Privacy policy

This policy covers browsing on the site, contact requests, newsletter subscriptions, downloadable materials, and the technical measures used to operate and secure the service.

[WIP] Replace with the exact legal identity of the data controller: legal name or company name, legal form, registered office, registration number, and contact email.

Depending on how you use the site, data processed may include your email address, the content of messages you send us, your language preference, technical connection and security data such as logs and anti-abuse signals, and any information strictly required to provide the service you requested.

Personal data may be processed to answer messages, operate and secure the site and its APIs, prevent abuse, manage newsletter subscriptions and confirmations, deliver requested files or content, and maintain service continuity.

Depending on the processing activity, the legal basis may be your consent for the newsletter, our legitimate interest in operating and securing the site, answering messages, and preventing abuse, or our legal obligations where applicable.

When a form or access flow marks information as required, that data is necessary to process the request. If mandatory information is not provided, the subscription or access request cannot be completed.

Data is accessible only to Pépin Kojo and to processors acting on its behalf where necessary to host the site, route email, secure infrastructure, or handle incidents. Depending on the feature used, these providers may include Vercel for hosting and Brevo for newsletter delivery.

Personal data is not kept longer than necessary. Newsletter prospect data is kept until consent is withdrawn or, at the latest, for three years from the last contact from you. Data needed to prove a subscription, manage unsubscribe requests, comply with a legal obligation, or establish, exercise, or defend legal claims may be kept for the applicable limitation period. Technical logs and security data are kept only for the period needed to operate and secure the site.

The site uses proportionate technical and organizational measures to limit unauthorized access, secure administration, protect restricted content, and reduce abuse. No transmission over the internet can be guaranteed absolutely secure.

[WIP] Confirm whether any provider processes personal data outside the European Economic Area and, if so, specify the countries involved and the legal safeguards used, such as an adequacy decision or standard contractual clauses.

You may request access, rectification, erasure, restriction, portability or object to processing where applicable. You may also withdraw consent at any time for processing based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact contact@pepinkojo.com and specify the page, service, or email address concerned together with your request. Additional information may be requested where reasonably necessary to confirm identity. A reply will be provided as soon as possible and, in principle, within one month, subject to the extensions permitted by law.

If you believe your rights have not been respected, you may lodge a complaint with the CNIL.