Privacy policy

Jetons.re is committed to protecting user privacy and complies with the General Data Protection Regulation (GDPR – EU 2016/679) and French law n°78-17 of 6 January 1978 as amended. Personal data collected is strictly limited to what is necessary, proportionate to the purposes pursued, and processed transparently, securely, and confidentially.

1. Data collected

2.1 Data provided voluntarily: Through the contact form, you may provide us with:
  • Full name (optional)
  • Email address
  • Message and additional information
Purpose: Exclusively to process your request (answer, support, information).
Legal basis: Performance of a contract (if the request is related to a service) or consent (for general requests).

2.2 Data collected automatically: Jetons.re automatically collects the following technical data, which are essential to operate and secure the site:
  • Server logs: Anonymised IP address (last octet removed), timestamp, request type, pages viewed
  • Diagnostics: Technical errors, performance (via Vercel)
  • Audience statistics: Anonymised and aggregated data via Google Analytics 4 (see §3)
Legal basis: Legitimate interest (security, technical improvement) or legal obligation (e.g. log retention for cybersecurity).

2. Use of Google Analytics 4 (GA4)

Jetons.re uses Google Analytics 4 in strict compliance with CNIL and GDPR recommendations.

Compliance measures implemented:
  • Automatic IP anonymisation (from collection)
  • Total deactivation of advertising features (Google Ads, Signals, remarketing)
  • No data sharing with other Google services or third parties
  • Retention limited to 14 months (default GA4 setting)
  • No cross-referencing with other user data
  • Conditional loading: GA4 is only activated after explicit consent via a CNIL-compliant banner

Legal basis: Consent (art. 6.1.a GDPR), collected via a cookie banner compliant with CNIL 2025 guidelines.
Without consent: No Analytics data is collected.
Withdrawal of consent: Possible at any time via the banner or browser settings.
Your rights over Analytics data: You can request deletion or export of your Analytics data by contacting us (see §10).

3. Cookies and trackers

4.1 Cookies exempt from consent (CNIL): These cookies are essential for the site to function and do not require your consent:
  • Security: Authentication, protection against attacks
  • Technical operation: Session maintenance, display preferences
  • Optimisation: Load balancing (via Vercel)
Duration: Session or 1 year maximum.

4.2 Cookies subject to consent: Only Google Analytics 4 (anonymised audience measurement), with no advertising purpose.
Duration: 13 months maximum (CNIL compliant).
Can be refused: Via the cookie banner or your browser settings.

No marketing, advertising, or profiling cookies are used on Jetons.re.

4. Purposes of processing

The data collected is used solely to:
  • Display and secure the site (logs, diagnostics)
  • Respond to your requests (contact form)
  • Improve the user experience (anonymous statistics)
  • Meet legal obligations (e.g. log retention for security)

Data is not used for:
  • Targeted advertising
  • Resale or sharing with third parties
  • Retargeting (remarketing) or profiling

5. Hosting and data transfers

Jetons.re is hosted by: Vercel Inc. 340 S Lemon Ave #4133, Walnut, CA 91789, United States.
🔗 https://vercel.com/

Safeguards for transfers outside the EU:
  • EU Standard Contractual Clauses (SCC)
  • Encrypted data in transit and at rest
  • EU-based servers for sensitive data (logs, forms)
  • GDPR compliance certified by Vercel (DPA available on request)

⚠️ Transfer to the United States: Technical data (logs) may transit through Vercel's US servers solely for infrastructure needs. These transfers are governed by SCCs and the additional measures required by the GDPR (encryption, pseudonymisation).

6. Retention period

Data typeRetention periodLegal basis
Contact data12 months (max)Consent/Contract performance
Technical logs30 to 90 daysLegitimate interest/Legal obligation
Technical cookiesSession or 1 yearLegitimate interest
Google Analytics data14 months (GA4 setting)Consent

7. Data sharing

Jetons.re does not share any personal data with:
  • Social networks
  • Advertisers or data brokers
  • Business partners

Only authorised technical providers (processors):
  • Vercel (hosting): SCCs and DPAs in place
  • Google Analytics 4 (statistics): GDPR-compliant configuration
  • Secure email service (e.g. Sendinblue, Mailgun): Encrypted data, no reuse

8. Your GDPR rights

You have the following rights regarding your data:
  • Right of access: Know what data we hold
  • Right to rectification: Correct inaccurate information
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to portability (for structured data)
  • Right to object (notably to profiling)
  • Right to withdraw consent (cookies, Analytics)

To exercise these rights:
📧 contact@jetons.re
Or via the Contact page on the site.

Response time: 1 month (may be extended to 3 months for complex requests).

9. Data security

Jetons.re implements technical and organisational measures to protect your data:
  • Encryption (TLS 1.3 for transmissions, encryption at rest)
  • Restricted access to data (principle of least privilege)
  • Regular backups and restoration tests
  • Annual security audit (ISO 27001 compliant)

11. Policy updates

This policy is reviewed regularly to reflect:
  • Legal developments (GDPR, ePrivacy, case law)
  • Technical changes (new tools, providers)
  • User feedback

Last updated: 15 November 2025.
Significant changes will be notified via the site or by email (if you are subscribed).