Privacy policy

This policy explains which personal data Orzyla processes, why, for how long, and what your rights are. It applies to the orzyla.com website in all its languages.

Data controller

Aurelia Bousquet, publisher of Orzyla, Chemin de la Tuilière, 33610 Cestas, France. Contact: orzyla33@gmail.com.

What we process, and why

Your visit.

• Data: IP address, date and time, page requested and browser, recorded in the server's technical logs.
• Purpose: running the website and protecting it against abuse.
• Legal basis: our legitimate interest in keeping the website secure.
• Retention: 12 months at most.

Contact form.

• Data: name, email address, subject and content of your message.
• Purpose: replying to you.
• Legal basis: our legitimate interest in answering people who write to us.
• Retention: 3 years after our last exchange.

Newsletter.

• Data: email address, language, subscription date, IP address at the time of subscription (proof of your consent), open and click statistics for each mailing.
• Purpose: sending you the newsletter, once your address is confirmed.
• Legal basis: your consent, which you can withdraw at any time using the unsubscribe link in every email.
• Retention: until you unsubscribe. Proof of your consent is then kept for 3 years.

Audience measurement.

• Data: pages viewed, length of visit, device type and interactions on pages, linked to an identifier stored on your device.
• Tools: Google Analytics (Google Ireland Ltd) and Microsoft Clarity (Microsoft Ireland Operations Ltd).
• Purpose: understanding which content interests readers and improving the website.
• Legal basis: your consent, given or refused in the cookie banner. Without your consent, these tools are not loaded.
• Retention: 13 months for cookies, 14 months for statistics.

Advertising on the website. Orzyla counts the impressions and clicks of its ad slots, per day and per device type. This count sets no cookie and keeps neither your IP address nor any identifier.

Affiliate links. When you click a link to a partner brand, you leave Orzyla. The affiliate platform (Kwanko or Affilae) and the brand may then use their own trackers to attribute a possible purchase: they are responsible for this and inform you on their websites. Orzyla only receives anonymous sales reports (date, commission amount), never your identity.

Who receives your data

Your data is never sold or rented. It is processed by Orzyla and by service providers acting on its instructions:

• OVH SAS (France): hosting of the website and its data;
• Brevo (Sendinblue SAS, France): subscriber management and newsletter delivery;
• our email delivery provider: confirmation messages and replies to your messages;
• Google and Microsoft: audience measurement, only with your consent.

Transfers outside the European Union

Google and Microsoft may process data in the United States. These transfers rely on the EU-US Data Privacy Framework, recognised by the European Commission on 10 July 2023, which both companies have joined.

Your rights

You can request access to your data, its rectification, erasure, restriction of processing and portability, and object to its processing. You can withdraw your consent at any time, without affecting what was done before. You can also set instructions on what happens to your data after your death.

To exercise these rights, write to orzyla33@gmail.com. We reply within one month. If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL: www.cnil.fr.

Security

The website is served over HTTPS only, administration access is restricted and password protected, and data is hosted in France.

Cookies

Details of cookies and how to manage them are in the cookie policy.

Changes

This policy may change, in particular when the website adds a service. The date of the last update is shown at the top of the page.