Data controller
DataALC, 78 Allée Primavera, Centre Ubidoca n°20213, Pringy, 74940 Annecy, France. Contact: contact@cheneday.com.
Data we process, purposes and legal bases
Account and sign-in: performance of the contract.
Creating and managing events: performance of the service.
Buying a pass or an option: performance of the contract.
Invoicing and accounting: legal obligation.
Security and abuse prevention: legitimate interest.
Marketing: consent where required.
Recipients and processors
Your data is never sold or shared. It is processed only by the processors strictly necessary to run the service: OVH (hosting, in France), Resend (sending emails), self-hosted Matomo (audience measurement, cookieless and respecting Do Not Track) and Stripe Payments Europe, Ltd. (online payment, Ireland).
Payment data
Card numbers are entered with our payment provider and never reach us: we store no card number and no security code. We keep only the record of the purchase (product, amount, date, event concerned) and the related accounting records.
Transfers outside the European Union
Hosting, email sending and audience measurement all take place within the European Union. Our payment provider may carry out certain technical operations outside the European Union; these are covered by the European Commission’s standard contractual clauses.
Retention periods
Account and content: until the account is deleted, then erased.
Security logs: 12 months.
Accounting records and proof of purchase: 10 years (legal obligation).
Marketing data: 3 years after the last contact.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, and may withdraw your consent at any time. To exercise them: contact@cheneday.com. You may also lodge a complaint with the French data protection authority (CNIL).