Privacy
Privacy policy.
Information provided under articles 13 and 14 of Regulation (EU) 2016/679. This page describes what we actually do, not what we plan to do.
Last updated: 7 October 2026.
Two roles, not to be confused
Donor data entered or imported into the application by an association is processed on that association's behalf. The association is the controller; ondonne is a processor within the meaning of article 28 GDPR. A data processing agreement governs that processing.
Data about visitors to this site and about people who write to us is processed by ALTIKVA, which is the controller for it. Unless stated otherwise, this page describes that second category.
Controller
ALTIKVA, 15 rue Gambetta, 92150 Suresnes, France. Contact: hello@altikva.com
What this site collects
This site has a single form, the request form: pilot beta, quote or contact. It is only sent if you agree to be contacted. A pilot beta request becomes a sign-up only once your address is confirmed through a link sent by email, valid for 48 hours; without confirmation, it does not reach the team and it is deleted after 30 days. The processing operations are set out in the table below.
Processing carried out on this site
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| First and last name, email address, organization, country, and if you give them: phone, message, size and tools of your organization | Answering your request and following up on the exchange | Consent (article 6(1)(a)) | 3 years after the last exchange |
| The same data, for a pilot beta request | Reviewing your request and activating your organization, once your address is confirmed through the link we email you | Consent (article 6(1)(a)) | 3 years after the last exchange. A request whose address was not confirmed is deleted after 30 days. |
| Audience measurement: page visited, referring site, country, browser and system, derived from the request. No cookie, no persistent identifier. | Knowing how much the site is visited and which pages are read, in order to improve it | Legitimate interest (article 6(1)(f)) | Daily fingerprint destroyed after 24 hours; aggregated, non-identifying statistics kept for as long as the site is measured |
| Server logs: IP address, timestamp, page visited | Security, abuse prevention and correct operation of the site | Legitimate interest (article 6(1)(f)) | 12 months |
| Technical signals from the browser and the connection, and IP address, sent to Cloudflare Turnstile on the first send of the request form | Fighting automated submissions of the form | Legitimate interest (article 6(1)(f)) | Not kept by ALTIKVA; Cloudflare processes it under its Turnstile policy |
Recipients
Data is accessible to the people at ALTIKVA who need it, and to our technical processors: Google Cloud for hosting, in Belgium, and Plausible Analytics for audience measurement, in Germany, both within the European Union. When you send the request form, and only then, Cloudflare Turnstile also receives data, on the terms set out in the next section. No data is sold, rented or shared with third parties for commercial or advertising purposes.
Protecting the form against robots
The request form (pilot beta, quote, contact) is protected against automated submissions by Cloudflare Turnstile. Cloudflare's script is loaded only when you send this form for the first time: browsing the site without sending anything passes nothing to Cloudflare. On that send, Cloudflare receives technical signals from your browser and your connection, including your IP address, the User-Agent header and the TLS fingerprint, and hands us a token attesting that the send does not come from a robot. Most of the time nothing is shown; when Cloudflare is unsure, a checkbox appears above the send button. We have Cloudflare check the token to accept or refuse the send, and do not keep it with your request. Purpose: fighting automated submissions. Legal basis: our legitimate interest in keeping this form usable (article 6(1)(f)). Cloudflare acts as our processor for this check. It also uses these signals, as a controller and on the basis of its own legitimate interest, to improve its detection of robots. Cloudflare may process this data outside the European Union; that transfer is covered by the European Commission's standard contractual clauses. Turnstile privacy policy: https://www.cloudflare.com/turnstile-privacy-policy/ Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/
Transfers outside the European Union
Data is hosted within the European Union, in Belgium for the site and its logs and in Germany for audience measurement. The one exception is the request form's protection against robots: Cloudflare Turnstile may process the data it receives outside the European Union, in particular in the United States. That transfer is covered by the standard contractual clauses adopted by the European Commission.
Cookies and analytics
This site measures its audience with Plausible Analytics. The tool sets no cookie, stores nothing on your device and creates no persistent identifier. It reads a single local value, “plausible_ignore”, which exists only if you set it yourself to be excluded from the measurement. No consent banner is therefore required, and no advertising or social-network cookie is set. The measurement script and the collection both go through our own domain: your browser sends no request to the measurement provider. No tracking is done across sites or across devices, and the statistics produced are aggregated. Your IP address and your browser are used only to compute a daily fingerprint that is never kept: the key used to compute it is destroyed every 24 hours, and neither the address nor the browser is stored. The only cookie this site sets is `i18n_redirected`, which remembers the language you are reading so it can serve it to you next time. It does nothing else, cannot identify you, and is one of the cookies necessary for the service you asked for, for which the rules require no consent. Only the server's technical logs remain, described in the table above; they separately serve the security and correct operation of the service. When you send the request form, the Cloudflare Turnstile script is loaded and may read or store technical information of Cloudflare's own in your browser, strictly necessary to detect automated submissions. It is not loaded before that first send.
Your rights
You have the right to access, rectify, erase, restrict, port and object, and to withdraw your consent at any time where processing relies on it. Withdrawal does not affect the lawfulness of processing carried out beforehand. To exercise these rights, write to hello@altikva.com. We respond within one month. You may also lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr
If you donated to an association
Send your request to the association concerned, which is the controller for your data. We carry it out on their behalf and within the time they set. If you are not sure who to contact, write to us and we will point you to the association, without handling the request in their place.
Automated decision-making
No processing described on this page produces an automated decision with legal effects or similarly significant effects on you within the meaning of article 22 GDPR.
Changes
This policy may change as the service does. The date of the last update appears at the top of the page. Substantial changes will be notified by email to the associations using the service.