1. Who we are (data controller)
Fer & Vent is an independent hobbyist publication produced by two private individuals based in Paris. The site tooreiffel.com is self-hosted on servers located in the European Union (Germany). Contact details for the editor are available on the imprint page.
2. What data we process
We try to collect as little as possible. The following categories of data may be processed when you read the site:
- Server logs. When your browser requests a page, our server records the IP address of the connection, the time of the request, the requested URL, and a short technical header (User-Agent) describing the browser. These logs are stored for up to thirty days for the sole purpose of security and traffic debugging, and are then deleted. The legal basis is our legitimate interest in operating a working website (GDPR Art. 6(1)(f)).
- Strictly necessary cookies. We may set a short-lived cookie to remember your language preference and your cookie-banner choice. These do not identify you and are stored on your device only. No consent is required for strictly necessary cookies.
- Analytics (optional, opt-in). If you accept the cookie banner, we use Google Analytics 4 to measure which pages are being read. Analytics cookies collect a random identifier and a limited number of events (page views, time on page). Measurement is based on your consent (GDPR Art. 6(1)(a)). Google Analytics may transfer data to the United States; the transfer is covered by the EU–US Data Privacy Framework and by Standard Contractual Clauses.
- Form data. If you contact us by email through the address listed on the imprint page, we will see the content of the message and your email address. We use this to answer you and nothing else. The legal basis is our legitimate interest in replying to correspondents, or your explicit consent if you ask us to add you to a mailing list — we do not currently operate one.
3. Third parties with whom data is shared
We do not sell personal data. We rely on the following processors:
- Our hosting provider (Germany) for the physical server.
- Cloudflare, Inc. for content delivery and DDoS protection. Cloudflare may process your IP address for the time of the request. See their privacy policy.
- Google Ireland Ltd. for Google Analytics, if you have consented. See the Google Analytics privacy policy.
- Google Fonts. We load a small number of fonts from Google's CDN. Your browser's IP address is seen by Google for the moment of the font request. We may self-host these fonts in a future revision.
4. Your rights under GDPR
You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. You can exercise any of these rights by writing to the editor at the address on the imprint page. We will reply within thirty days. If you believe we have mishandled your data, you may lodge a complaint with the French data protection authority (CNIL, cnil.fr).
5. Transfers outside the European Economic Area
Google Analytics and Cloudflare may process data in the United States. Both are certified under the EU–US Data Privacy Framework and are also bound by Standard Contractual Clauses that offer equivalent protection.
6. Children
We do not knowingly collect personal data of children under the age of fifteen. If you believe a child has provided us with personal data, please contact us so we can delete it.
7. Changes to this policy
If this policy changes materially, we will update the “last updated” date at the top of this page and, when the change is important, publish a short notice on the home page for one week.