Privacy policy
Last updated: 10 November 2026. The French version prevails.
The Oklahoma-Occitania association (OK-OC) takes the protection of your privacy seriously. This policy explains what personal data we may process, why, how long we keep it and how to exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978, as amended.
1. Data controller
The data controller is the association Oklahoma-Occitania (OK-OC), Gérard Massip, 18 rue du Trapèze, 82000 Montauban, France. Contact: [e-mail address to be added].
2. Data we process
| Situation | Data | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| You write to us (e-mail, contact form) | Name, e-mail address, message content | Answering your request | Legitimate interest of the association in answering requests sent to it | As long as needed to handle the request, then 3 years at most |
| You join the association | First name, surname, postal address, e-mail, membership fee amount | Membership management, informing members, accounting | Performance of the membership relationship; legal obligation (accounting) | Length of membership + 3 years; accounting records: 10 years |
| You browse the website | IP address, date and time, pages viewed, browser type (technical logs) | Security and proper functioning of the website | Legal obligation of the host; legitimate interest (security) | 12 months at most |
| You make a cookie choice | Your choice (accepted / refused), stored on your device | Remembering your choice | Legitimate interest (strictly necessary storage) | 12 months |
The website's contact form opens your e-mail application: the message is then sent by your own e-mail service and the website keeps no copy of it. We do not collect sensitive data and carry out no automated decision-making or profiling.
3. Cookies and trackers
This website sets no advertising, audience-measurement or social-network cookies. It only uses your browser's local storage (localStorage) to remember your cookie choice (key okoc-cookie-consent, 12 months). This storage is strictly necessary for your choice to be remembered and does not require consent.
Fonts are hosted on the website itself: no data is sent to third-party font services. If we later embed third-party content (video, map, statistics…), it would only be activated with your prior consent, which you could withdraw at any time through the "Cookie settings" link at the bottom of the page.
You can also configure your browser to block or delete local storage. The website remains usable, but your choice will be requested again on each visit.
4. Recipients of the data
Your data is intended solely for the association's board members authorised to process it. It may be processed on the association's behalf, and strictly within the scope of their mission, by our hosting provider OVH SAS (2 rue Kellermann, 59100 Roubaix, France). We neither sell nor rent your data and do not disclose it to third parties for commercial purposes. It may be disclosed to the competent authorities where required by law.
5. Transfers outside the European Union
The association does not transfer personal data outside the European Union.
6. Your rights
You have the following rights over your data: access, rectification, erasure, restriction of processing, objection, portability, and the right to set directives regarding the fate of your data after your death. Where processing is based on your consent, you may withdraw it at any time.
To exercise your rights, write to us at [e-mail address to be added] or by post at the address given above, enclosing proof of identity if necessary. We will reply within one month.
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the CNIL (French data protection authority): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
7. Security
The website is served over HTTPS. We take reasonable measures to protect your data against unauthorised access, loss or alteration: access restricted to authorised board members, limited retention periods and hosting with a recognised provider.
8. Changes to this policy
We may update this policy to reflect changes to the website or to regulations. The date of the last update appears at the top of this page.