Privacy Policy

Last update: 19/06/2025

The website www.mansa.fr (hereinafter referred to as "the Site") is published by the MISSION DE PRÉFIGURATION DE MANSA-MAISON DES MONDES AFRICAINS (hereinafter referred to as "the Publisher" or "the Data Controller"), a public interest grouping, registered under SIREN number 929 381 820, whose head office is located at 182, rue Saint-Honoré, Ministère de la Culture, 75001 Paris, France, represented by its director, Mrs Elisabeth GOMIS.

The Publisher attaches great importance to the protection of the data and privacy of users of the Site (hereinafter "the User" or "Users").

The purpose of this Privacy Policy is to explain how, as Data Controller, Users' personal information is collected in the context of accessing, consulting and using the Site, for what purposes and for how long.

This data is only collected for specific, explicit and legitimate purposes.

The Data Controller reserves the right to modify this Privacy Policy and will inform the User of any such modifications.

1. Data Protection Officer

The Data Controller has appointed an in-house Data Protection Officer (hereinafter "the DPO") who can be contacted at the following e-mail address: dpo@mansacollective.fr

2. What personal data is collected?

Personal data is information that directly or indirectly identifies an individual, such as civil status data (name, address, date and place of birth), an e-mail address or an IP address.

Depending on the services used, the personal data collected is as follows:

- Connection information (IP address) ;

- Civil status and identification information (such as first name(s), surname(s), e-mail address, personal or business telephone number);

- Personal data that may appear in the body of the message sent to the Editor via the contact form.

They are necessary to process Users' requests or to provide the services requested by Users.

3. When are Users' personal data collected?

As the Data Controller, Users' personal data is collected during :

- User navigation on the Site concerning IP address

- Newsletter subscription concerning e-mail address

- Submission of a request via the contact form concerning first name(s), surname, e-mail address, telephone number, message content.

As the site's data controller, Users' personal data is collected as part of their use of the Site:

- When a User enters into contact by means of a contact form, the User expressly gives his or her consent for his or her personal data to be used to carry out his or her request and to provide a response.

- When a User uses the document proposal, news, event or contact form, the User expressly agrees that his/her personal data may be used to complete his/her request and provide a response.

- When a User uses the newsletter registration form, the User expressly agrees that his or her e-mail address may be used by the site team to send newsletters, events or alerts.

4. What is the purpose of processing the personal data collected?

Personal data is collected for the following purposes in particular:

- the provision and improvement of the Site and the services provided;

- personalizing the User's experience on the Site;

- the management of public service missions entrusted to the Publisher;

- managing audience loyalty ;

- information management, events and communication;

- management of newsletter subscriptions and electronic mailings;

- studies, audits and statistics;

- compliance with its legal obligations.

Such data may not be used subsequently in a manner incompatible with these purposes.

For each processing operation, the Data Controller undertakes to collect and process only data that is strictly necessary for the purposes for which it is to be used.

The table below summarizes the various uses of Users' personal data and the legal basis for their processing.

Personal data	Goals	Legal foundations
IP address	- Ensuring the security of - Preventing misuse and abuse	- Legitimate interest
E-mail address	- Sending newsletters upon User registration - Responding to requests made by Users via the contact form or by e-mail	- User consent
First and last name	- Identification of the contact person and verification of his/her identity - Personalized response to User requests	- Legitimate interest: implemented to prevent identity theft - User consent
Telephone number Phone number (optional)	- To enable rapid and appropriate contact with the User - Verification of identity where necessary	- User consent - Legitimate interest: implemented to prevent identity theft
Message content	- Consideration and analysis of the User's request in order to provide an appropriate response.	- User consent

The cookies used on the Site are edited by the Editor, or edited by third parties and are the subject of a cookie policy, accessible here.

5. Who are the recipients of Users' personal data?

Personal data may be transmitted or made accessible to the following categories of recipients:

- Authorized persons within the Publisher ;

• Police authorities in the context of judicial requisitions;

- The administrative and judicial authorities empowered to seek out and identify offenders in strict compliance with the law.

The company also uses subcontractors to carry out the following operations:

- Hosting services ;

- Newsletter subscription and mailing management service ;

- Supply and management of statistics and studies.

6. On what legal basis(s) are personal data processed?

Personal data is processed by the Data Controller on the basis of the legitimate interest or consent given by the User to the processing of his/her personal data for one or more specific purposes described in this Privacy Statement, in accordance with Article 5(1)(d) of Regulation (EU) 2018/1725.

7. How long do you keep personal data?

Personal data is stored in a technically secure environment.

The data processed by the Site and the Site itself are hosted in France by O2SWITCH, whose contact details are as follows:

O2SWITCH

SAS with capital of €100,000
RCS Clermont-Ferrand 510 909 807
Code APE 6311Z
N° TVA : FR 35 510 90 98 07
Registered office : Chemin des Pardiaux 63000 CLERMONT FERRAND - France.
Telephone : 04.44.44.60.40

Users' personal data is kept for a period of time necessary for the purposes for which it is used. These periods vary according to the type of personal data, i.e. :

Types of personal data	Shelf life
IP address	Twelve months from last collection
E-mail address	Until you unsubscribe from the newsletter
Contact information: surname, first name, telephone number and e-mail address	3 years from the date of exchange with MansA via the contact form

In the event that personal data is processed for multiple purposes, including email addresses, it will be retained until the longest retention or archiving period for the intended purpose has expired.

At the end of the above periods, the personal data collected will either be deleted or made anonymous.

8. User rights :

In accordance with applicable law, Users have the following rights:

- Of the right to withdraw consent at any time to the processing of their personal data where such processing is based on consent, and to do so without affecting the lawfulness of the processing carried out prior to such withdrawal(right to withdraw consent - Article 7 paragraph 3 of the RGPD);

- Of the right to obtain confirmation as to whether or not personal data concerning him or her are being processed and, where they are, access to said personal data as well as to several pieces of information on the processing carried out by the Data Controller(right of access - Article 15 of the RGPD) ;

- The right to obtain rectification of inaccurate personal data concerning him/her(right of rectification - Article 16 of the RGPD) ;

- The right to obtain from the Data Controller the erasure of personal data concerning him/her in the cases provided for by the regulations(right to erasure - Article 17 of the RGPD). The Data Controller may object to the erasure of personal data, in particular for legitimate and compelling reasons or when the personal data is necessary for the establishment, exercise or defense of legal claims.

- The right to obtain limitation of processing in the cases provided for by the regulations(right to limitation of processing - Article 18 of the RGPD) ;

- Of the right to receive the personal data provided by the User, in a structured, commonly used and machine-readable format, and/or to ask the Data Controller to transmit this data to another Data Controller, where the processing is based on consent or contract and the processing is carried out using automated processes(right to data portability - Article 20 of the RGPD) ;

- Of the right not to be subject to a decision based exclusively on automated processing producing legal effects concerning the User or significantly affecting him or her in a similar way(right not to be subject to an automated individual decision - Article 22 of the RGPD) - processing carried out by the Data Controller is not affected because such automated decisions within the meaning of the aforementioned Article 22 are not carried out by the Data Controller.

The User has the legal right to define advance directives concerning the fate (conservation, deletion and communication) of his/her personal data in the event of death. It is up to the User(Article 85 of law no. 78-17 of January 6, 1978):

- or define general directives for all personal data and register them with a CNIL-certified trusted digital third party;

- or to inform the Data Controller of his or her specific directives concerning the fate of his or her personal data, by designating a trusted third party to be responsible for ensuring that these directives are respected, and to whom the Data Controller will communicate them when he or she becomes aware of them. Failing this, the heirs will have this right. To this end, they should produce the certificate of notoriety conferring on them the status of heir(s) and any document proving their identity.

In the absence of advance directives or a statement to the contrary in such directives, the heirs of the person concerned may exercise the rights referred to in this section after his or her death insofar as they are necessary for the organization and settlement of the deceased's estate.

9. How to exercise your rights

To exercise his rights, the User may contact the DPO by e-mail at the following address: dpo@mansacollective.fr

In the absence of a response within 1 month, the User may lodge an appeal with the Commission Nationale de l'Informatique et des Libertés (CNIL) on its website or via the following link: https: //connexion.services.cnil.fr/.