This policy describes how EGREGORE SAS, publisher of icibiarritz.com, collects, uses and protects the personal data of its users, in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the amended French Data Protection Act (Law no. 78-17 of 6 January 1978).
1. Data controller
EGREGORE SAS — Simplified joint-stock company with share capital of €5,000.00. SIRET: 850 987 892 00021 — Bayonne Trade and Companies Register. Contact: contact@icibiarritz.com
The data controller is the President of EGREGORE SAS.
2. Data collected and purposes
We collect only the data strictly necessary for the purposes described below. No data is sold or transferred to third parties for commercial purposes.
2.1 Contact form
- Data: name, email address, message content.
- Purpose: to respond to your enquiry.
- Legal basis: legitimate interest (Article 6.1.f GDPR).
- Retention: 3 years from the last exchange.
2.2 Newsletter
- Data: email address, date and time of sign-up, sign-up IP address (proof of consent).
- Purpose: to send you the ici Biarritz editorial newsletter.
- Legal basis: your consent (Article 6.1.a GDPR), obtained through double opt-in.
- Retention: until you unsubscribe, then 3 years as proof of consent.
- Unsubscribing: via the link at the foot of every email, or on request to contact@icibiarritz.com.
2.3 Partner area
- Data: company name, contact name, email, telephone, business address, subscription tier.
- Purpose: managing the partner relationship, invoicing, accounting and tax obligations.
- Legal basis: performance of a contract (Article 6.1.b) and legal obligation for accounting records (Article 6.1.c).
- Retention: for the duration of the contractual relationship, then 10 years for accounting documents.
Payment data: payments are processed directly by Stripe. No card number passes through our servers or is stored by EGREGORE SAS.
2.4 Browsing and audience measurement
- Data: pages viewed, time on site, referrer, device type, truncated IP address.
- Purpose: understanding the site’s readership and improving our content.
- Legal basis: your consent for non-essential cookies.
- Retention: 13 months maximum.
3. Recipients and processors
Your data may be processed by the following providers, acting as processors within the meaning of Article 28 GDPR:
| Provider | Role | Data location |
|---|---|---|
| Scaleway SAS | Website hosting | France (European Union) |
| MailPoet (Automattic) | Newsletter delivery | European Union / United States |
| Postmark (ActiveCampaign) | Transactional email | United States |
| Stripe | Payment processing | European Union / United States |
| Google (Site Kit, Analytics) | Audience measurement | European Union / United States |
Any transfers outside the European Union are governed by the European Commission’s Standard Contractual Clauses or by the Data Privacy Framework.
No data is passed to third parties outside this framework, except in response to a court order or legal obligation.
4. Cookies
The site uses two categories of cookies:
- Strictly necessary cookies: site operation, security, and remembering your display and language preferences. These do not require your consent.
- Audience measurement cookies: visitor statistics. These are set only after you consent and may be refused at any time without affecting access to our content.
No intrusive advertising cookies are set. You may configure your browser at any time to refuse cookies or to alert you when they are set.
5. Affiliate links
Some articles contain affiliate links, notably to the Amazon Associates programme. If you make a purchase through one of these links, ici Biarritz may earn a commission at no additional cost to you.
These links set a tracking cookie managed by the retailer and governed by the retailer’s own privacy policy. They never influence our editorial judgement: our selections are made independently of any remuneration.
6. Links to third-party sites
The site contains links to external websites (institutions, businesses, festivals, ticketing platforms). EGREGORE SAS controls neither their content nor their personal data practices, and accepts no responsibility in that regard.
7. Security
EGREGORE SAS implements appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS/TLS), hosting on secure infrastructure within the European Union, access restricted to authorised personnel only, and regular backups.
8. Your rights
Under Articles 15 to 22 GDPR, you have the following rights:
- Right of access to your data;
- Right to rectification of inaccurate data;
- Right to erasure (” right to be forgotten “);
- Right to restriction of processing;
- Right to data portability;
- Right to object to processing;
- Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand;
- Right to give instructions regarding the fate of your data after your death.
These rights may be exercised by email to contact@icibiarritz.com or by post to our registered office. You will receive a reply within one month. Proof of identity may be requested where there is reasonable doubt as to your identity.
If you are not satisfied with our response, you have the right to lodge a complaint with the CNIL — Commission Nationale de l’Informatique et des Libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr — or with the supervisory authority in your country of residence.
9. Minors
The site is not intended for persons under the age of 15 and does not knowingly collect their data. Should such collection come to our attention, the data would be deleted without delay.
10. Changes to this policy
EGREGORE SAS reserves the right to amend this policy at any time, in particular to reflect changes in legislation or in our services. The date of the most recent update appears below.
Last updated: July 2026. See also our Legal Notice.
This policy is translated for information purposes only. In the event of any discrepancy in interpretation, the French version prevails.