Privacy Notice

Controller

Processing

Newsletter Data: first name, email address, date and time of subscription, signup location on our website, consent wording version. Purpose: sending the newsletter; demonstrating consent. Legal basis: explicit consent, Art. 6(1)(a) and Art. 9(2)(a) GDPR. Providing this data is voluntary. Without an email address we cannot send the newsletter. Where your data was submitted by someone else, its source is the signup form on lalesbienne.com.

Email tracking Data: whether and when you open our emails, which links you click, and technical data such as IP address and device type. Purpose: measuring engagement with the newsletter. Legal basis: explicit consent, Art. 6(1)(a) and Art. 9(2)(a) GDPR.

Website Data: IP address, browser and device type, pages viewed, referring website. Purpose: delivering and securing the website. Legal basis: legitimate interests in operating a secure website, Art. 6(1)(f) GDPR.

Website analytics Data: IP address, approximate location, browser and device type, pages viewed, referring website, visit times. Purpose: website analytics, including a log of individual visits. Legal basis: explicit consent given through our cookie banner, Art. 6(1)(a) and Art. 9(2)(a) GDPR.

Email correspondence Data: email address and message content. Purpose: responding to your message. Legal basis: legitimate interest in responding, Art. 6(1)(f) GDPR.

Records after unsubscribing Data: email address, first name, subscription and unsubscription dates and method, consent wording version, email tracking history. Purpose: demonstrating consent; establishing, exercising or defending legal claims. Legal basis: Art. 6(1)(c) and Art. 7(1) GDPR; Art. 6(1)(f) and Art. 9(2)(f) GDPR.

Cookies

If you accept them in our cookie banner, Squarespace sets the following analytics cookies: ss_cvr: identifies returning visitors. Duration: 2 years. ss_cvt: records the current visit. Duration: 30 minutes.

Recipients

Loops (Astrodon, Inc., USA): newsletter delivery, subscriber storage and email tracking, using sub-processors including Amazon Web Services. Squarespace, Inc. and its affiliates: website hosting and analytics. Google (Google Workspace): email.

Transfers outside the EEA

Data is transferred to the United States under the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. A copy of the safeguards is available from martha@lalesbienne.com.

Retention

Newsletter and email tracking data: until you unsubscribe. Records after unsubscribing: 3 years. Email correspondence: up to 2 years after the conversation ends. Website data: in line with Squarespace's retention periods; cookies as stated above.

Your rights

You have the right to access, rectify and erase your personal data, to restrict its processing, and to receive it in a portable format.

You have the right to object, on grounds relating to your particular situation, to processing based on legitimate interests.

You may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal: for the newsletter, via the unsubscribe link or by email; for cookies, by deleting lalesbienne.com cookies in your browser.

You have the right to lodge a complaint with a supervisory authority.