Privacy

Y.Blues Corporation, a non-profit association under the French law of 1 July 1901, registered in the French national register of associations (RNA) under number W381015452. Registered office: 430 rue Haussipied, 38660 Saint-Vincent-de-Mercuze, France. Contact: contact@yblues.com

DATA CONTROLLER The data controller is the association Y.Blues Corporation, identified above. For any question about your data: contact@yblues.com. WHAT THE WEBSITE DOES NOT DO The website uses no audience measurement tool, no advertising and no tracking cookie. A simple visit sets no cookie. DATA PROCESSED Server logs: on each visit the server records the IP address, the date, the requested page and the browser used. Purpose: security and proper operation of the website. Legal basis: our legitimate interest (article 6(1)(f) GDPR). Retention: 12 months at most. Messages: if you write to us (contact@yblues.com or the "Write to us" link), your message is sent from your own mail software; we use your address and the content of the message only to reply to you (legal basis: our legitimate interest in answering your request). Retention: the time needed to reply, then 3 years at most. Online shop orders: when you order, we process your e-mail address and, for a shipped item, your first and last name and postal address, to process the order (legal basis: performance of the contract, article 6(1)(b) GDPR) and to keep our accounts (legal basis: legal obligation, article 6(1)(c) GDPR). Order data is kept for the time of the business relationship then archived; accounting records are kept 10 years (article L123-22 of the French Commercial Code). The details are in the "Online shop" part below. Language preference: your browser remembers the chosen language in its local storage (key "yc-language"). This information stays on your device; it is never sent to a server and it is not a cookie. Cart: your cart is kept in your browser's local storage (key "yc-shop-cart") until you order or empty it; it is not a cookie. Members' area: the association's members who sign in to the management console (on ycappuccino.fr) get a session cookie, strictly needed for the sign-in; it is never set for the website's visitors. The band's social network accounts: through the access the band itself gives (a connection from the console or its accounts' access keys), the website reads the posts and statistics of its own accounts (Facebook, Instagram, YouTube, TikTok): titles, dates, numbers of views, likes, comments and shares, number of followers. No data about the website's visitors nor the followers of these accounts is collected. Purpose: following the band's audience. Legal basis: our legitimate interest (article 6(1)(f) GDPR). Retention: as long as the account is linked; the access tokens these networks give are kept on our servers, never shown, and deleted on disconnection, which the band can do at any time (the console's Settings, or the network's settings). RECIPIENTS AND PROVIDERS Your data is neither sold nor used for advertising. It is shared only with the association's members in charge of the shop and with the following providers, each for its task: - HelloAsso, the associations' payment platform: the payment of the order; it receives your e-mail address, first and last name; - Brevo: sending the order's e-mails (confirmation, tracking, download link); - the carrier (La Poste): delivering a shipped item; it receives your name and postal address; - OVH, the website's host, in France. THIRD-PARTY SERVICES LOADED BY YOUR BROWSER YouTube (Google) is loaded only when you click to start a video, the home page's background video included: playing it may then set Google's trackers. Before that click, only the videos' preview images are loaded from i.ytimg.com (Google), without cookies. jsDelivr (content delivery network) and PyPI provide technical components needed for the interactive display of the website; they receive your IP address and technical information. See their privacy policies for their practices. Links to social networks and listening platforms open third-party websites subject to their own rules. YOUR RIGHTS You have the right to access, rectify, erase and port your data, to object to and restrict its processing. To exercise them, write to contact@yblues.com. You may also lodge a complaint with the CNIL (www.cnil.fr). UPDATES This page may change with the website.

Online shop

This part applies when you order from the online shop. DATA PROCESSED Your e-mail address; for a shipped item, your first and last name and postal address; your language; the contents, amount and tracking of your order; the payment reference. Your bank details are entered on the payment provider's page: we never have access to them. PURPOSES AND LEGAL BASES Processing your order: payment, preparation, shipping or making the files available, confirmation and tracking e-mails, after-sales service and the exercise of your consumer rights (legal basis: performance of the contract, article 6(1)(b) GDPR). Keeping the accounts and the supporting documents (legal basis: legal obligation, article 6(1)(c) GDPR). RECIPIENTS The payment provider (it receives your e-mail address, first and last name for the payment), the e-mail provider, the carrier for a shipped item (your name and postal address), and the shop's managers. This data is neither sold nor used for advertising. RETENTION Order data is kept for the time of the business relationship and of the legal guarantees, then archived; accounting records (amounts, invoices, payments) are kept 10 years (article L123-22 of the French Commercial Code). The download link of the files expires after its validity period. CART Your cart is kept by your browser, in its local storage (key "yc-shop-cart"), so that it survives a reload of the page. It stays on your device until you order or empty it; it is not a cookie and it is sent to the server only to compute the prices and place the order.