Skip to content
FR EN

Legal

Privacy and personal data

Provisional text, currently being validated by the association.

Data controller

The Consom'Action association is responsible for the data processing carried out on consomaction.bf and on Consomètre. This processing is governed by Law No. 001-2021/AN on the protection of individuals with regard to the processing of personal data; its declaration to the Commission de l'Informatique et des Libertés (CIL) of Burkina Faso is in progress.

Data collected

  • Contact form: name, email address, phone number (optional), subject and message.
  • Membership and reports: contact details needed to follow up your case.
  • Consomètre surveys: your responses, kept separate from any identifying data; no name is requested.

Purposes

  • Reply to your messages and follow up your cases.
  • Produce aggregated statistics published with their methodology.
  • Manage association life (memberships, meeting notices).

Protection

Email addresses and phone numbers are encrypted in the database. Results are only published from 30 responses upwards; any waiver is justified and logged, and the sample size is always shown. Administration access is personal and logged.

Retention period

Contact messages: 12 months. Survey responses: duration of the study, then kept in anonymised form. Membership data: duration of membership plus 3 years.

Your rights

You may request access to, correction or deletion of your data, and object to its processing, by writing via the Contact page. You may also refer the matter to the CIL.

Newsletter and email tracking

Newsletter subscriptions use double opt-in (confirmation link valid for 48 hours); your email address is encrypted and the date and origin of your consent are recorded. Each email contains a one-pixel image and signed redirect links that tell us, for that mailing, whether the email was opened and whether a link was clicked: this information is only used to compute aggregate rates (opens, clicks, unsubscribes) and is never sold or shared. You can block images, change your preferences or unsubscribe in one click from any email; deleting your subscription also erases this history.

Cookies and local storage

The site only uses technical cookies, necessary for its operation and security: no advertising cookies or third-party analytics tools. They therefore do not require prior consent.

  • Session cookie (consomaction-session): keeps your session, any sign-in and your language preference (FR / EN choice stored in the session); lifetime: 120 minutes of inactivity, encrypted, HttpOnly.
  • XSRF-TOKEN cookie: protects forms against request forgery; same lifetime as the session.
  • Participation cookie (cm_p_{survey number}): random token used to resume a questionnaire you started and to limit duplicate responses; only its fingerprint is kept on our servers; lifetime: the survey's resume period, 72 hours by default. The questionnaire also keeps answers not yet sent (unstable connection) in your browser's local storage, deleted once sent.
  • Newsletter pixel: one-pixel image and signed redirect links in emails (no cookie set); they record opens and clicks for a mailing and are kept as long as you remain subscribed.
  • Cloudflare Turnstile bot check, if enabled on a form: third-party service loaded only on that form, with no advertising purpose.