Privacy Policy of hartlight.fr

Last updated: 25.11.24

  1. Introduction

This Privacy Policy aims to inform you about how the group Hartlight (“we,” “us,” or “our”) collects, uses, and protects your personal data when you visit our website hartlight.fr, subscribe to our newsletter, interact with us, or use our services.

  1. Identity of the Data Controller
  • Data Controller: Hartlight Production
  • Email Address: hartlightband@gmail.com
  • Website: www.hartlight.fr
  • Webhosting : Infomaniak, Rue Eugène-Marziano 25, 1227 Genève
  1. Personal Data Collected

3.1. Data We Collect Directly

  • Newsletter Subscription: Your email address when you subscribe to our newsletter via the form on our site.
  • Contact Forms and Emails: If you contact us via a contact form or email, we collect your email address and the content of your message.

3.2. Data Collected Automatically

  • Browsing Data: When you visit our site, we automatically collect certain information through cookies and similar technologies, such as your IP address, browser type, pages viewed, and time spent on the site.

3.3. Data Collected Through Third-Party Services

  • Embedded Content: Our site includes embedded content from third-party services such as Bandcamp and YouTube. Interacting with this content is the same as visiting the third-party site itself. These services may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content.
  1. Purpose of Data Processing

We collect and process your personal data for the following purposes:

  • Newsletter Delivery: To send you newsletters containing information about our upcoming concerts, tours, music releases, merchandise, and behind-the-scenes stories.
  • Communication: To respond to your inquiries, requests, or comments.
  • Site Improvement: To analyze usage and improve our website’s performance and user experience.
  • Legal Compliance: To comply with legal obligations and regulations.
  1. Legal Basis for Processing
  • Consent: Processing of your email address for the newsletter is based on your explicit consent when you subscribe.
  • Legitimate Interest: Processing of data when you contact us or when we analyze site usage is based on our legitimate interest to improve our services and respond to you.
  1. Data Recipients
  • Hartlight Members: Access data to manage communications and site operations.
  • MailerLite: Provides our newsletter service and acts as a data processor.
  • Third-Party Service Providers: Such as hosting providers, analytics services, and embedded content providers (e.g., Bandcamp, YouTube).
  1. Transfer of Data Outside the European Union

7.1. MailerLite

Your personal data may be transferred outside the European Union through our service provider MailerLite. MailerLite asserts compliance with the General Data Protection Regulation (GDPR) and has implemented appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission. However, we cannot be held responsible in case of non-compliance on their part.

7.2. Bandcamp

By interacting with embedded Bandcamp content or clicking on links, you may transmit data to Bandcamp, which is based in the United States. Bandcamp is responsible for the collection and processing of personal data on its platform. Please review their privacy policy to understand how your data will be processed.

7.3. YouTube

Our site includes embedded videos from YouTube, a service provided by Google LLC, also based in the United States. YouTube may collect data about you, use cookies, and track your interaction with the embedded content. Please refer to YouTube’s privacy policy for more information.

  1. Data Retention Period
  • Newsletter: Your data is retained until you unsubscribe. You can unsubscribe at any time using the link provided in each email.
  • Communications: Data collected through contact forms or emails is retained for up to 1 year after your request has been addressed.
  • Cookies: See the Cookies Section for information on cookie retention periods.
  1. Your Rights

Under the GDPR and French law, you have the following rights:

  • Right of Access: To obtain confirmation whether your data is being processed and access your personal data.
  • Right to Rectification: To request correction of inaccurate or incomplete personal data.
  • Right to Erasure: To request deletion of your personal data under certain conditions.
  • Right to Object: To object to the processing of your personal data for legitimate reasons or for direct marketing purposes.
  • Right to Restriction of Processing: To request suspension of processing under certain circumstances.
  • Right to Data Portability: To receive your personal data in a structured, commonly used format and transmit it to another data controller.

To exercise these rights, please contact us at: hartlightband@gmail.com

  1. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Measures include:

  • Restricted access to personal data to authorized personnel.
  • Use of secure passwords and regular updates.
  • Encryption of data during transmission (e.g., SSL/TLS protocols).
  1. Minors

Our website and services are not intended for individuals under 15 years of age. We are unable to verify the age of each visitor or subscriber. If we become aware that we have collected personal data from a person under 15 without parental consent, we will immediately delete such data. If you are a parent or legal guardian and believe your child has provided us with personal data without your consent, please contact us.

  1. Links to Third-Party Sites

Our site contains links and embedded content from third-party websites such as Bandcamp and YouTube. These sites have their own privacy policies, and we are not responsible for their practices. We recommend reviewing their privacy policies before interacting with their content or providing personal information.

  1. Changes to the Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date. We encourage you to review this policy periodically to stay informed about how we protect your data.

  1. Contact

If you have any questions or concerns regarding this Privacy Policy or our data processing practices, please contact us at:

  • Email Address: hartlightband@gmail.com
  1. Complaint to the Supervisory Authority

If you believe your rights have not been respected, you may file a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL):

  • Website: www.cnil.fr
  • Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

Note: By using our website and services, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described.