This policy describes how the website actually works as currently published, including the membership request form. It will be updated as soon as the processing activities, service providers or features change.
Last updated : 6 September 2026
EDIBLE FOREST Organisation de l’Unité Africaine — EF-OUA
French association governed by the law of 1 July 1901, created in 2014.
RNA: W542001352 · SIREN: 803 052 711
Registered office: 1 rue Robert Delord, 19100 Brive-la-Gaillarde, France.
Privacy contact: spirit@mystik.work
This is a presentation website. There is no public user account and no payment service.
Membership request form ("Request membership" page): first name, last name, email address, country and motivation, which are required; phone, city, areas of interest and preferred way of contributing, which are optional; the language of the page used; confirmation that the bylaws and this policy have been brought to your attention; the date of the request and the progress of its review.
This information is recorded in the association's database so that the Bureau can review the request. It is never published on the website and is accessible only to authorized people within the association, after authentication.
Contact by email: whatever the sender chooses to include in a message to spirit@mystik.work, along with their email address.
No payment is requested on this website and no payment platform is connected to it.
Technical data: serving the pages involves the usual connection data being processed by the hosting provider's servers (IP address, request date and time, requested page, user agent), as needed to deliver and secure the website. These technical logs are managed by the hosting provider; the association operates no audience dashboard and performs no profiling.
The processing activities actually in place serve the following purposes:
Delivery and technical security of the website, including hosting logs: the association's legitimate interest in providing a functional website protected against abuse.
Handling emails received at spirit@mystik.work: legitimate interest in replying and, where the exchange concerns membership or a possible cooperation, preparatory steps taken at the person's request.
Membership request: steps preparatory to membership taken at the person's request, and the association's legitimate interest in reviewing the requests addressed to it.
No processing on this website currently relies on consent, since no audience measurement and no marketing tracking are in place.
The association's Bureau: recipient of the emails received, in particular to review applications and proposals.
Lovable Labs Incorporated (1 Lincoln St, Boston, MA 02111, United States): technical hosting and publishing provider for this website, acting as a processor for the connection data generated when pages are viewed, and also hosting the website images.
Google Ireland Limited / Google LLC: the website's typefaces are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). That request discloses the visitor's IP address and technical request details to Google.
Supabase (Supabase, Inc.): technical database and authentication provider, acting as a processor for recording membership requests and for the secure access reserved to authorized people within the association.
No other recipient is involved: no payment platform, no analytics tool, no advertising network and no CAPTCHA. No data is sold or transferred for commercial purposes.
Membership requests: kept for as long as needed to review them, then for as long as useful to the life of the association where membership becomes effective. A request that is not retained or is withdrawn is deleted once it is no longer needed to document the Bureau's decisions. You may ask for your request to be deleted at any time.
Hosting provider technical logs: kept for a short period, limited to delivery and security needs, in line with the provider's practices; the association keeps no separate archive.
Emails received at spirit@mystik.work: kept for as long as needed to handle the exchange, and at most three years after the last contact, then deleted. Records relating to the life of the association are kept in accordance with its own obligations.
Hosting and publishing are provided by Lovable Labs Incorporated, a company established in the United States. Connection data and published content may therefore be processed or accessed from the United States.
Loading Google Fonts may likewise involve processing of the visitor's IP address by Google, including in the United States.
The transfer mechanisms applied by these providers are set out in their own contractual documentation; no guarantee is asserted here that has not been verified directly.
Within the limits of the processing described above, you have the right of access, rectification, erasure, restriction and objection. The right to data portability and the right to withdraw consent do not apply here, as no processing is based on consent or on a contract performed through the website.
Requests can be sent to spirit@mystik.work. Requests concerning the hosting provider's technical logs may need to be forwarded to that provider.
You may also lodge a complaint with a supervisory authority, in particular the French data protection authority (CNIL, www.cnil.fr).
The website sets no analytics, advertising or behavioural tracking cookies, and uses no tracking pixel and no browser storage to identify visitors.
The displayed language depends solely on the page address (for example /association or /en/association): no language preference cookie is stored.
No consent banner is displayed, since no non-essential cookie is set. Should non-essential cookies ever be introduced, a compliant consent mechanism would be implemented before they are placed.
The website contains outbound links, notably to the French Official Journal of associations, mystik.work and lovable.dev. Following them takes you to third-party services governed by their own privacy policies.
These are plain links: no social button, widget, video or map is loaded into the pages. The only external content actually loaded by the browser is the Google Fonts stylesheet mentioned above.
Reasonable technical and organizational measures, proportionate to a presentation website, are implemented: HTTPS delivery, no database of personal data, and a limited number of people with access to the messages received.
No absolute security can be guaranteed on the internet.
Last updated: 6 September 2026.
This policy will be amended when the website's operation, its service providers or its processing activities change, in particular when online membership opens.
