Privacy Policy

1. Data controller

The data controller is the individual who publishes this website on a non-professional basis under the pen name John Legacy. Their civil identity has been provided to IONOS, the website hosting provider. If you have any question about personal data or wish to exercise a right, please email accueil@johnlegacy.me.

2. Personal data processed

When you use the contact form, the following categories of data may be processed: first and last name, email address, organisation if applicable, subject of the enquiry and message content.

The operation and security of the website may also generate technical data such as IP address, connection date and time, browser type, requested page address and events relevant to detecting abuse or security incidents.

Fields marked with an asterisk are required to process your enquiry. Without them, John Legacy may be unable to respond. Please do not submit sensitive personal data through the form.

3. Purposes and legal bases

• To receive, understand and handle your enquiry, and to follow up on related correspondence: John Legacy’s legitimate interest in responding to enquiries.
• To prepare a potential collaboration, service or publishing relationship requested by you: steps taken at your request before entering into a contract.
• To operate, protect and secure the website, prevent abuse and diagnose incidents: legitimate interest in securing the service.
• To load the Spotify player and any non-essential trackers associated with it: prior consent, where required.

4. Recipients

Contact-form data is sent by email to accueil@johnlegacy.me and is not stored in WordPress by Contact Form 7. It is available only to John Legacy and, strictly where necessary, technical service providers involved in hosting, security and message delivery. The website is hosted by IONOS. Data is not sold or used for direct marketing without an appropriate legal basis.

5. Retention periods

• Contact-form enquiries and related email correspondence: up to 12 months after the last exchange, unless a legal obligation, evidentiary requirement or ongoing relationship justifies a longer period.
• Technical and security logs: for as long as necessary for security, diagnosis and compliance purposes, in accordance with the settings and retention periods of the relevant IONOS service.
• Tracker choices: for a proportionate period, after which the choice will be requested again where required.

6. Spotify player and potential international transfers

The Listen page contains an embedded player provided by Spotify. Until you activate it, the player remains blocked where it may store or access non-essential trackers.

If you choose to load the player, your browser will connect to Spotify. Spotify may then receive and process technical data including your IP address, online identifiers, browser information and interaction data. Spotify acts under its own privacy policy and may process data in other countries using the safeguards described in that policy.

Spotify Privacy Policy
Spotify Cookies Policy

7. Cookies and choice management

The website may use cookies that are strictly necessary for operation, security and WordPress administration. These trackers do not require consent where they meet the legal conditions for exemption.

Non-essential trackers, including any that may be associated with the Spotify player, must be activated only after your choice where consent is required. It must be as easy to accept, reject and change your choice.

8. Your rights

Depending on your circumstances and the legal basis for processing, you may have rights of access, rectification, erasure, restriction, objection and, where the relevant conditions apply, data portability. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.

To exercise your rights, email accueil@johnlegacy.me. You will receive a response within the time limits laid down by law. You may also lodge a complaint with the French data protection authority, the CNIL.

9. Security

Appropriate technical and organisational measures are used to reduce the risks of unauthorised access, loss, alteration or disclosure. As no system can guarantee absolute security, these measures are reviewed in light of the risks and the development of the website.

10. Changes to this policy

This policy may be updated to reflect changes to the website, its services, service providers or applicable law. The date of the latest update appears at the top of the page.