Privacy policy — Personal data protection (GDPR)
This policy explains how kestufela.fr collects, uses and protects personal data under Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended French Data Protection Act. Download the English plain text (.txt) or Word document (.docx). The French original is also available.
1. Data controller
The controller is NOBIS Cedric, 19 boulevard Maurice Berteaux, 94100 Saint Maur des Fosses, France; email: keskive@outlook.fr. The site is published by an individual in a non-professional capacity.
2. Personal data collected
The site may collect identification data (username and secret question and answer), voluntarily supplied profile information, private messages and published content, and technical data such as IP addresses and connection logs.
3. Purposes of processing
Personal data are processed to manage accounts, operate community services, enable exchanges between users, provide security and moderation and prevent abuse, and comply with legal obligations. The site also measures its audience internally in aggregated broad geographical categories (France and overseas territories, Europe, international or undetermined).
Directions
Directions are calculated only when requested after explicit consent. Coordinates of the current and target locations are sent to the public FOSSGIS / OSRM service to calculate a driving or walking route. Consent is stored locally in the browser for twelve months and may be withdrawn from the Directions window. The site does not retain a history of these routes.
4. Legal bases
Processing is based on user consent, including for audience-measurement cookies; performance of the service; the controller's legitimate interests; and legal obligations.
5. Retention
Data are retained for a limited period: account data while the account is active; content and messages while the account exists or until deletion; and technical data for no longer than the applicable legal period. Geographic audience counters are hourly aggregates retained according to the site's statistics retention period, without storing an IP address or country in those counters.
6. Recipients
Only the controller and host have access to data for technical purposes. When a user voluntarily requests directions, FOSSGIS / OSRM receives the two coordinates required for the calculation. No personal data are sold or transferred to unauthorised third parties.
7. User rights
Under the GDPR, users have rights of access, rectification, erasure, restriction, objection and data portability. To exercise them, contact the controller at the address above.
8. Data security
Appropriate technical and organisational measures are used to protect the security and confidentiality of personal data.
9. Functional cookies and Google Analytics cookies
The site uses cookies to function properly and to measure its audience.
a) Functional cookies
Functional cookies are strictly necessary for site operation, including session management, account security and remembering preferences. They do not require prior consent. For example, kestufela_visitor_id is a technical identifier used to count visitors currently present and avoid double-counting; it is essential and has no advertising purpose.
b) Google Analytics audience-measurement cookies
The site uses Google Analytics, provided by Google LLC, to analyse visits and use of the site. Data collected, including anonymised IP address, pages viewed, visit duration and browser type, are used only for statistical purposes. The legal basis is user consent. Users may accept or refuse these cookies on their first visit and withdraw consent at any time through browser or site settings. Data may be transferred outside the European Union; Google undertakes to govern these transfers through mechanisms recognised by European rules.
10. Complaint to the CNIL
Users may lodge a complaint with the French data-protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), at www.cnil.fr if they believe their rights have not been respected.
11. Changes to this policy
This policy may be changed at any time to remain aligned with legal and technical developments.