Privacy Policy

Last updated: January 2026

This Privacy Policy describes how the TEBULA consortium (hereinafter “we”, “us”, “our”) collects, uses, stores, shares and protects personal data of users of the website tebula.org (hereinafter “the Site”). By using the Site, you agree to the collection and use of information in accordance with this Policy

1. Data controller & Contact Information

Data Controller: Fondation Raoul Follereau
Registered address: 31 rue de Dantzig – 75015 Paris – France
Email contact: tebula@raoul-follereau.org
If required under applicable law, you may also contact our Data Protection Officer via the Contact Form.

2. What personal data we collect

We may collect the following categories of personal data:

Technical & Usage Data: IP address, browser type and version, device information, operating system, timezone, referring/exit pages, pages visited, date/time stamps, time spent on pages, interaction with content.
Cookies and Tracking Data: cookies, local storage and similar technologies (see Section 5 below).
Communications Data: any information you send us when you contact us (e.g., by email, contact form).

We only collect information if provided voluntarily (e.g., when you register, fill a form, or contact us), or automatically via log data and cookies when you browse the Site.

3. Purposes of processing & legal basis

We process your personal data for one or more of the following purposes:

Purpose

To provide and maintain the Site; account creation and authentication; manage user’s access to features
To analyze site usage, improve user experience, and optimize performance
To detect and prevent fraud, abuse, or unauthorized use and ensure the security of the Site
To comply with legal obligations (e.g., record-keeping, technical logs)

If we ask for your consent, you are free to withdraw consent at any time (see Section 8).

Legal Basis

Performance of a contract / contractual necessity
Our legitimate interest in improving our services
Our legitimate interest in protecting our business, users, and Site integrity
Legal obligation

4. Sharing your data: recipients and third parties

We may share your personal data with:

Legal or regulatory authorities, if required by law or to comply with a valid legal request.
Affiliates or successors, in the event of a merger, acquisition, reorganization, sale, or other transfer of all or part of our business — subject to confidentiality obligations.

We will not sell your personal data to third parties for marketing or commercial resale purposes.

5. Cookies and tracking technologies

We use cookies and similar tracking technologies. Cookies are small data files placed on your device. Types of cookies / trackers we may use:

Essential / Strictly Necessary Cookies: required for the Site to function (e.g., login sessions, security).

Your control: You may at any time disable or delete cookies via your browser settings. Disabling essential cookies may prevent certain features of the Site from functioning.

6. Data storage, location and retention period

Your personal data is stored on our internal servers in France. Data may be transferred outside the EU for the purpose of the TEBULA project, with appropriate protective measures in place. Retention periods depend on the type of data and processing purpose. For example:

Contact and support requests: kept for as long as necessary to respond, plus a reasonable period for record-keeping.
Log data and analytics: retained for a period consistent with our internal security, auditing, and legal requirements.

7. Your rights as a data subject

Under applicable data protection law (e.g., GDPR), you have certain rights. These include:

The right to access your personal data that we hold.
The right to correct or update inaccurate or incomplete data.
The right to erase your data (“right to be forgotten”), under certain conditions.
The right to restrict or object to processing, or to withdraw consent when consent is the legal basis.
The right to data portability — to receive data in a structured, commonly used, machine-readable format (when relevant).
The right to be informed of data breaches, when required by law.
The right to lodge a complaint with a supervisory authority (e.g., a data protection regulator) if you believe that our processing infringes applicable law.

To exercise any of these rights, please contact us using the contact details provided in Section 1. We will respond in accordance with applicable law.

9. Security Measures

The Raoul Follereau Foundation is committed to treating the personal data it collects with the utmost attention and care and implements technical, physical, and organizational measures to prevent, as far as possible, any disclosure, alteration, or unavailability. We also implement a policy of minimization by reducing the scope of data collection to what is strictly necessary.

10. Children’s privacy

Our Site is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we may have collected data from a child under that age, please contact us — we will take steps to delete such data promptly.

11. Notification of policy changes

We may update this Privacy Policy from time to time.

When we make changes, we will update the “Last updated” date at the top.
For material changes (that affect how we handle personal data), we will notify you by posting a notice on the Site or by contacting you directly (if you have provided contact information), before the change becomes effective.
By continuing to use the Site after changes take effect, you agree to the revised Policy.

12. Consent/Agreement

By using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please do not use the Site or provide any personal information. Your continued use of the Site following any changes constitutes acceptance of those changes.