Privacy policy

This is a translation. In case of any discrepancy, the French version (Politique de confidentialité) prevails.

Last updated: [publication date]

Data controller

Anastassia Louniova EI (LOUNATA), 299 chemin des Cigales, 01300 Murs-et-Gélignieux, France.
For any question about your data: lounata.contact@gmail.com.

Data we collect

The site asks for personal data only through the licence request form. It collects:

• your name and, if you provide it, your company name;
• your preferred contact method and details (email, Telegram, WhatsApp, Instagram or phone);
• information about your project: project or brand name, chosen track, licence type, project type, territory, term, exclusivity, media, indicative budget and message;
• the page and site language the request was sent from, and the date and time of your consent.

To protect the form against automated submissions, an encrypted, non-reversible fingerprint of your IP address is kept for 10 minutes. The site does not store the IP address itself.

Purposes and legal bases

• Replying to your request, preparing an offer and, where relevant, a licence agreement: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and your consent, given by ticking the box in the form (Article 6(1)(a)).
• Protecting the form against spam: legitimate interest in keeping the site secure (Article 6(1)(f)).
• Keeping contracts and invoices: legal and accounting obligations (Article 6(1)(c)).

Recipients

The data is intended for LOUNATA only[ and for: people who handle requests, if any]. It is processed by the following technical providers:

• Hostinger International Ltd.: website hosting, servers in the European Union;
• Google Ireland Limited (Gmail): each request is sent by email to LOUNATA’s mailbox.

Google may process data in the United States; this transfer is covered by the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses. The data is never sold or shared with third parties for commercial purposes.

Retention

• Licence requests: [3 years] from the last exchange, then deleted.
• If a contract is signed: the necessary data is kept for the term of the contract plus 5 years (limitation period); invoices for 10 years (accounting obligations).
• IP address fingerprint: 10 minutes.

Cookies and third-party services

The site uses no advertising cookies and no audience measurement tools. It sets one technical cookie that remembers the chosen language (lifetime: 1 year); it is needed for the site to work and does not require consent.

Fonts are served from the site itself. The album players are provided by SoundCloud (and, for some albums, Spotify or Bandcamp). When a player loads, that service receives your IP address and may set its own cookies under its own privacy policy. Links to Instagram, Facebook, YouTube and other networks are plain links: no data is shared until you click them.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing and to data portability, to withdraw your consent at any time, and to give instructions on what happens to your data after your death. To exercise these rights, write to lounata.contact@gmail.com; you will receive a reply within one month.

If you believe your rights have not been respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Security

The site is served over an encrypted connection (HTTPS). Access to the site administration and to requests is password-protected and limited to authorised people.

Changes

This policy may be updated when the site or the law changes. The date of the latest update is shown at the top of this page.