1. Identification of the Data Controller
The entity responsible for the processing of personal data under this website is:
Curious Lane Scout Shelves SAS
14 Rue de Castiglione, 75001 Paris, France
Company Registration No: 892 411 902 R.C.S. Paris
Data Protection Officer: [email protected]
2. Categories of Personal Data Collected
We believe in the principle of data minimization as outlined by Article 5(1)(c) of the General Data Protection Regulation (GDPR). When you interact with our editorial guides, field inquiries, and digital resources, we collect only the information necessary to fulfill your request and safeguard platform stability:
- Voluntary Contact Information: Name, professional title, email address, physical mailing inquiries, and message contents submitted through our Dispatch Bureau form.
- Technical & Telemetric Metadata: Internet Protocol (IP) addresses, browser type and version, language preferences, operating system characteristics, referral paths, time stamp of visits, and page scroll depths.
- Cookie & Local State Records: Pseudonymous tokens utilized to record your cookie consent choice and session reading preferences.
3. Legal Bases for Processing Operations
Under GDPR Article 6, we process your personal data under the following legitimate frameworks:
- Consent (Art. 6(1)(a)): Explicit consent given when signing up for field bulletins or opting into non-essential performance cookies.
- Contractual Performance (Art. 6(1)(b)): Necessary handling of your details when you request specific route research or commercial licensing of our photographic works.
- Legitimate Interests (Art. 6(1)(f)): Maintaining network resilience, diagnosing server latency, preventing brute-force attacks, and optimizing the readability of our editorial layouts.
- Compliance with Legal Obligations (Art. 6(1)(c)): Retaining transaction and dispatch logs in accordance with French commercial and accounting laws.
4. Cookies & Tracking Technologies
We deploy both session and persistent cookies. Technical cookies essential to the functioning of this site (such as preserving your consent selection via localStorage) operate without requiring preliminary consent pursuant to CNIL recommendations. For an exhaustive matrix detailing each cookie identifier, purpose, and expiration timeline, please review our dedicated Cookie Policy.
5. Third-Party Service Processors & Cross-Border Transfers
We do not sell, rent, or trade your personal information to third parties or marketing brokers. We collaborate exclusively with trusted data processors who adhere strictly to European privacy standards:
- Hosting Infrastructure: Cloud hosting facilities located strictly within the European Union (Frankfurt and Paris regions) adhering to ISO/IEC 27001 security standards.
- Content Delivery Networks: Cloudflare EU infrastructure for localized caching and DDoS mitigation under Standard Contractual Clauses (SCCs).
- Email Dispatch Delivery: Secure transactional SMTP providers enforcing TLS 1.3 encryption in transit.
6. Data Retention Protocols
We hold personal information only for the duration required to achieve the explicit purpose for which it was acquired:
- General Inquiry Logs: Held for 24 months following the last recorded communication, then securely shredded.
- Technical Server Access Logs: Automatically rotated and purged every 90 days.
- Legal & Accounting Archival: Invoices and contractual permissions are retained for 10 years pursuant to Article L123-22 of the French Commercial Code.
7. Your Rights Under GDPR & CCPA/CPRA
Regardless of whether you reside within the European Union or California, you maintain enforceable rights over your digital personhood:
- Right of Access: You may request a verified copy of all personal records we maintain regarding your identity.
- Right to Rectification: You may demand correction of any inaccurate or outdated information.
- Right to Erasure ("Right to Be Forgotten"): You may request the irrevocable deletion of your records where retention is no longer justified.
- Right to Restrict or Object to Processing: You may limit the scope of how your data is analyzed.
- Right to Data Portability: You may request your data in a structured, commonly used, and machine-readable format.
- Non-Discrimination: We will never deny services, vary pricing, or diminish reading experience because you chose to exercise statutory privacy protections.
To exercise any of these privileges, please send a written request to [email protected] or address physical correspondence to our Paris Bureau. In France, you also maintain the right to lodge a formal complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) at cnil.fr.