Privacy Policy

Last Updated: September 3, 2026

300FTR ("we", "us", or "our") operates the website www.300ftr.org (the "Site"). We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site or make a donation, in compliance with European Union data protection laws (such as the General Data Protection Regulation - GDPR) and applicable United States federal and state privacy laws (including CCPA/CPRA, CalOPPA, and CAN-SPAM).

1. DATA CONTROLLERS & ENTITIES

Your personal data is jointly or individually processed by the following entities depending on your geographic location and interaction:

• European Union (EU/EEA):
  300FTR-EU (Association loi 1901)
  RNA: W723018297 | SIRET: 988 096 004 00011
  Registered Address: 173 rue de Courcelles, 75017 Paris, France
  Contact Email: contact@300ftr.org

• United States (US):
  300FTR-US (501(c)(3) Public Charity)
  EIN: 42-4401833
  Registered Address: 30 N Gould St Ste R, Sheridan, WY 82801, USA
  Contact Email: contact@300ftr.org

2. INFORMATION WE COLLECT

We collect personal information that you voluntarily provide to us, as well as certain information automatically gathered when you navigate our Site.

A. Information You Provide Directly

• Donor & Identity Information: Full name, billing address, email address, phone number.

• Payment Information: Payment card details, bank account information, or third-party payment provider identifiers. (Note: We do not store full payment card numbers on our servers. All transactions are processed via secure, PCI-DSS compliant payment service providers like Mollie, Qonto, or Stripe).

• Communication Data: Information provided when you contact us via email, inquiry forms, or sign up for updates.

B. Information Collected Automatically

• Log Data & Technical Identifiers: IP address, browser type, operating system, referring URLs, device information, and pages viewed.

• Cookies & Tracking Technologies: Necessary technical cookies to ensure basic site functionality. We do not sell tracking data to third parties.

3. LEGAL BASIS & PURPOSES OF PROCESSING (GDPR Compliance)

If you are located in the European Economic Area (EEA), our legal bases for collecting and using your personal data are:

1. Compliance with Legal Obligations (Art. 6(1)(c) GDPR): To issue tax receipts, process donations, maintain accounting records, and comply with Anti-Money Laundering (AML/CFT) laws and international sanction lists checks.

2. Performance of a Task in the Public Interest / Legitimate Interests (Art. 6(1)(e)/(f) GDPR): To fulfill our humanitarian mission, manage non-profit operations, prevent fraud, and secure our Site.

3. Consent (Art. 6(1)(a) GDPR): Where applicable, for sending communications or setting non-essential cookies.

4. DISCLOSURE & SHARING OF INFORMATION

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• Service Providers & Financial Institutions: Authorized payment gateways (e.g., Mollie, Qonto), IT hosts, and banking partners strictly necessary to process your donations.

• Affiliated Entities: Between 300FTR-EU and 300FTR-US for humanitarian operations and administrative oversight.

• Legal Requirements & Compliance: When required by law, court order, or official governmental/regulatory authority, or to verify compliance against international financial sanction lists.

5. INTERNATIONAL DATA TRANSFERS

Because 300FTR operates globally, your personal data may be transferred to and processed in countries outside the EEA, including the United States.

When transferring data from the EEA to the US or other third countries, we ensure appropriate safeguards are implemented, such as Standard Contractual Clauses (SCCs) approved by the European Commission or relying on adequacy decisions, ensuring an equivalent level of protection.

6. DATA RETENTION

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, tax, and auditing obligations. Donors' financial and tax-related record data is retained for the mandatory periods dictated by French and US tax codes (typically 6 to 10 years).

7. YOUR PRIVACY RIGHTS

A. For European Union (EEA) Residents (GDPR)

Under the GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data.

• Right to Rectification: Correct inaccurate or incomplete data.

• Right to Erasure ("Right to be Forgotten"): Request deletion of your data (subject to legal retention requirements).

• Right to Restriction & Objection: Limit or object to our processing of your data.

• Right to Data Portability: Receive your data in a structured, machine-readable format.

• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority (e.g., the CNIL in France: www.cnil.fr).

B. For California & US Residents (CCPA/CPRA)

Under applicable US state laws, you have specific rights regarding your personal information:

• Right to Know / Access: Request disclosure of personal information collected and shared over the past 12 months.

• Right to Delete: Request erasure of your personal information.

• Right to Opt-Out of Sale/Sharing: We do not sell your personal data.

• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at contact@300ftr.org.

8. SECURITY OF YOUR DATA

We implement appropriate technical, administrative, and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission or electronic storage method can be guaranteed 100% secure.

9. THIRD-PARTY LINKS

Our Site may contain links to external websites. We are not responsible for the privacy practices or content of third-party sites. We encourage you to read their respective privacy policies.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect legal or operational changes. The updated version will be indicated by the "Last Updated" date at the top of this page.

11. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: contact@300ftr.org

• EU Mail Address: 300FTR-EU, 173 rue de Courcelles, 75017 Paris, France

• US Mail Address: 300FTR-US, 30 N Gould St Ste R, Sheridan, WY 82801, USA