Privacy policy

Data controller

Achille N., 2 rue des Malgré-Nous, 67480 Roeschwoog, France
E-mail: hello@zoomlupe.com

What we collect

When you ask for a poster by e-mail:

• your e-mail address;
• the language of the site;
• the poster you asked for and its version (one language or bilingual);
• if you tick the “news” box: your consent and its date;
• your IP address, to limit the number of requests. It is never stored as such: only an encrypted fingerprint is used as a counter, deleted within 24 hours at most.

Our technical logs only hold the time, the poster, the version, the language and whether sending worked: never an e-mail or IP address.

Internal audience measurement: we count, in aggregate, the poster pages viewed, the QR code scans, the animations started, the downloads and the clicks on “Pay”, with the language and the type of device (mobile or computer); without cookies, identifiers, IP or e-mail addresses, and without any third-party service (stored withCloudflare, Inc.). Legal basis: our legitimate interest in knowing which posters are useful (Art. 6(1)(f) GDPR).

Purposes and legal bases

• Sending you the poster you asked for: performing your request (GDPR art. 6(1)(b)). The e-mail contains a download link valid for 7 days.
• Sending you Zoomlupe news (1–2 e-mails a month), only if you ticked the box: your consent (art. 6(1)(a)). It is only recorded when you click the link in the e-mail: that click confirms the address is yours.
• Protecting the service from abuse (limit of requests per IP address): our legitimate interest in keeping the service available (art. 6(1)(f)).

Your data is never sold, rented or used for advertising.

How long we keep it

• E-mail address and related details: 3 years after your last contact with us (last poster request or last click on one of our links).
• History of your posters and orders (see “Your history”): 3 years after your last contact, then automatic deletion.
• Contact person of a partner school (see “Your history”): as long as its class code is active, then 3 years.
• News subscription: until you withdraw your consent, then at most 3 years as above.
• IP address fingerprint: 24 hours at most.

Recipients and processors

• Brevo SAS (RCS Paris), 9-17 rue Salneuve, 75017 Paris, France: storing contacts and sending e-mails. The data is hosted in the European Union.
• Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA: hosting the site and running the sending service. Cloudflare processes your IP address to deliver and protect the site and, for the duration of the request, your e-mail address; it stores the history described below, under a fingerprint of your address. As Cloudflare is a US company, data may be transferred outside the European Union; this transfer relies on Cloudflare’s certification under the EU-U.S. Data Privacy Framework.

Print orders

When you order a printed poster, payment is made on a page of Stripe Payments Europe, Limited (Ireland), which receives your name, e-mail address, delivery address and payment details. Stripe passes us your name, e-mail address, delivery address and the poster ordered; we never see your card details. A partner printer based in the European Union receives the name and delivery address to ship the poster.

Legal basis: performing the contract (GDPR art. 6(1)(b)) and our accounting obligations (art. 6(1)(c)). Kept for 10 years for accounting records, as the law requires.

Your history

To give you back your posters and orders, we keep, tied to your e-mail address:

• the posters requested, their version, the date of the request and that of the first click on the link received;
• your print orders: date, product, posters, amount and payment status (neither your name nor your delivery address, which stay with Stripe and our printer);
• your consent to the news and its date, if you gave it.

Why: to send you on request (“Find my posters”) the list of your posters with new links, and that of your orders; and to prepare a personal space, which will stay optional and password-free (a link sent to your address), where you will find this same history.

Legal basis: carrying out your request (GDPR art. 6(1)(b)).

How long: 3 years after your last contact (last request, last click on one of our links or last order), then automatic deletion.

A fingerprint instead of your address: this history is not filed under your e-mail address, but under a fingerprint computed from it with a secret key (HMAC-SHA256). Without your address and that key, nobody can tell whose it is. Your address itself is with our e-mail provider, Brevo SAS (RCS Paris); the history is stored withCloudflare, Inc. (see “Recipients and processors”).

Your rights: write to hello@zoomlupe.com. We send you a complete copy of your history in a readable file (rights of access and portability), or delete it along with your contact at Brevo SAS (RCS Paris) (right to erasure). The invoices of your orders stay with Stripe: the law requires us to keep them for 10 years.

Partner schools: we keep the name and work e-mail address of a partner school’s contact person, to manage its class code and its posters, for as long as the code is active and then 3 years; same legal basis (carrying out the request), same rights.

Cookies and local storage

The site sets no cookies. Your browser only keeps, on your device, the last poster version you chose and, for teachers, the class code. This is only used to make the site work (only the class code is sent, to be checked).

Children

The form is meant for adults (parents, teachers). A child who wants a poster asks an adult to receive it for them.

Your rights

You can ask to access, correct or erase your data, to restrict its processing and to receive it in a portable format, and you can object to processing based on our legitimate interest. You can withdraw your consent at any time, without affecting what was done before. Write to hello@zoomlupe.com.

You can also complain to a data protection authority, in particular in the country where you live, or to the French CNIL (www.cnil.fr).

Unsubscribing from the news

Every news e-mail contains a one-click unsubscribe link.Or write to us at hello@zoomlupe.com.

The e-mail that brings you a poster is only sent when you ask for it, so it has no unsubscribe link.