Privacy Policy

1. Legal Entity & Data Controller

The data controller responsible for the processing of personal data on Quirklystshpnt.bond is:

Quirklyst Riviera Media SAS
Registration Number: RCS Nice B 921 405 812
Registered Office: 14 Promenade des Anglais, 06000 Nice, France
Designated Data Protection Officer (DPO): [email protected]

2. Categories of Personal Data Collected

We collect data strictly necessary to fulfill editorial distribution, respond to reader correspondence, and guarantee web server security:

• Voluntary Inquiry Information: When you complete our contact form, we record your full name, email address, topic selection, and the contents of your message.
• Server Log Metadata: When you navigate our pages, automated web logs record your Internet Protocol (IP) address, browser family, operating environment, requesting URL, timestamp, and referring website.
• Consent Preferences: Your selected choice regarding cookie categories is stored locally in your browser to maintain your privacy preferences.

3. Legal Bases for Processing

Under Article 6 of the GDPR, we process personal information exclusively under the following lawful conditions:

• Legitimate Interests (Art. 6(1)(f)): Monitoring server infrastructure stability, preventing malicious network attacks, and evaluating high-level anonymous readership trends.
• Consent (Art. 6(1)(a)): For non-essential analytics tracking, activated solely following affirmative user consent via our cookie banner.
• Contractual / Pre-Contractual Steps (Art. 6(1)(b)): Responding to professional editorial, architectural curation, or press inquiries initiated by the user.

4. Third-Party Processors and International Transfers

We do not trade, sell, or rent your personal data to advertising brokers. Data is shared exclusively with vetted technical infrastructure processors who operate under strict Data Processing Agreements (DPAs):

• Web Hosting and CDN Providers: High-performance static cloud hosting providers located within the European Economic Area (EEA) and compliant international jurisdictions.
• Mail Server Infrastructure: Encrypted email relay providers processing administrative queries directed to [email protected].

5. Retention Period

Server access logs are retained for a rolling period of thirty (30) days for forensic anomaly detection before automated deletion. Inquiry correspondence submitted through our contact desk is archived for twenty-four (24) months to facilitate continuous correspondence, after which records are purged unless ongoing legal preservation obligations apply.

6. Your Statutory Rights (GDPR & CCPA)

Depending on your physical jurisdiction, you are entitled to exercise specific statutory rights regarding your personal information:

• Right of Access (Art. 15 GDPR): Request a copy of the personal information we maintain concerning your identity.
• Right to Rectification (Art. 16 GDPR): Request correction of incomplete or erroneous records.
• Right to Erasure / Right to be Forgotten (Art. 17 GDPR): Demand the deletion of personal information held by our servers.
• Right to Restriction of Processing (Art. 18 GDPR): Request temporary suspension of data processing during disputes.
• Right to Data Portability (Art. 20 GDPR): Obtain your submitted data in a structured, machine-readable format.
• California Residents (CCPA): We do not sell personal information. You have the right to request disclosure and deletion without discriminatory treatment.

To exercise any of these protections, submit your request accompanied by proof of identity to [email protected]. We process all authenticated requests within thirty calendar days.

7. Supervisory Authority Contact

If you reside within the European Union and believe our processing infringes upon applicable privacy statutes, you have the right to lodge a formal complaint with your local supervisory body. In France, the competent regulator is the Commission Nationale de l'Informatique et des Libertés (CNIL), reachable at 3 Place de Fontenoy, 75007 Paris, France (www.cnil.fr).