Privacy Policy & Reader Rights

1. Data Controller Identification

The entity assuming legal responsibility as the Data Controller under Regulation (EU) 2016/679 (General Data Protection Regulation) is:

2. Personal Data We Collect

We assemble only minimal information strictly relevant to delivering an exceptional editorial experience:

• Concierge Form Dispatches: When you send an inquiry via our contact page, we collect your full name, email address, inquiry topic, travel seasons, and message text.
• Gazette Subscription Data: When subscribing to the seasonal Parisian Gazette newsletter, we register your verified email address, signup timestamp, and delivery status.
• Technical Telemetry: Anonymized server logs, truncated IP addresses (last octet masked upon ingestion), operating systems, and page request timestamps to maintain platform security.
• Cookie Preference Tokens: Encrypted local storage flags recording whether you accepted analytical tools or restricted usage to essential tokens.

3. GDPR Legal Processing Bases

Under Article 6 of the GDPR, every processing activity is anchored in a definitive legal authority:

• Consent (Art. 6(1)(a)): Used for optional performance cookies and seasonal newsletter dispatches. You may revoke consent at any moment.
• Pre-Contractual & Inquiries (Art. 6(1)(b)): Used to reply to bespoke concierge inquiries and curated itinerary consultation requests.
• Legitimate Interests (Art. 6(1)(f)): Used to maintain server performance, thwart automated spam attacks, and defend digital infrastructure.
• Legal Compliance (Art. 6(1)(c)): Retaining correspondence where required by French commercial record laws.

4. How We Use Collected Data

Your data is deployed exclusively to fulfill editorial promises:

• Delivering curated recommendations and tailored itineraries requested through our concierge portal;
• Dispatching the monthly Parisian Gazette with exclusive museum exhibitions and culinary openings;
• Diagnosing technical issues across our mobile and desktop web interfaces;
• Protecting the publication against fraud, cyber intrusion, and automated data scraping.

5. Data Retention Schedules

In accordance with the principle of storage limitation (GDPR Art. 5(1)(e)):

• Contact Desk Records: Stored for 24 months after final resolution, then permanently purged from active servers.
• Newsletter Profiles: Maintained until you click the unsubscribe link contained in every dispatch, which executes an instant automated purge.
• Analytical Metrics: Pseudonymized aggregate statistics are retained for up to 13 months, matching CNIL guidelines.

6. Your Fundamental GDPR & CCPA Rights

European and international data protection laws grant you full autonomy over your personal records:

To exercise any of these prerogatives, transmit an email request directly to [email protected] with the subject line "Data Subject Rights Request". We will authenticate and respond to your petition within thirty (30) business days.

7. Technical Safeguards & Encryption

Choicesjollyjunctin implements end-to-end TLS 1.3 encryption for all data in transit across our portal. Our systems employ strict access control protocols, automated brute-force mitigation, and firewalls maintained within Tier-IV European data center facilities.

8. International Data Flow

Where third-party CDN or delivery nodes process data outside the European Economic Area, transfers are safeguarded under European Commission Standard Contractual Clauses (SCCs), ensuring reciprocal levels of protection matching European law.

9. Data Protection Officer & CNIL Recourse

If you consider that our processing of your personal data violates applicable privacy laws, you possess the unalienable right to submit a formal grievance with the French supervisory authority: