Privacy Policy

Last updated: February 8, 2026

Introduction

IMUN (IND Valence Model United Nations) is committed to protecting the privacy of users of its website in accordance with the General Data Protection Regulation (GDPR) (EU Regulation 2016/679) and the French Data Protection Act.

This policy describes how we collect, use, store and protect your personal data.

Data Controller

For school matters:

IMUN - IND Valence Model United Nations

Institution Notre Dame, Valence, France

Email: contact@imunindvalence.fr

Phone: +33 4 75 55 78 00

For GDPR, data and hosting matters:

Société Neroxa

SIRET: 9923328700016

Email: contact@neroxa.fr

Data Collected

Via the contact form:

  • Name
  • Email address
  • Message subject
  • Message content
  • IP address (for security)
  • User Agent (browser technical information)

Automatically collected data:

  • Cookies (see our cookie policy)
  • Navigation data (pages visited, duration)
Purposes and Legal Bases
PurposeLegal Basis (GDPR)
Respond to your contact requestsConsent (Art. 6.1.a)
Spam and abuse preventionLegitimate interest (Art. 6.1.f)
Technical site operationLegitimate interest (Art. 6.1.f)
Anonymous statisticsConsent (Art. 6.1.a)
Retention Period
  • Contact messages: 3 years from last interaction
  • Essential cookies: Session duration or 1 year
  • Analytics cookies: 13 months maximum
  • Security logs: 1 year

Data is then deleted or irreversibly anonymized.

Data Recipients

Your data may be transmitted to the following recipients:

  • Neroxa Team: To respond to your requests
  • Cloudflare: Anti-spam protection (USA - Standard Contractual Clauses)
  • Hetzner: Website hosting (Germany - EU)

We never sell your data to third parties for commercial purposes.

International Transfers

Some of our providers are located in the United States. These transfers are governed by:

  • The Standard Contractual Clauses (SCC) of the European Commission
  • Appropriate technical and organizational security measures

You can obtain a copy of the appropriate safeguards by contacting us.

Your Rights

Under the GDPR, you have the following rights:

Right of access

Obtain a copy of all your personal data

Right to rectification

Correct inaccurate or incomplete data

Right to erasure

Request deletion of your data

Right to restriction

Restrict processing of your data

Right to portability

Receive your data in a structured format

Right to object

Object to processing of your data

To exercise your rights, contact us at contact@neroxa.fr. We will respond within one month.

Data Security

We implement appropriate security measures:

  • Data encryption in transit (HTTPS/TLS)
  • Data encryption at rest
  • Restricted access to personal data
  • Anti-spam protection (Cloudflare Turnstile)
  • Regular backups
Complaints

If you believe your rights are not being respected, you can:

  1. Contact Neroxa at contact@neroxa.fr
  2. File a complaint with the CNIL (French Data Protection Authority)
    3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07