Privacy policy
INSPIR'AYITI protects your personal data in accordance with the GDPR (France, Canada) and applies the same standards to Haitian and American members.
Data controller
INSPIR'AYITI — Mouvman Renesans Nasyonal, a non-profit organisation registered under Haitian law, with branches in France, Canada and the United States. For any question about data protection: contact form (section « signalement ») or email to the Board secretariat.
Data collected
Identity (surname, first name, date of birth, nationality), contact details (email, phone, country, city), membership information (category, pole, field, motivation, experience), training and progress data (InspirLearn), donation and investment data (amount, currency, allocation), contact messages. No banking data is stored in the platform: payments are processed by a certified third party (PCI-DSS).
Legal basis and purposes
Explicit consent (membership, donations, contact), performance of a contract (dues, training), legitimate interest (participatory governance, transparency), legal obligation (tax and regulatory compliance). Data is used to manage membership, organise the development fields, follow training, and ensure financial transparency and participatory governance.
Retention period
Membership applications: 2 years after the last contact. Active member data: duration of membership + 3 years. Donations and financial data: 10 years (accounting obligations). Audit logs (access to sensitive data): 1 year. Training data: duration of enrolment + 1 year. Beyond that, data is deleted or anonymised.
Data security
Encryption in transit (TLS) and at rest. Role-based access control (RBAC): sensitive data (membership files, financial data, messages) is accessible only to authorised roles (Officers, Board, Finance Commission, administrator). A volunteer can never access data visible to the Board or the Finance Commission. Logging of access to sensitive data, available to the Board on justified request.
Your rights (GDPR)
Right of access, rectification, erasure (right to be forgotten), restriction, portability (export of your data) and objection. To exercise them, contact the secretariat via the contact form. The right to be forgotten leads to the deletion of your personal data within 30 days, subject to legal retention obligations (accounting). You may lodge a complaint with the CNIL (France), the Commission d'accès à l'information (Canada) or the competent protection authority.
International transfers
The platform is hosted on cloud infrastructure (United States and European Union). Data transfers outside your jurisdiction are carried out under appropriate safeguards (standard contractual clauses for the EU, recognised mechanisms for Canada and the United States). No data is sold to third parties.
Last updated: September 2026 · To exercise your rights, contact us via the contact form.
