Skip to main content

Last updated: April 2026

1. Controller Information

ENOS Head Office

CREPS Auvergne-Rhône-Alpes
150 passage François Lecler
07150 Vallon-Pont-d’Arc
France

info@outdoor-sports-network.eu

We are responsible for the processing of personal data on this website under the GDPR.

2. Hosting and Infrastructure

Our website is hosted on servers located in France. All data collected through forms is stored and processed on these servers unless otherwise stated in this policy.

3. General Data Processing Information

We process personal data only where necessary and in accordance with the General Data Protection Regulation (GDPR).

We do not sell personal data.

4. Server Log Files

When visiting our website, technical data is automatically collected, including:

  • IP address
  • Browser type and version
  • Operating system
  • Referrer URL
  • Date and time of access

Purpose: Website security, stability, and technical operation
Legal basis: Article 6(1)(f) GDPR (legitimate interest)

5. Contact Form

When you contact us, we collect:

  • Name
  • Email address
  • Message content

Purpose: Responding to inquiries
Legal basis:

  • Article 6(1)(b) GDPR (pre-contractual communication)
  • Article 6(1)(f) GDPR (legitimate interest)

Data is deleted once your request is resolved unless legal retention obligations apply.

6. Membership Application (Microsoft Forms)

Membership applications are processed via a multi-step form provided by Microsoft Forms.

We collect:

  • Organisation name
  • Organisation website and type
  • Contact person (name, email, phone number)
  • Invoice contact details
  • Full organisation address
  • VAT / tax number
  • Additional information provided during the application process

Purpose:

  • Processing membership applications
  • Managing membership relationships
  • Administrative and invoicing processes
  • Communication regarding membership

Legal basis:

  • Article 6(1)(b) GDPR (contractual necessity / pre-contractual steps)
  • Article 6(1)(c) GDPR (legal obligations, e.g. tax and invoicing)

Processor:
Microsoft acts as a data processor under Article 28 GDPR. Data may be processed on Microsoft infrastructure subject to appropriate safeguards (including Standard Contractual Clauses where applicable).

Storage:
Data is stored securely on our systems in France.

Retention:

  • Approved members: retained for the duration of membership and legal obligations
  • Rejected applications: deleted after a reasonable period unless otherwise required

7. Optional Publication of Member Information

Membership includes an optional public listing feature.

If you actively choose “Yes”, the following may be displayed publicly:

  • Organisation name
  • Website
  • Organisation type
  • General location (if applicable)

Legal basis: Article 6(1)(a) GDPR (consent)

Publication occurs only if explicitly selected.
Consent may be withdrawn at any time, after which data will be removed within a reasonable timeframe.

If “No” is selected, no data is published.

8. ENOS Charter Signature Form

When signing the ENOS Charter, we collect:

  • First and last name
  • Email address
  • Organisation name
  • Role or function
  • Optional remarks

Purpose:

  • Recording and managing charter signatories
  • Maintaining internal charter records
  • Communication related to the charter

Legal basis:

  • Article 6(1)(a) GDPR (consent)
  • Article 6(1)(b) GDPR (charter participation process)

Retention:
Data is stored only as long as necessary for the charter’s purpose or until consent is withdrawn.

No Public Disclosure:
Signatory data is not published or made publicly accessible.

9. Standout Quick Check

When you use the Standout Quick Check form, we collect the following personal data:

  • First name
  • Last name
  • Email address
  • Organisation
  • Country
  • Responses to a short questionnaire consisting of radio-button based questions

Purpose:

  • Providing a quick eligibility or interest assessment related to the Standout project
  • Analysing aggregated questionnaire responses to improve the project and related communications
  • Following up on submitted requests where necessary

At the end of the form, you may optionally opt in to receive further information by email about the Standout project.

Legal basis:

  • Article 6(1)(b) GDPR (processing necessary for pre-contractual steps or responding to user requests)
  • Article 6(1)(f) GDPR (legitimate interest in improving and managing the Standout project)
  • Article 6(1)(a) GDPR (consent for receiving further informational emails about the Standout project)

Retention:
Data is stored only for as long as necessary to process and evaluate the request. If you opt in for updates, your contact details are retained until you withdraw consent. Otherwise, data is deleted or anonymised after assessment completion unless legal obligations require otherwise.

10. Map Display of Members

Approved members may be displayed on a public map.

Displayed data may include:

  • Organisation name
  • Organisation type
  • General location

Purpose: Visualisation of member distribution

Legal basis:

  • Article 6(1)(a) GDPR (consent)
  • Article 6(1)(f) GDPR (legitimate interest)

Map Service:
The map uses external tile services (e.g. ArcGIS via server.arcgisonline.com).

When viewing the map:

  • Your browser loads map tiles from external servers
  • No member data is transmitted to the map provider
  • Only technical data (e.g. IP address) may be processed to load map tiles

11. Third-Party Services

We use external services for functionality and performance:

  • Email communication: Mailjet
  • Fonts: Google Fonts (fonts.googleapis.com, fonts.gstatic.com)
  • Content delivery networks: jsDelivr, unpkg
  • Embedded media: YouTube (including i.ytimg.com)
  • Advertising services: Google Ads / DoubleClick (googleads.g.doubleclick.net)
  • Mapping tiles: ArcGIS services

These services may process technical data such as IP addresses when loading content.

Legal basis:

  • Article 6(1)(f) GDPR (legitimate interest in website functionality)
  • Article 6(1)(a) GDPR where consent is required (e.g. marketing/ads)

12. Cookies and Tracking

We may use cookies and similar technologies for:

  • Website functionality
  • Performance and usability
  • Embedded content
  • Advertising (where applicable)

Non-essential cookies are only used with user consent where required.

13. Data Retention

We retain personal data only as long as necessary for:

  • The purpose for which it was collected
  • Legal obligations (e.g. tax law)

14. Your Rights Under GDPR

You have the right to:

  • Access your data (Art. 15)
  • Rectification (Art. 16)
  • Erasure (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)

Requests can be sent to the contact details above.

15. Right to Lodge a Complaint

You may lodge a complaint with a supervisory authority if you believe your data is being processed unlawfully.

16. Data Security

We implement appropriate technical and organisational measures to protect personal data against loss, misuse, or unauthorised access.

17. Changes to This Policy

We may update this Privacy Policy to reflect legal or technical changes. The latest version will always be available on this page.