Data protection policy

Security of processing

INACAT applies measures proportionate to the risk: named administrator accounts, regular backups, encrypted connections, form security and anti-spam protection, and logging of access to sensitive data.

Processors

The list of providers with access to personal data — hosting, email delivery, donation processing — will be published here and kept up to date.

Transfers outside the European Union

Where a transfer takes place, the applicable safeguards will be specified and documented.

Data breaches

Any breach likely to create a risk will be notified to the competent authority within 72 hours and, where necessary, to the people concerned.