1. Data Controller
The data controller for personal data collected on the platform is NGO LE MONDE DE NISMA, with official headquarters in Agla, Cotonou, Republic of Benin (Official registration: 2025/4051/DEP-LIT/SG/SAG-ASSOC of August 5, 2025). DPO Contact: contact@m-nisma.org.
2. Collected Data and Purposes
We only collect strictly necessary information: identity for statutory membership (Last name, First names, Nationality, Gender, Date of birth, Phone, Email), delivery coordinates for NISMA Services orders, and participation data in certified training programs. No data is shared or sold to third parties.
3. Security and Confidentiality
The platform enforces strict encryption protocols (HTTPS/TLS), secure session management, and comprehensive access traceability through an encrypted audit log.
4. Your Rights
In accordance with data protection regulations, you have the right to access, rectify, delete, and port your information. You can exercise these rights directly from your member workspace or by email at contact@m-nisma.org.
5. Retention Period
Membership data is kept for the entire time your application is being reviewed. Once a decision has been taken, the supporting documents (identity document and curriculum vitae) are automatically purged at the end of the retention period set by the association together with its local council. The application itself is kept as evidence that the decision was taken. Accounting records (dues, donations, orders) fall under the statutory retention periods for accounting. Reading annotations are kept until your account is deleted.
6. Recipients and Processors
Your data can be accessed only by authorised members of the board, the supervisory council and the executive management, and only within the scope of their duties. Payments are processed by FedaPay; no banking data is stored on the platform. Hosting and document storage are provided by our technical service providers, acting on our instructions. No data is transferred, rented or sold to any third party. Every access to a supporting document is recorded in an audit log.
7. Register of Processing Operations
This register lists the personal data processing operations carried out on the platform, together with their purpose, legal basis, the data concerned, their recipients and their retention period.
Statutory membership
- Purpose
- Review your application, keep the register of members and manage the life of the association.
- Legal basis
- Consent of the data subject and legitimate interest of the association.
- Data concerned
- Identity, contact details, profession, identity document, curriculum vitae, motivations.
- Recipients
- Board, supervisory council and executive management, authorised members.
- Retention period
- Review of the application, then automatic purge of the documents at the end of the retention period set by the association.
Dues and accounting
- Purpose
- Record dues, issue receipts and keep the accounts of the association.
- Legal basis
- Statutory obligation to keep accounting records.
- Data concerned
- Identity, amount and date of the dues, payment method.
- Recipients
- Treasury of the association and, where applicable, the statutory auditor.
- Retention period
- Statutory retention periods for accounting records.
Online donations
- Purpose
- Collect donations, issue receipts and report on how they are used.
- Legal basis
- Consent of the data subject and obligation to keep donations traceable.
- Data concerned
- Identity, contact details, donation amount, transaction reference.
- Recipients
- FedaPay (payment provider) and the treasury of the association.
- Retention period
- Statutory retention periods for accounting records.
NISMA Services orders
- Purpose
- Process orders, arrange delivery and provide after-sales follow-up.
- Legal basis
- Performance of the sales contract.
- Data concerned
- Identity, delivery address, telephone, order details.
- Recipients
- NISMA Services and the delivery provider.
- Retention period
- Statutory retention periods for commercial records.
Certifying training courses
- Purpose
- Register participants, track attendance and issue certificates.
- Legal basis
- Consent of the data subject and performance of the service.
- Data concerned
- Identity, contact details, training path, assessments.
- Recipients
- Teaching team and executive management, authorised members.
- Retention period
- Time needed to issue and keep the certificates.
Digital library
- Purpose
- Give access to digital works and keep your reading annotations.
- Legal basis
- Consent of the data subject and performance of the service.
- Data concerned
- Account identity, reading tokens, highlights, bookmarks.
- Recipients
- Library team, authorised members.
- Retention period
- Until your account is deleted.
Audit log and security
- Purpose
- Trace sensitive access, detect abnormal use and protect the platform.
- Legal basis
- Legitimate interest of the association in securing its systems.
- Data concerned
- Identity of the operator, action performed, IP address, timestamp.
- Recipients
- Authorised platform administrators.
- Retention period
- Time needed for the security of the systems.
Notifications and member information
- Purpose
- Inform members of decisions, events and publications that concern them.
- Legal basis
- Legitimate interest of the association and consent of the data subject.
- Data concerned
- Account identity and notification preferences.
- Recipients
- No external recipient.
- Retention period
- Until your account is deleted.
Last updated : August 2026Back to home 
