular in order to comply with any change in the applicable legislation.

The User is invited to familiarize himself/herself with this Policy each time he/she uses our services, without the need for formal notification. The applicable version is the one published on this page, whose date of update appears at the top.

This policy was published on 02/03/2025 and updated on 30 August 2026.