The purpose of this Privacy Policy is to inform users of the official Fanny J website, accessible at theofficialfannyj.com (hereinafter the “Site”), of the manner in which their personal data may be collected, used, stored and protected.
The protection of your personal data is taken seriously. The processing carried out within the framework of the Site is carried out in accordance with Regulation (EU) 2016/679 of April 27, 2016, known as the General Data Protection Regulation (“GDPR”), French law no. 78-17 of January 6, 1978 as amended, known as “Informatique et Libertés”, as well as other applicable legal and regulatory provisions.
1. Data controller
Unless otherwise indicated regarding a service operated directly by a third party, the person responsible for processing personal data collected within the framework of the Site is:
HOPE INDUSTRY
Simplified joint stock company (SAS)
Share capital: €3,000.00
Head office: BAT HORIZON BOITE 7 C/O GUYACALL
4 RUE DE L’ASTROLABE
97354 REMIRE-MONTJOLY
SIREN: 910 152 511
SIRET: 910 152 511 00036
RCS: 910 152 511 R.C.S. Cayenne
Intracommunity VAT: FR83910152511
Contact regarding personal data:
yourmusic973@gmail.com
2. Scope
This Privacy Policy applies to the processing of personal data carried out in the context of the use of the Site, in particular when you:
- browse the Site;
- use a contact form;
- you subscribe to the newsletter;
- contact the Fanny J team;
- send a message or content intended for the Fanbase;
- use an interactive feature;
- place, when this possibility is offered, an order on the Site;
- interact with embedded content or services from third parties;
- accept certain cookies or other trackers.
Third party services accessible from the Site may have their own privacy policies. When you leave the Site or directly use a third-party service, the processing carried out by this third party is subject to its own rules.
3. Personal data that may be collected
Depending on your use of the Site, different categories of data may be processed.
3.1 Identification and contact data
In particular, the following may be collected:
- name ;
- first name or pseudonym;
- email address;
- telephone number when requested or voluntarily communicated;
- any other information you choose to communicate in your message.
3.2 Data relating to the newsletter
When you subscribe to the newsletter, the following may be processed:
- your email address;
- possibly your first or last name;
- the date of your registration;
- information relating to your consent;
- the information necessary to manage your subscription and unsubscription.
Depending on the tool used to send newsletters, certain technical data relating to deliverability or interactions with communications may also be processed within the limits authorized by regulations.
3.3 Data transmitted via forms
When you fill out a form, the information entered in the different fields may be collected.
Mandatory fields, where they exist, are identified as such.
Failure to provide mandatory information may result in the request in question not being processed.
3.4 Data relating to the Fanbase
When the Site allows you to send a message, testimonial or other content intended for the Fanbase, the following may in particular be collected:
- surname, first name or pseudonym;
- email address;
- content of the message;
- photograph or other content that may be transmitted;
- information necessary for moderation and management of the publication.
The user is invited not to unnecessarily transmit sensitive information or personal data concerning third parties.
3.5 Order data
When sales are made directly on the Site, the data necessary to process the order may include:
- identify ;
- contact details ;
- billing address;
- Delivery address ;
- order information;
- transaction history;
- information necessary for invoicing;
- data relating to delivery and possible returns.
Payment data may be processed directly by a secure payment provider. Except when strictly necessary and technically provided for, the Site is not intended to retain the user's complete banking data.
When the purchase is made on a third-party platform to which the Site redirects the user, the processing of data related to the purchase is carried out in accordance with the confidentiality policy of this platform.
3.6 Technical and navigation data
During your navigation, certain technical information may be automatically processed, such as:
- IP address;
- type of device;
- operating system;
- browser type and version;
- date and time of connection;
- pages viewed;
- technical data relating to requests addressed to the server;
- information relating to the operation and security of the Site;
- data from cookies or other trackers when they are used.
Some of this data may be necessary for the operation, security or maintenance of the Site.
4. Purposes of processing
Personal data may be processed in particular in order to:
Site Management
- allow access and operation of the Site;
- ensure its maintenance;
- guarantee its safety;
- detect and prevent technical incidents, abuse or fraudulent access attempts.
Request management
- respond to messages and requests sent to the team;
- manage professional, artistic, media, booking or partnership requests;
- ensure follow-up of exchanges.
Newsletter
- manage registrations and unsubscriptions;
- send information relating to Fanny J;
- communicate about new musical releases, concerts, tours, events, projects, collections, products or exclusive announcements.
Fanbase
- receive messages and contributions from users;
- moderate content;
- select the content likely to be published;
- publish, when planned and authorized, certain content in the Fanbase area.
Shop
When sales are made directly on the Site:
- register and process orders;
- manage payments;
- ensure delivery;
- manage order requests;
- manage returns, refunds and complaints;
- ensure invoicing and comply with accounting and tax obligations.
Audience measurement
When corresponding tools are used:
- measure traffic to the Site;
- understand the general use of the Site;
- improve content, ergonomics and performance.
Third-party services and integrated content
When the user consents when this consent is required:
- display certain content from third-party platforms;
- allow the use of functionalities offered by external services;
- allow certain interactions with social networks, music platforms or video services.
5. Legal bases for processing
The processing carried out by the Site is based, depending on their nature, on one of the legal bases provided for by the GDPR.
Consent
Consent may in particular constitute the legal basis for:
- subscribing to the newsletter;
- certain cookies or trackers;
- certain audience measurement tools when consent is required;
- certain third-party content or services;
- certain uses or publications of content voluntarily submitted by users where consent is the appropriate basis.
Consent may be withdrawn at any time, without calling into question the lawfulness of the processing carried out before its withdrawal.
Execution of a contract or pre-contractual measures
This base can be used in particular for:
- process an order;
- ensure delivery;
- manage a request directly linked to a contract or an order;
- manage certain pre-contractual requests.
Legal obligations
Certain data may be processed or retained in order to comply with legal obligations, in particular accounting, tax, administrative or relating to the management of people's rights.
Legitimate interest
Certain processing may be based on the legitimate interest of the data controller, in particular when it is necessary to:
- ensure the security of the Site;
- prevent fraud or abuse;
- manage and improve the technical functioning of the Site;
- respond to certain spontaneous requests;
- ensure the defense of the rights of the data controller.
These interests are assessed taking into account the rights and freedoms of the persons concerned.
6. Obligatory or optional nature of the data
When a form contains mandatory fields, these are necessary to process the corresponding request.
Other information is optional.
The user is invited to only communicate the information necessary for their request and to avoid transmitting particularly sensitive data when it is not necessary.
7. Data recipients
The data is accessible only to people and organizations who need to access it as part of their missions.
The following may in particular be recipients of the data, depending on the processing concerned:
- HOPE INDUSTRY;
- authorized persons involved in the management of the Site or the activity of Fanny J;
- technical service providers;
- the host of the Site;
- service providers responsible for maintenance;
- messaging providers;
- newsletter providers;
- payment providers;
- delivery providers;
- audience analysis providers;
- the technical platforms necessary for the operation of certain functionalities;
- professional advice when necessary;
- administrative or judicial authorities when required by law.
Service providers to whom data is entrusted must process the data in accordance with the applicable instructions and the obligations provided for by the data protection regulations.
8. Site hosting
The Site is hosted by:
o2switch
Path of the Pardiaux
63000 Clermont-Ferrand
France
Hosting the Site involves the processing of certain technical data necessary for its operation, its security and the provision of the hosting service.
9. Shelf life
Personal data is only kept for as long as necessary for the purposes for which it was collected, subject to legal retention obligations.
In general:
Contact requests: data may be kept for the time necessary to process the request and reasonably monitor the relationship, then deleted or archived when their retention is no longer necessary.
Newsletter: the data is kept until consent is withdrawn or the user unsubscribes, subject to the retention of the elements necessary to demonstrate compliance with legal obligations.
Fanbase: data and content may be retained for the time necessary for their moderation, their possible publication and the management of this publication. Published content may remain accessible until it is withdrawn or until it is no longer necessary for the intended purpose.
Orders: the data necessary for contractual management is kept for the period necessary for the execution of the order then, when required by regulations, archived for the applicable legal deadlines.
Invoices and accounting documents: They are kept in accordance with applicable legal obligations.
Technical and security data: They are kept for a period proportionate to operating, maintenance and security needs.
Cookies and trackers: Their retention periods are determined in accordance with applicable regulations and are specified, where applicable, in the Cookies Policy or the consent management tool.
When data is necessary for the establishment, exercise or defense of a legal right, it may be kept for the period necessary for this purpose.
10. Newsletter and electronic communications
Subscription to the newsletter is voluntary.
When sending a communication is based on your consent, you can withdraw it at any time.
Each communication concerned must in particular make it possible to unsubscribe easily, for example by means of an unsubscribe link.
Withdrawal of consent does not affect the lawfulness of processing carried out before it.
11. Cookies and other tracers
The Site may use cookies or similar technologies.
These technologies can be used in particular to:
- ensure the technical operation of the Site;
- memorize certain choices;
- secure navigation;
- measure the audience;
- integrate content or services offered by third parties.
Cookies strictly necessary for the operation of the Site may be placed when regulations permit their use without consent.
Cookies and trackers requiring consent are only placed or activated after obtaining it.
During their first visit, the user may be invited, by means of a consent management system, to:
- accept the tracers concerned;
- refuse them;
- personalize your choices.
Refusing unnecessary cookies should not prevent access to the essential functionalities of the Site.
The user must be able to subsequently modify or withdraw their consent as easily as they gave it.
Detailed information concerning the cookies actually used, their purpose, their suppliers and their retention period may be presented in a separate Cookies Policy and/or directly in the Site's cookie management tool.
12. Third Party Services and Content
The Site may integrate or offer links to services operated by third parties, including:
- music streaming platforms;
- video platforms;
- social networks;
- ticket offices;
- sales platforms;
- payment services;
- other partners or service providers.
The use of these services may result in data processing by the companies that operate them.
When a third-party service requires the placement of cookies or access to information stored on the user's device and consent is required, this service should only be activated after obtaining the corresponding consent.
Users are encouraged to consult the privacy policies of the relevant third-party services to learn about their practices.
13. Data transfers outside the European Economic Area
Certain third-party providers or services that may be used by the Site may process data from countries located outside the European Economic Area.
When an international transfer of personal data takes place, the controller ensures, to the extent that it is his responsibility, that the transfer is carried out in accordance with the requirements of the GDPR.
Depending on the circumstances, the transfer may notably be based on:
- an adequacy decision from the European Commission;
- standard contractual clauses approved by the European Commission;
- or any other transfer mechanism provided for by applicable regulations.
Additional measures may be implemented when necessary.
14. Data security
Appropriate technical and organizational measures are implemented to ensure a level of security adapted to the risks presented by the processing.
These measures aim in particular to limit:
- unauthorized access to data;
- accidental or unlawful disclosure;
- unauthorized modification;
- accidental loss or destruction;
- misuse of data.
Access to systems containing personal data must be limited to authorized persons.
However, no computer system or means of transmission on the Internet can guarantee absolute security.
In the event of an incident likely to constitute a personal data breach, the measures provided for by the applicable regulations will be implemented, in particular concerning the documentation of the incident and, when the legal conditions are met, its notification to the competent authority and/or to the persons concerned.
15. Rights of individuals
Under the conditions provided for by the GDPR and applicable legislation, you may have the following rights:
Right of access
You can ask to know whether personal data concerning you are processed and, when this is the case, request access to the information provided for by the regulations.
Right of rectification
You can request the correction of inaccurate or incomplete personal data concerning you.
Right to erasure
You can request the erasure of your data in the situations provided for by the regulations.
However, this right is not absolute and certain data may need to be retained, in particular in order to comply with a legal obligation or to enable the establishment, exercise or defense of legal rights.
Right to restriction of processing
You can request, under the conditions provided for by the GDPR, that the use of certain data be temporarily limited.
Right to object
When the processing is based on certain legal bases, in particular legitimate interest, you can object to the processing for reasons relating to your particular situation under the conditions provided for by the GDPR.
When data is used for direct marketing purposes, you can object to this use under the conditions provided for by the regulations.
Right to portability
Where the legal conditions are met, you can request to receive certain personal data that you have provided in a structured, commonly used and machine-readable format, or request its transmission to another controller where technically possible.
Withdrawal of consent
When the processing is based on your consent, you can withdraw this at any time.
The withdrawal of consent does not affect the lawfulness of the processing carried out before this withdrawal.
Guidelines for the fate of data after death
Under the conditions provided for by French law, you can define directives relating to the conservation, erasure and communication of your personal data after your death.
16. Exercise of your rights
To exercise your rights or ask a question regarding the processing of your personal data, you can contact:
HOPE INDUSTRY
Email: yourmusic973@gmail.com
Your request must allow you to be sufficiently identified and to understand precisely the right you wish to exercise.
In the event of reasonable doubt regarding the identity of the person making the request, additional information necessary to verify their identity may be requested.
No copy of an identity document should be systematically requested when it is not necessary.
Requests are processed within the time limits provided for by applicable regulations.
17. Complaint to the CNIL
If you consider, after contacting the data controller, that your rights relating to the protection of your personal data are not respected, you have the right to lodge a complaint with the competent French authority:
National Commission for Information Technology and Liberties (CNIL)
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France
18. Data of minors
The Fanny J Official Site is likely to be consulted by a varied audience.
Its main purpose is not to collect personal data relating to minors.
Minors are encouraged not to transmit personal information that is not necessary and, where required by regulations, to obtain authorization from their legal representative before using a service involving processing based on consent.
If the data controller becomes aware that data concerning a minor has been collected under conditions that do not comply with applicable legal requirements, appropriate measures will be taken.
19. Data communicated concerning third parties
When you communicate personal data about another person to the Site, you must ensure that you are authorized to transmit this information.
In particular, you are asked not to publish or transmit, in the Fanbase space or in forms, the contact details, photographs or other personal data of a third party without having an appropriate basis for doing so.
20. External links
The Site may contain links to external websites, platforms or services.
The data controller is not responsible for processing carried out independently by these third-party services.
When you access an external service, it is recommended to consult its privacy policy before transmitting personal data to it.
21. Modification of the privacy policy
This Privacy Policy may be modified to take into account in particular:
- the evolution of the Site;
- adding or removing features;
- a modification of the treatments carried out;
- a change of service provider;
- a change in regulations;
- or recommendations from competent authorities.
The applicable version is that published on the Site at the time of consultation.
In the event of a significant modification affecting the processing of personal data, appropriate information may be communicated to users when necessary.
22. Contact
Protection of personal data
For any questions regarding this Privacy Policy, the processing of your data or the exercise of your rights:
Email: yourmusic973@gmail.com