Institute on Mercy, is an association whose registered office is located at 49 chemin Chantegrillet, 69110 Sainte-Foy -Les-Lyon and registered under the siret number xxx xxx xxx, in its capacity as data controller, attaches great importance to the protection and respect of your privacy.
The purpose of this policy is to inform you, in accordance with Regulation No. 2016-679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”), of our practices regarding the collection, use and sharing of information that you may provide to us through our website instituteonmercy.org (hereinafter, referred to as the “Site”).
The purpose of this policy is to inform you about the categories of personal data we may collect or hold about you, how we use it, who we share it with, how long we keep it and how we protect it, and what rights you have over your personal data.
1. The data we collect
When you use the site, you may transmit information to us, some of which may identify you and therefore constitute personal data (hereinafter referred to as “Data”). This is particularly the case when you contact us or register for events and training courses.
This information includes the following data:
- Contact data: refers to the data you provide when you fill in the contact request form.
- Browsing data: refers to data we collect when you browse the Site, such as the date and time of connection and/or browsing, browser type, browser language and address.
In the event that you connect to our services using the social networking features made available to you, we will have access to some of the Data (notably your first name, last name, photograph, e-mail address and number of Facebook friends) in your account on the said social network in accordance with the general terms of use of the social network concerned. We may also collect some of your Data when you interact with features of these social networks, such as “Like” features.
2. How do we use the data we collect?
We use the Data we collect in order to be able to contact you again following your request made via the contact form. This processing has the following legal basis: consent (the person has consented to the processing of his/her data).
When Data is collected, you will be informed whether certain Data is mandatory or optional. Data identified by an asterisk on the collection form is mandatory. Failure to do so may restrict the execution of your request.
3. Who are the recipients of the data we collect and for what purposes do we transmit this data to them?
3.1 Data processed by Institute on Mercy
- The Data collected is intended for us in our capacity as data controller.
- The departments responsible for processing your Data in order to contact you and process registrations, organize events and training courses and make bookings are the Marketing Department and the Training and Events Department.
3.2 Data transferred to public authorities and/or bodies
4. How long do we keep your data?
Your Data will not be kept longer than is strictly necessary for the purposes set out in this policy and in accordance with the Regulations and applicable laws.
In this respect, the Data used for the purpose of recontacting you are kept for 3 months.
When the retention periods expire, your Data is deleted or anonymized so that it can be used without infringing your rights. Nevertheless, your Data may be archived beyond the periods stipulated for the purposes of researching, establishing and prosecuting criminal offences, with the sole aim of making your Data available to the judicial authorities, where necessary.
Archiving means that your Data will no longer be available for consultation online, but will be extracted and stored on an autonomous and secure medium.
5. How and where is your data transferred?
Your Data will not be transferred outside the European Union.
6. How is your data protected?
We take appropriate technical and organizational measures to prevent unauthorized access to or modification, disclosure, loss or destruction of your Data.
7. What are your rights regarding your data?
In accordance with applicable laws and regulations on the protection of personal data, you have a number of rights relating to your Data, namely:
- A right of access and information You have the right to be informed in a concise, transparent, intelligible and easily accessible manner of how your Data is processed. You also have the right to obtain (i) confirmation that Data concerning you is being processed and, where appropriate (ii) access to such Data and to obtain a copy thereof.
- A right of rectification: you have the right to obtain the rectification of inaccurate Data concerning you. You also have the right to complete incomplete Data concerning you, by providing an additional declaration. Should you exercise this right, we undertake to communicate any rectification to all recipients of your Data.
- A right of deletion: in certain cases, you have the right to obtain the deletion of your Data. However, this is not an absolute right and we may for legal or legitimate reasons retain this Data.
- In certain cases, you have the right to obtain the limitation of the processing of your Data.
- A right to data portability you have the right to receive your Data that you have provided to us, in a structured, commonly used and machine-readable format, for your personal use or to transmit them to a third party of your choice. This right only applies when the processing of your Data is based on your consent, on a contract and is carried out by automated means.
- A right to object to processing: you have the right to object at any time to the processing of your Data for processing based on our legitimate interest, a mission of public interest and those for commercial prospecting purposes. This is not an absolute right, and we may refuse your request for legal or legitimate reasons.
- The right to withdraw your consent at any time: you may withdraw your consent to the processing of your Data where the processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent carried out prior to such withdrawal.
- The right to lodge a complaint with a supervisory authority: you have the right to contact your data protection authority to complain about our personal data protection practices – The right to give instructions concerning the fate of your data after your death: you have the right to give us instructions concerning the use of your Data after your death.
To exercise these rights, please contact our Data Protection Officer at the following address: Institute on Mercy – 49 chemin Chantegrillet, 69110 Sainte-Foy -Les-Lyon .
Please note that we may require proof of your identity in order to exercise these rights.
8. Changes to our privacy policy
We may occasionally modify this policy, in particular in order to comply with any regulatory, legal, editorial or technical developments. Where appropriate, we will change the “last updated” date and indicate the date on which the changes were made. Whenever necessary, particularly but not exclusively in the event of a substantial change or a particular event requiring modification of the present policy, we will inform you and/or seek your agreement. We advise you to check this page regularly for any changes or updates to our policy.
9. Contact
If you have any questions about this policy or if you have any queries about your Data, you can contact us by :
- sending an e-mail to our Data Protection Officer at the following address: contact@wimjm.org
- by writing to the following address: Institute on Mercy – 49 chemin Chantegrillet, 69110 Sainte-Foy -Les-Lyon.
Version updated on May 26, 2026.