Privacy Policy (GDPR) —
VAINKEURZ

The data controller is VAINKEURZ, a French SAS. Contact: weare@vainkeurz.com.

Depending on your use of the website, VAINKEURZ may collect the following categories of data:

Data provided directly

• Account: email address, username, avatar (if provided);
• Published content: tops, rankings, titles, descriptions, comments, as well as any content you choose to publish;
• Support/Contact: the content of your messages and exchanges with our teams.

Data collected automatically

• Technical and browsing data: logs, IP address, device type, browser, cookie/tracker identifiers, pages viewed, events and interactions (notably via Google Analytics);
• Security data: elements necessary for the prevention of abuse, the detection of suspicious activity and the security of the website.

Marketing and advertising data

• Information relating to campaigns and performance measurement (notably via Meta Ads / Pixel), subject to your cookie choices.

VAINKEURZ processes your data for the following purposes:

• Account creation and management / access to the service — Legal basis: performance of the contract (Terms of Service).
• Publication, display and moderation of user content (UGC), handling of reports, prevention of abuse — Legal basis: legitimate interest.
• Audience measurement and improvement of the website (Google Analytics) — Legal basis: consent, where required via cookies/trackers.
• Advertising, retargeting and advertising performance measurement (Meta Ads) — Legal basis: consent (advertising cookies). This processing may involve advertising targeting mechanisms.
• Sending newsletters and marketing communications — Legal basis: consent. You can unsubscribe at any time via the link included in each email.
• Security, fraud prevention, incident management and evidence (logs) — Legal basis: legitimate interest.

Some data is necessary to provide you with the service (e.g. an email address to create an account or send a newsletter). Without it, access to certain features may be limited or impossible.

Your data may be accessible to:

• Duly authorized VAINKEURZ teams (support, moderation, technical);
• Our service providers and processors (hosting, analytics, advertising, emailing/newsletter), only to the extent necessary to perform their services and under confidentiality and security commitments.

Tools used (depending on configuration)

• Hosting: Hetzner (see legal notice)
• Analytics: Google Analytics
• Advertising: Meta Ads (Pixel and/or other Meta trackers)
• Emailing / newsletter: Instantly / Campaign Monitor

Some service providers (notably Google/Meta) may involve transfers of data outside the European Union. Where such transfers exist, they are governed by recognized mechanisms (for example, an adequacy decision where applicable, or appropriate safeguards depending on the case).

VAINKEURZ retains your data only for as long as necessary for the purposes pursued:

• Account: for the duration of the account, then limited archiving if necessary;
• Published content: as long as it remains online, except in case of deletion/moderation;
• Newsletters: until unsubscription (then minimal retention of elements related to the objection / proof of consent);
• Security logs: for a limited period, proportionate to security needs;
• Cookie choices (consent/refusal): kept for a limited period (common recommendation: 6 months).

In accordance with applicable regulations, you have the following rights: access, rectification, erasure, restriction, objection, portability (where applicable) and withdrawal of consent at any time for processing based on consent. To exercise your rights: weare@vainkeurz.com.

You can manage your choices (accept/refuse/customize) and withdraw your consent at any time via the "Manage my cookies" module available on the website.

These legal notices and associated information are drawn up in accordance with the applicable texts, notably:

• LCEN: French Act No. 2004-575 of 21 June 2004 on Confidence in the Digital Economy, notably Article 1-1 (I) (identification information to be made available to the public: publisher, publication director, host).
• Intellectual property: French Intellectual Property Code, notably Article L122-4 (reproduction/representation/adaptation without authorization) and Article L341-1 (protection of database producers).
• GDPR: Regulation (EU) 2016/679 of 27 April 2016, notably Article 13 (information to be provided where data is collected from the data subject).
• Cookies/trackers: French Act No. 78-17 of 6 January 1978 as amended ("Informatique et Libertés"), notably Article 82 (rules on the storage/reading of trackers), and CNIL recommendations on consent and the ability to withdraw it easily.
• Newsletter / email marketing: French Postal and Electronic Communications Code, notably Article L34-5.