Privacy Policy

1. Identification of the Data Controller

This website (Popsvaultieslistcrat.online) is operated by Popsvaultieslistcrat Floral Editions SAS, a simplified joint-stock company incorporated under the laws of the French Republic with registered company number SIREN 892 411 905 (RCS Paris). Our registered corporate address is 14 Rue de l'Arcole, 75004 Paris, France. Inquiries concerning this policy may be directed to our designated Data Protection Officer via email at [email protected].

2. Categories of Personal Data Collected

Popsvaultieslistcrat limits its data collection to the minimum required for editorial publication and electronic communications. We process data under the following conditions:

• Contact Inquiry Information: When you submit our correspondence form on our contact page, we collect your full name, email address, topic selection, and the textual message you provide.
• Technical Server Telemetry: Our servers automatically log standard network parameters, including anonymized IP addresses, browser agent headers, referring URLs, operating system configurations, and timestamps of page requests.
• Consent Decisions: We store your cookie consent preferences locally within your browser using localStorage keys to avoid re-prompting during subsequent sessions.

3. Legal Bases for Processing Under the GDPR

We process personal data strictly in compliance with Article 6 of Regulation (EU) 2016/679 (General Data Protection Regulation):

• Legitimate Interests (Art. 6(1)(f)): Server security, fraud prevention, network diagnostics, and continuous performance optimization of static content delivery.
• Consent (Art. 6(1)(a)): Voluntarily submitted inquiries via the contact form and optional analytical cookies chosen through our consent interface.
• Legal Obligation (Art. 6(1)(c)): Compliance with statutory French record-keeping obligations regarding business correspondence.

4. Third-Party Sub-processors & Data Transfers

We do not sell, rent, monetize, or broker personal information to marketing databases or behavioral profiling syndicates. Any technical providers engaged for static file hosting, DNS management, or mail routing are bound by strict European Data Processing Agreements (DPAs). When information is routed through servers outside the European Economic Area, appropriate safeguards such as standard contractual clauses (SCCs) are maintained.

5. Data Retention Schedules

User inquiries sent through our contact portal are retained for a maximum duration of twelve (12) months following resolution to facilitate continuity of service, after which they are irreversibly deleted. Technical server log entries are scrubbed on a rolling thirty (30) day basis. Local browser consent flags persist until cleared by the user or for a duration of twelve months.

6. Your Rights Under European Law (GDPR) & CCPA

Under Chapter III of the GDPR and applicable international data protection statutes, you possess explicit rights regarding your personal information:

• Right of Access (Art. 15): You may request confirmation and a free electronic copy of any personal data we hold about you.
• Right to Rectification (Art. 16): You may request immediate correction of inaccurate or incomplete records.
• Right to Erasure (Art. 17): Commonly termed the "Right to be Forgotten", you may demand erasure of records where no overriding legal obligation exists.
• Right to Restriction of Processing (Art. 18): You may ask us to suspend processing while accuracy disputes are resolved.
• Right to Data Portability (Art. 20): You have the right to receive provided data in a structured, machine-readable format.
• Right to Object (Art. 21): You may object at any time to processing based on legitimate interests.

To exercise any of these prerogatives, write directly to [email protected]. You also have the right to file a formal complaint with the French supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL, at www.cnil.fr).