Privacy policy
Last updated: 4 November 2026.
Data controller
Les résidents du mouillage de St Barth, Bateau Manatea, Capitainerie de Gustavia, 97133 Saint-Barthélemy — [email protected]
Data we process
| Purpose | Legal basis | Data | Retention |
|---|---|---|---|
| Membership management | Contract (membership) | Identity, contact details, boat, membership status, sign-up date, any suspension decided by the board (duration and reason) | Membership period + 1 year |
| Membership fees and donations | Contract and legal accounting obligation | Handled by HelloAsso; the association receives no bank details | Accounting records: 10 years |
| Grievance book (named votes for or against) | Explicit consent, given by accepting the members’ area terms of use; can be withdrawn (withdrawing the vote or deleting the account) | Name, choice expressed | 1 year after closing, then names are deleted (only overall results are kept) |
| Accounts without paid membership | Pre-contractual steps | Email, contact details | 6 months |
| Internal record of former members (proof of past membership, handling disputes) | Legitimate interest | Identity, contact details, boat, membership periods and amounts | 3 years after account deletion, board access only |
| Association WhatsApp group (optional) | Consent (checkbox), can be withdrawn at any time in “My account” | WhatsApp number, visible to other group members; service provided by WhatsApp (Meta) | Until consent is withdrawn or membership ends |
| Renewal reminders by email (30 days before expiry, on the day, then 30 and 60 days after) | Contract (membership) | Email, first name, expiry date | Sending log: 1 year |
| Replying to messages | Legitimate interest | Name, email, message | 1 year maximum |
| Board area security | Legitimate interest | User ID, action, date | 12 months maximum |
Automatic deletions take place on the 1st of each month, for data whose retention period has ended by that date.
Votes on grievances may reveal opinions: names are visible to the board only and are never made public. Your data is never sold or used for advertising.
Recipients and processors
- Board members, to run the association.
- Supabase — database and members’ area login, hosted in the European Union (Frankfurt).
- HelloAsso (France) — payment of fees and donations; after a membership payment, HelloAsso sends your name, email and the amount to activate your membership.
- Brevo (France) — sending emails (login links, membership reminders).
- Cloudflare, Inc. (United States) — website hosting and spam protection.
- Contact form messages are forwarded to the association by email via Brevo; they are not stored on the site.
Transfers outside the European Union
Cloudflare is a US company. Any transfers rely on the EU–US Data Privacy Framework. Member data is stored in the European Union.
Cookies
This website uses no advertising or analytics cookies; fonts and images are hosted on the site. The only elements used are strictly necessary and therefore require no consent: the Cloudflare Turnstile anti-spam service, loaded only on the Contact page; and, in the members’ area, your login session stored in your browser’s local storage (removed when you log out).
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time. To exercise these rights, write to [email protected]. Members can also export or delete their data from their account.
If you believe your rights are not respected, you can lodge a complaint with the CNIL: www.cnil.fr.