Privacy Policy

1. Purpose

This Privacy Policy informs users about how their personal data is collected, processed and protected when using the site.

2. Data controller

OREADES SARL
15 rue Paul Bellamy
44000 Nantes — France
E-mail: mcouturier@oreades.biz

3. Data that may be collected

Depending on the features used, the site may collect the following categories of data:

• identity and contact data, such as name, username, e-mail address;
• contribution data, such as a submitted spot, comment, photo, review, report or text content;
• technical data, such as IP address, technical logs, browser information, device used or security information;
• browsing data and data from trackers, depending on the site configuration.

In accordance with the data-minimisation principle, only strictly necessary data is collected.

4. Purposes of processing

Data may be processed for the following purposes:

• managing the technical operation of the site;
• responding to requests sent via forms or by e-mail;
• managing, moderating and publishing user-submitted content;
• securing the site and preventing abuse;
• audience measurement and service improvement, in compliance with the rules applicable to trackers.

5. Legal bases

Processing may be based on:

• the performance of the service requested by the user;
• the publisher's legitimate interest, in particular for security, maintenance, moderation and improvement of the site;
• the user's consent, where required, in particular for certain cookies or trackers;
• compliance with legal obligations.

6. Data recipients

Data is intended for authorised persons within OREADES SARL as well as for technical providers involved in hosting, maintenance, audience measurement, e-mail delivery, mapping or storage, strictly within the scope of their assignments.

It may also be disclosed to the competent authorities where required by law.

7. Retention periods

Personal data is kept for no longer than necessary for the purposes for which it was collected. As an indication:

• contact requests may be kept for as long as needed to handle them;
• published contributions may be kept for as long as they remain relevant to the service, subject to deletion or a legitimate request;
• technical logs may be kept for a limited period linked to the security and proper operation of the site;
• cookies and other trackers are kept according to their nature (see the "Cookies and trackers" section).

8. Your rights

In accordance with the applicable regulations, every data subject has the right to access, rectify, erase, restrict, object to and, in certain cases, port their data.

Where processing is based on consent, that consent may be withdrawn at any time.

These rights may be exercised at the following address: mcouturier@oreades.biz.

Data subjects also have the right to lodge a complaint with the CNIL (the French data protection authority).

9. Security

The publisher implements appropriate technical and organisational measures to preserve the confidentiality, integrity and availability of personal data: access control, encrypted communications (HTTPS), restricted data access and sound technical administration practices.

10. Transfers outside the European Union

If certain tools or providers used by the site involve a transfer of data outside the European Union, the user will be informed and the appropriate safeguards will be specified.

Otherwise, data is hosted and processed under the technical conditions chosen by the publisher and its providers.

11. Cookies and trackers

A cookie or tracker is a file or mechanism that reads or writes information on the user's device while they browse.

The site only uses strictly necessary or functional trackers, which are exempt from prior consent:

• session cookie: authentication and navigation (deleted when the session ends);
• geo_locale_decided (7 days): stores the language decision (see next section);
• technical local storage: temporary geolocation-failure flag (15 minutes).

To date, the site uses no advertising or audience-measurement cookies. If trackers subject to consent were ever added, a consent mechanism would be put in place before they are set.

Users may configure their browser at any time to limit or block trackers, provided this does not impair the operation of certain features.

12. Geolocation and language

On your first visit, your IP address is used transiently (in memory, never logged by this feature) to determine your country from a local database. The site only switches to English automatically if your country is not a "home" country AND your browser language is not French. Legal basis: legitimate interest (browsing convenience). A "geo_locale_decided" cookie (7 days) stores this decision so it is not recomputed and so any manual language choice is respected.

13. Changes to this policy

This Privacy Policy may be amended at any time to reflect changes to the site, to the processing carried out or to the applicable regulations.