Privacy

DATA CONTROLLERS For the website ycappuccino.fr itself (the framework's presentation page, its server logs): Aurélien Pisu, the website's publisher. For the data of the band's administration console (members' accounts, contents, the back office of www.yblues.com's shop, rehearsals, calendar): the association Y.Blues Corporation, a French non-profit association registered in the national register of associations under number W381015452. Contact for any question about your data: contact@yblues.com. WHAT THE WEBSITE DOES The framework's presentation page can be read without an account. The administration console is reserved for the administrators and members of the Y.Blues band: it is used to manage the band's content (texts, media, dates, tablatures, rehearsal notes and recordings) and the back office of www.yblues.com's shop. Nothing is sold on ycappuccino.fr. DATA PROCESSED, PURPOSES, LEGAL BASES AND RETENTION Console accounts: login, name, e-mail address, roles and organisation, to give the members and administrators access to the association's tools. Legal basis: the performance of the membership of the association and the association's legitimate interest in organising its activity (article 6(1)(b) and 6(1)(f) GDPR). Retention: as long as the account exists; an account is deleted when the membership ends or on request. Invitations and password resets: the invited person's e-mail address and the sending date; the link expires after its validity period. Orders of www.yblues.com's shop, seen in the back office by the members managing it: the buyers' e-mail address, first and last name and postal address, the contents and amount of the orders, to prepare and ship them and keep the accounts (article 6(1)(b) and 6(1)(c) GDPR). Payment goes through HelloAsso, which receives the buyer's e-mail address, first and last name; the order e-mails are sent by Brevo. Accounting records are kept 10 years (article L123-22 of the French Commercial Code). The details are in www.yblues.com's Privacy page. Rehearsals: rehearsal recordings contain the voices of the members present; they are transcribed automatically on the association's machines, without any outside service, to write the rehearsal notes. Legal basis: the association's legitimate interest in keeping track of its work (article 6(1)(f) GDPR); each member may object. Retention: until the members delete them. Calendar: the rehearsal and gig dates are synchronised with Google Calendar by a service account; the members concerned and their attendance appear there. Files uploaded to the console by its users: kept until they are deleted. Server logs (IP address, date, requested page): kept for the security and proper operation of the website (the publisher's legitimate interest), for a time limited by the rotation of the logs. Backups: restricted-access copies of the data are kept 90 days at most on the server (except the latest of each release) and 8 weeks at most on the remote copy. No profiling, no advertising, no data sold or transferred. COOKIES The only cookie is the console's session cookie, set when signing in and removed when signing out or closing the browser. Strictly necessary for signing in, it requires no consent: hence there is no banner. Your display preferences (language, theme, collapsed menus) are kept in the browser's local storage and never leave your device. THIRD-PARTY SERVICES Depending on the features used, your browser or the server contact: jsDelivr, which serves Pyodide and the Leaflet map library to the console; OpenStreetMap, for the console's map tiles; OpenRouteService, queried by the server to locate places and compute routes; Google, for Google Drive in the browser when a user connects it, and for Google Calendar through a service account of the server; Brevo, the mail provider (SMTP) delivering the console's and the shop's e-mails; HelloAsso, for the shop's payments. These services receive the data needed for their task and apply their own privacy policies. YOUR RIGHTS Under the GDPR, you have the right to access, rectify, erase and port your data, to object to and restrict its processing, in particular to have your account deleted. To exercise them, write to contact@yblues.com. You may also lodge a complaint with the CNIL (www.cnil.fr). UPDATES This page may change with the website.