Privacy policy
This policy explains how pepinkojo.com processes personal data for the public PYLA site, the protected MegaGrant review area, and the newsletter subscription workflow.
Before publication
Important: the controller identification must be completed with the exact legal identity of the publisher before public release.
Controller
[À COMPLÉTER : dénomination sociale ou nom/prénoms de l'éditeur] operates the site https://pepinkojo.com under the studio name Pépin Kojo.
Contact email: contact@pepinkojo.com
Postal address: [À COMPLÉTER : adresse complète du siège ou de l'établissement]
Data processed
Depending on your interaction with the site, we may process:
- your email address when you subscribe to the newsletter;
- your language choice and functional preferences used to display the site correctly;
- technical connection and security data, including request metadata, logs, and anti-abuse information;
- the access token cookie used to remember successful authentication for the protected MegaGrant review area;
- correspondence data if you contact us directly by email.
Purposes and legal bases
We process data for the following purposes:
- operating, securing, and administering the site and protected review area, on the basis of our legitimate interest in ensuring the integrity, security, and proper functioning of the service;
- managing newsletter subscriptions and sending double opt-in confirmation emails, on the basis of your consent;
- managing requests sent to our contact addresses, on the basis of our legitimate interest in handling communications and project follow-up;
- documenting and defending our rights where necessary, on the basis of our legitimate interest and, where applicable, our legal obligations.
Recipients
Data may be accessed, within the limits of their respective needs, by:
- authorized persons within Pépin Kojo or the publishing entity;
- our hosting provider Vercel Inc.;
- our newsletter service provider Brevo / Sendinblue SAS for subscription management and double opt-in workflows;
- third-party content providers only when you explicitly activate embedded content or external media.
Transfers outside the European Union
Some technical providers used to host or deliver the site may process data outside the European Union or the European Economic Area. Where such transfers exist, they must be framed by a lawful transfer mechanism in force at the time, such as an adequacy decision or the European Commission standard contractual clauses, together with any supplementary safeguards required by law. Further details may be requested at the contact address indicated on this page.
Retention periods
We do not keep personal data indefinitely.
- newsletter prospect data are retained until you withdraw consent or, at the latest, for three years from the last contact originating from you;
- technical logs and anti-abuse data are kept only for the period necessary to secure and operate the site;
- correspondence is kept for the time needed to handle the request and, where appropriate, to document follow-up or defend rights.
Your rights
You may request access, rectification, erasure, restriction, portability or object to processing where applicable. You may also withdraw consent at any time for processing based on consent, without affecting the lawfulness of processing carried out before withdrawal. You may exercise your rights by writing to contact@pepinkojo.com. You also have the right to lodge a complaint with the CNIL.