Privacy Policy

Last update: September 30, 2026

This Privacy Policy describes how Dishen Buddha Archive, accessible in particular at dishenbuddhaarchive.org (hereinafter the "Site"), collects, uses, stores, and protects the personal data of its users.

The main purpose of the Site is the preservation, organization, translation, and dissemination of content related to Buddhism and the teaching of the Dharma.

The protection of the privacy of visitors, users, and contributors is an essential principle of the Site.

1. Data Controller

The processing of personal data carried out within the framework of the Site is administered by the non-professional publisher of Dishen Buddha Archive, established in France.

The project is intended to be supported by the Association Bouddhiste Dishen de France, currently in the process of being incorporated.

For any questions regarding the protection of personal data or to exercise the rights provided by the GDPR:

Dishen Buddha Archive
Association Bouddhiste Dishen de France — in the process of incorporation
41, cours de la Libération
33000 Bordeaux, France
E-mail: privacy@dishenbuddhaarchive.org

2. Data that may be processed

Depending on the features used, the Site may process in particular:

• information related to the user account, such as name, pseudonym, e-mail address, profile picture, and account identifier;
• information transmitted by a third-party authentication service, in particular when the user chooses to connect with Google;
• contributions made on the Site, including translations, subtitles, corrections, comments, revision history, and other content voluntarily submitted;
• technical information necessary for the operation and security of the Site, such as IP address, browser type, device used, technical logs, and connection dates and times;
• preferences necessary for the operation of the Site, in particular the interface language;
• information voluntarily communicated when the user contacts the Site team.

The Site strives to limit collection to data strictly necessary for the purposes pursued.

3. Data relating to religious or philosophical beliefs

Certain data revealing religious or philosophical beliefs constitute special categories of data within the meaning of Article 9 of the General Data Protection Regulation (GDPR).

The mere act of visiting Dishen Buddha Archive, consulting Buddhist content, creating an account, or using the ordinary features of the Site does not mean that the user declares to be Buddhist, to adhere to a religion, or to share a particular philosophical belief.

The Site is not intended to create religious profiles of its users based on their consultations, searches, or ordinary activities.

When a feature exceptionally requires the collection of information explicitly revealing religious or philosophical beliefs, such data shall only be processed when an appropriate legal basis within the meaning of the GDPR is applicable and, where required, after obtaining the explicit consent of the person concerned.

4. Purposes and legal bases

Personal data may be processed for the following purposes:

Account management and authentication
To allow account creation, login, profile management, and access to reserved features.
Legal basis: performance of the services requested by the user and, depending on the processing concerned, legitimate interest in the proper functioning of the Site.

Management of contributions and collaborative work
To allow, in particular, the creation, translation, correction, revision, validation, and history of contributions.
Legal basis: performance of the services requested by the user and legitimate interest in ensuring the integrity and traceability of collaborative work.

Security and abuse prevention
To ensure the security of the Site, prevent fraudulent access, abuse, and technical incidents.
Legal basis: legitimate interest in protecting the Site, its users, and its infrastructure.

Communication with users
To respond to requests, messages, and assistance requests.
Legal basis: legitimate interest or performance of measures taken at the user's request, depending on the nature of the request.

Compliance with legal obligations
Certain data may be stored or disclosed when required by applicable law.
Legal basis: legal obligation.

When processing is based on consent, it may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.

5. Authentication via third-party services

When you choose to sign in through a third-party authentication service — including Apple, Google, Facebook or Microsoft — the Site may receive the information strictly necessary to identify you and to create or manage your account, such as: your sign-in email address, name, profile picture, and a technical identifier provided by the provider.

The Site never receives your third-party account password.

Relay email addresses (“Hide My Email”): if you sign in through Apple using the “Hide My Email” feature, the address shown is a relay address provided by Apple to protect your real email address. The Site does not ask for a real email address in this case, and your account remains fully functional without one.

Using a third-party service also remains subject to that provider’s own terms and privacy policies. Sign-in data received from a third party is used only to identify your account and serves no other purpose; it is not used for marketing and is not added to mailing lists.

6. Recipients and service providers

Data is accessible only to persons and service providers who need it to ensure the operation, hosting, maintenance, security, or features of the Site.

Depending on the services actually used, these recipients may include in particular:

• the provider of the technical infrastructure and database;
• authentication providers;
• hosting and storage providers;
• services necessary for the dissemination of multimedia content;
• technical service providers strictly necessary for the operation of the Site.

Personal data is not sold to third parties.

7. International data transfers

Certain technical service providers may process data outside the European Economic Area.

When required by applicable law, such transfers are governed by a mechanism recognized by European Union law, such as an adequacy decision or standard contractual clauses adopted by the European Commission, as well as, when necessary, appropriate additional safeguards.

8. Retention period

Data is stored only for the duration necessary for the purposes for which it was collected and for applicable legal obligations.

Data linked to an account is generally stored for the life of the account, then deleted or anonymized within a reasonable period, subject to data that must be stored for legal, security, or rights protection reasons.

Certain contributions integrated into editorial or collaborative work may be stored after an account is closed when necessary for the integrity, history, or understanding of the published content. Where possible and appropriate, they may then be disassociated from the account or anonymized.

Technical logs and security data are stored for a period proportionate to their purpose.

9. Cookies and similar technologies

The Site may use cookies or similar technologies strictly necessary for its operation, in particular for authentication, security, session retention, or essential preferences.

Cookies or trackers that are not strictly necessary, including those used for non-exempt audience measurement, personalization, or originating from certain third-party services, are only placed or activated under the conditions provided by applicable law and, where required, after obtaining the user's consent.

The user may change their choices at any time when consent mechanisms are offered.

10. Security

Reasonable technical and organizational measures are implemented to protect personal data against loss, unauthorized access, modification, disclosure, or destruction.

Since no computer system can guarantee absolute security, however, the Site adapts its protection measures to the nature of the data processed and the identified risks.

11. Data subject rights

Under the conditions provided by the GDPR and French law, every data subject may in particular have:

• a right of access to their data;
• a right to rectification;
• a right to erasure;
• a right to restriction of processing;
• a right to object in situations provided for by law;
• a right to portability where applicable;
• the right to withdraw their consent at any time when processing is based on it.

These rights may be exercised at the following address:

privacy@dishenbuddhaarchive.org

Proof of identity may be requested only when necessary to verify the identity of the requester.

The data subject also has the right to lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL).

12. Minors

The Site is intended for the dissemination and consultation of cultural, documentary, educational, and religious content.

When the processing of data concerning a minor requires specific consent under applicable law, the necessary measures will be implemented to comply with the rules regarding the protection of minors.

13. Amendment of this policy

This Privacy Policy may be modified to take into account changes to the Site, its features, its service providers, or the applicable legal framework.

The date of the last update is indicated at the top of this page.

In the event of a substantial change affecting users' rights or the way their data is processed, appropriate information will be provided when necessary.

14. Languages

This Policy may be made available in several languages to facilitate understanding by international users.

The French version is the reference version. In the event of a divergence of interpretation between different translations, the French version shall prevail to the extent permitted by applicable law.

The mandatory provisions potentially applicable to a user due to their country of residence remain fully applicable.

15. Contact

For any questions regarding this Policy or the protection of personal data:

Dishen Buddha Archive
E-mail: privacy@dishenbuddhaarchive.org