tjt-aphp-acceptesst-est-outrans

Privacy policy

Effective as of 3 September 2026.

1. Who is responsible for your data?

The data controller responsible for processing your personal data is:

Acceptess-T
Association governed by the French law of 1 July 1901
88 rue Philippe de Girard, 75018 Paris, France
SIRET 524 416 187 00036
Email: contact@trajectoiresjeunestrans.fr

Contact point for any questions concerning your data:
Data Protection Contact for Trans Youth Trajectories (TYT)
By email: contact@trajectoiresjeunestrans.fr
By post: Acceptess-T, 88 rue Philippe de Girard, 75018 Paris, France, for the attention of the Data Protection Contact for Trans Youth Trajectories.

2. Our principles:
  • We only collect data that are strictly necessary.
  • We do not sell, rent or exchange your data. We never use them for commercial marketing purposes.
  • We do not use any audience measurement tools and do not track your browsing.
  • If you report a situation of danger or severe distress, involving yourself or a third party, this policy may not apply as such: see section 3.4.
3. The processing activities we carry out:

3.1 Contact form:

Data collected: full name, email address, telephone number (optional), and the content of the message you send us.

Your name and email address are necessary for us to respond to you. Your telephone number is optional.

Purpose: to respond to your request, provide you with information about the platform and, where appropriate, direct you to an appropriate resource or organization.

Sensitive information. The content of your message, and of any subsequent exchanges, may concern information falling within the special categories of personal data under Article 9 of the GDPR: for example, your gender identity, pronouns, transition history, or health status. We may ask you such questions when this helps us respond appropriately or refer you to a suitable professional; you remain free not to answer. This processing is based on your explicit consent, given by replying (Article 9(2)(a) GDPR). These messages are accessed only by the people responsible for responding to them.

Retention period: we do not currently apply automatic deletion after a fixed period. Your messages are kept in our mailbox for as long as they remain useful for following up on your request, where support for a family continues over time. You may ask us to delete your messages at any time (see your rights, section 6).

3.2 Newsletter:

Current status of the service. Newsletter subscriptions are currently suspended. They will only be reinstated together with an email confirmation mechanism ensuring that only the person who owns the address can subscribe (double opt-in). The following describes the future mechanism:

Data collected: your email address.

Purpose: to periodically send you information about healthcare and support pathways for trans and gender-questioning young people, as well as news about the platform.

Legal basis: your consent (Article 6(1)(a) GDPR), collected through an unticked checkbox followed by an email confirmation request. The form also includes a separate unticked checkbox through which you certify that you are aged 15 or over: in accordance with Article 8 GDPR and Article 45 of the French Data Protection Act (Loi Informatique et Libertés) (see 3.4), registration is restricted to people of this age or older, as it is not possible to reliably obtain, through a simple form, the joint consent of a younger minor and the holder of parental authority. Your subscription only becomes effective after you activate the confirmation link.

Proof of consent. We retain the date on which you confirmed your subscription, as recorded by our mailing service provider, for the duration of your subscription or until you ask us to delete it, possibly earlier if the address was collected without valid consent.

Withdrawal of consent. Every mailing includes a one-click unsubscribe link, without justification and free of charge. You may also write to contact@trajectoiresjeunestrans.fr. Unsubscription is processed without delay and prevents any further mailings.

Retention period: until you unsubscribe, or earlier if the address was collected without valid consent.

3.3 Booking an appointment for a drop-in session:

The website allows you to book a drop-in session online via a dedicated form (https://trajectoiresjeunestrans.fr/en/virutal-drop-in-sessions/). These sessions are free and confidential information and referral appointments, held by videoconference with a peer health mediator, intended for young people concerned, their parents and the professionals supporting them.

Data collected:

  • your first name or a pseudonym of your choice;
  • your email address;
  • the language in which you would like the exchange to take place;
  • your profile from the following options: young person concerned, parent, or professional;
  • your geographical area of residence (Île-de-France or the rest of France);
  • the age group of the young person concerned (under 20, or 20 and over);
  • your preferred date and time slot.

Two optional fields may also be completed on the form: the sex recorded at birth of the young person concerned, and their preferred pronoun(s). You may leave these blank.

Sensitive information. These two optional fields, as well as the exchanges taking place during the session itself, may concern gender identity, pronouns or the nature of the transition pathway of the young person concerned, which falls within the special categories of personal data under Article 9 GDPR. The peer health mediator may ask such questions during the exchange in order to address the person appropriately and refer them to suitable professionals; you remain free not to answer. This processing is based on the explicit consent of the data subject (Article 9(2)(a) GDPR). This information is used solely to prepare for and conduct the exchange and is not disclosed to anyone else.

Purpose: to organize and confirm your drop-in session appointment and enable the peer health mediator to prepare for the exchange. The “profile” field is used solely to guide preparation for the exchange.

Legal basis: your consent, collected through a dedicated checkbox when the form is submitted (Article 6(1)(a) GDPR, and Article 9(2)(a) for the information mentioned above).

Validation and confirmation. Requests are validated manually. The appointment is only final after an email confirmation containing the videoconference link.

Retention period: a maximum of one year. Appointments can only be booked up to one year in advance, and your data are automatically deleted from our servers once the date of the appointment has passed.

3.4 Minors and situations of danger:

This website is intended also for minors. In accordance with Article 8 GDPR and Article 45 of the French Data Protection Act (Loi Informatique et Libertés), a minor may consent independently to the processing of their data from the age of 15. Below this age, consent must in principle be given jointly by the minor and the holder of parental authority; this is why newsletter registration is restricted to people aged 15 and over, using a dedicated checkbox (see 3.2).

This threshold never closes the door to you. It determines the legal basis on which we process your message in the ordinary use of the contact form, but it does not affect your right to write to us. If you are under 15 and contact us, in particular to report a situation of distress or danger, we receive, read and process your message in the same way as any other person’s message: we then rely on other legal grounds provided for by the GDPR (the protection of your vital interests or those of a third party, Article 6(1)(d), and Article 9(2)(c) for sensitive information; or our legitimate interest in responding to you and directing you to appropriate support, Article 6(1)(f)), rather than on your consent.

An exception takes precedence over everything else in this policy, regardless of your age. If you report, or if we identify when reading a message, a situation of serious danger or severe distress involving yourself or a third party, particularly where a minor is concerned, we may need to retain the information necessary beyond the periods stated elsewhere in this policy and, where appropriate, disclose it to the relevant authorities or services (social services, units responsible for collecting reports of children at risk, judicial authorities), in order to protect you or a third party. This possibility, provided for by Article 226-14 of the French Criminal Code, takes precedence over the confidentiality commitments and retention periods described elsewhere in this document, including for people under 15 as well as minors aged 15 to 17.

3.5 Cookies:

The website places two technical cookies, both limited to the duration of your session (they are deleted when you close your browser):

  • a cookie that remembers the display language you have chosen;
  • a cookie that records your screen resolution, used by the website theme to adapt the display to your device.

These two cookies are strictly necessary for the provision of a service that you expressly request and are therefore exempt from consent (Article 82 of the French Data Protection Act, which transposes the ePrivacy Directive). This is why no cookie banner is displayed for these cookies.

4. Who has access to your data?

Within the team. Only the people responsible for responding to messages, managing the newsletter or organizing drop-in sessions have access to the relevant data.

Our processors. We use service providers that process data on our behalf, solely on our instructions:

Provider Role Data concerned Location
o2switch (SAS, Clermont-Ferrand) Hosting of the website, forms and email service All website data France
Brevo (SAS, Paris) Sending and management of the newsletter Email address, confirmation date, sending statistics France / European Union
Google LLC (Gmail) Receipt of contact-form messages and responses to those messages Message content, email address United States, on the basis of the Data Privacy Framework
Cloudflare, Inc. Anti-bot verification for the contact form (Turnstile) Technical browsing data related to the verification United States, on the basis of the Data Privacy Framework

We do not transfer data to third parties other than the providers listed above, except in two cases: a legal request from an administrative or judicial authority, or a situation of serious danger covered by section 3.4.

5. How long do we retain your data?
Data Retention period
Messages received through the contact form As long as useful for following up on your request, with no fixed period
Email address subscribed to the newsletter Until you unsubscribe, or earlier if the address was collected without valid consent
Data relating to a drop-in session appointment Maximum of 1 year; automatic deletion once the appointment date has passed
Technical cookies (language, screen resolution) Duration of the session (until the browser is closed)
Cookies placed by Cloudflare Turnstile (contact form) For the duration of the verification

These periods are subject, where applicable, to the exception in section 3.4 in the event of serious danger.

6. Your rights:

With regard to data concerning you, you have the following rights:

  • Right of access (Art. 15): to obtain confirmation that we process data concerning you and to receive a copy.
  • Right to rectification (Art. 16): to have inaccurate or incomplete data corrected.
  • Right to erasure (Art. 17): to request deletion of your data.
  • Right to restriction of processing (Art. 18): to request the temporary suspension of processing.
  • Right to object (Art. 21).
  • Right to data portability (Art. 20).
  • Right to withdraw your consent at any time (Art. 7(3)), without affecting the lawfulness of processing carried out before the withdrawal.
  • Right to define instructions concerning what happens to your data after your death (Art. 85 of the French Data Protection Act).

How to exercise your rights. Write to contact@trajectoiresjeunestrans.fr, or by post to Acceptess-T, 88 rue Philippe de Girard, 75018 Paris, France, for the attention of the Data Protection Contact for Trans Youth Trajectories.

Response time. One month from receipt of your request, extendable by two months if the request is complex, with the reasons for the extension communicated within the first month.

Limitations. Some data may have to be retained despite a request for erasure, in particular to comply with a legal obligation, to establish or exercise legal rights, or in situations of danger described in section 3.4.

Complaints. You may lodge a complaint with the French data protection authority:

CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
www.cnil.fr/fr/plaintes

7. How we protect your data:
  • the website is accessible via HTTPS (encrypted connection);
  • access to the website’s administration tools and email service is password-protected and restricted to people who need it;
  • we make efforts to keep the website and its components up to date.
8. Changes to this policy:

This policy may be amended to reflect changes to the website, the services offered or applicable regulations. The date of the latest update appears at the top of the page.

Close