1. Overview and Data Controller
Storycrateteamtonsi is an independent editorial publishing service operating under French law. The data controller responsible for personal information processed through this website is:
Storycrate Team Tonsi Publications S.A.S.
Registration Number: RCS Paris B 912 841 093
14 Rue de Paradis, 75010 Paris, France
Official Contact Email: [email protected]
2. Personal Data We Collect
We adhere to strict data minimization principles. We do not maintain user accounts, require user registration, or operate e-commerce or ticketing checkouts. Personal information collection is strictly confined to:
- Direct Communication Data: When you contact our editorial office via web form or direct email, we collect your name, email address, message contents, and metadata required to deliver a reply.
- Technical Telemetry: Anonymized server logs capturing your IP address (anonymized at ingress), browser agent type, operating system, referencing URL, and timestamp to secure site stability.
- Aggregated Analytical Signals: If accepted through our consent banner, non-identifying telemetry tracking page views, dwell duration, and navigational flow.
3. Lawful Basis for Processing (GDPR Article 6)
Processing is conducted exclusively under the following legal bases:
- Consent (Art. 6(1)(a)): Applicable to optional analytical cookies and voluntary contact form submissions.
- Legitimate Interests (Art. 6(1)(f)): Necessary to protect network security, prevent fraudulent bot access, and maintain website stability.
- Legal Obligations (Art. 6(1)(c)): Compliance with statutory French recordkeeping requirements.
4. Third-Party Data Processors
We do not sell, rent, or trade personal data. Limited technical operations are managed via contractually bound service providers adhering strictly to GDPR:
- Cloud Hosting & Content Delivery: Secure European server infrastructure providing static asset delivery and automated DDoS defenses.
- Email Routing Infrastructure: Secure enterprise mail servers processing inbound editorial inquiries under TLS 1.3 encryption.
5. Data Subject Rights (GDPR & CCPA)
Under European data protection law and comparable provisions worldwide (including the California Consumer Privacy Act), you possess fundamental rights regarding your information:
- Right of Access: You may request formal confirmation and an electronic copy of your stored personal records.
- Right to Rectification: You may correct inaccurate or incomplete personal contact details.
- Right to Erasure ("Right to be Forgotten"): You may demand the deletion of correspondence records where no overriding legal retention obligation exists.
- Right to Object & Restrict: You may object to processing carried out under legitimate interest or revoke cookie permissions at any time.
- Non-Discrimination: We will never deny or degrade service based on the exercise of your privacy rights.
6. Retention Schedules & Data Protection Officer Contact
Inquiry records collected via contact forms are archived for a maximum of 24 months before irreversible purging, unless ongoing legal inquiries mandate retention. Server security logs are rotated and deleted automatically within 30 days.
To submit a data access request or communicate with our designated Data Protection Officer, please address your correspondence to [email protected] with the subject line "Formal Data Privacy Request".