Inspir'Ayiti — Fierté • Progrès • Espoir

Data controller

INSPIR'AYITI — Mouvman Renesans Nasyonal, a non-profit organisation registered under Haitian law, with branches in France, Canada and the United States. For any question about data protection: contact form (section « signalement ») or email to the Board secretariat.

Data collected

Identity (surname, first name, date of birth, nationality), contact details (email, phone, country, city), membership information (category, pole, field, motivation, experience), training and progress data (InspirLearn), donation and investment data (amount, currency, allocation), contact messages. No banking data is stored in the platform: payments are processed by a certified third party (PCI-DSS).

Legal basis and purposes

Explicit consent (membership, donations, contact), performance of a contract (dues, training), legitimate interest (participatory governance, transparency), legal obligation (tax and regulatory compliance). Data is used to manage membership, organise the development fields, follow training, and ensure financial transparency and participatory governance.

Retention period

Membership applications: 2 years after the last contact. Active member data: duration of membership + 3 years. Donations and financial data: 10 years (accounting obligations). Audit logs (access to sensitive data): 1 year. Training data: duration of enrolment + 1 year. Beyond that, data is deleted or anonymised.

Data security

Encryption in transit (TLS) and at rest. Role-based access control (RBAC): sensitive data (membership files, financial data, messages) is accessible only to authorised roles (Officers, Board, Finance Commission, administrator). A volunteer can never access data visible to the Board or the Finance Commission. Logging of access to sensitive data, available to the Board on justified request.

Your rights (GDPR)

Right of access, rectification, erasure (right to be forgotten), restriction, portability (export of your data) and objection. To exercise them, contact the secretariat via the contact form. The right to be forgotten leads to the deletion of your personal data within 30 days, subject to legal retention obligations (accounting). You may lodge a complaint with the CNIL (France), the Commission d'accès à l'information (Canada) or the competent protection authority.

International transfers

The platform is hosted on cloud infrastructure (United States and European Union). Data transfers outside your jurisdiction are carried out under appropriate safeguards (standard contractual clauses for the EU, recognised mechanisms for Canada and the United States). No data is sold to third parties.