Personal data
Privacy policy
Data controller
LUMIIK, SAS, 19 avenue d’Italie, 75013 Paris, France.
Email: privacy@black-corner.com.
Processing, purposes, legal bases and retention
| Processing | Purpose | Legal basis | Retention |
|---|---|---|---|
| Audience measurement (Umami) | Measure site audience | Legitimate interest (Art. 6(1)(f)) | 25 months maximum |
| Language preference (bc_locale) | Serve the language you chose | Necessary for a requested service | 12 months |
| Messaging (Chatwoot) | Reply to your message | Pre-contractual / legitimate interest | Commitment to delete: 3 years from last contact |
| Server and security logs | Operate and secure the site | Legitimate interest (Art. 6(1)(f)) | As set by the host provider |
| Newsletter and launch alerts | Send news about upcoming editions | Consent (Art. 6(1)(a)) | Until unsubscribe |
| Orders and pre-orders | Conclude and perform the contract of sale | Performance of the contract (Art. 6(1)(b)) | 5 years from the end of the relationship (Art. L. 110-4 French Commercial Code) |
| Payment | Take payment and prevent fraud | Performance of the contract (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f)) for fraud prevention | No card details are ever held by LUMIIK |
| Invoicing and accounting | Issue and keep invoices | Legal obligation (Art. 6(1)(c)) | 10 years (Art. L. 123-22 French Commercial Code) |
| Delivery | Hand the order to the carrier and get it to you | Performance of the contract (Art. 6(1)(b)) | For the duration of transit, then with the contract |
| Withdrawal, returns and guarantees | Handle a withdrawal, a return or a guarantee claim | Legal obligation (Art. 6(1)(c)) | Kept with the contract they relate to |
Recipients and processors
Umami and Chatwoot are self-hosted — third-party software running on infrastructure we control, so no third party receives this data.
| Processor | Role | Location |
|---|---|---|
| Vercel Inc. | Site hosting | United States |
| Hetzner Online GmbH | Hosts the Umami and Chatwoot instances | Finland (Helsinki), European Union |
| Intuit Inc. (Mailchimp) | Sends the newsletter | United States |
| Shopify International Limited | Order, payment and invoicing platform (Shopify Payments) | Ireland |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. | Payment by PayPal | Luxembourg |
| Klarna Bank AB (publ) | Payment by Klarna, including the creditworthiness assessment it carries out on its own account | Sweden |
| Carriers (including DHL, UPS, Colissimo) | Carries the order | European Union and destination country |
Transfers outside the European Union
Vercel Inc. (United States), hosting: European Commission standard contractual clauses (Implementing Decision (EU) 2021/914), Module 2 (controller to processor).
Intuit Inc. (Mailchimp, United States), newsletter: certified under the EU-U.S. Data Privacy Framework, backed by standard contractual clauses (Decision (EU) 2021/914), Module 2, which apply automatically should the framework cease to be valid.
Hetzner Online GmbH: no transfer. Audience-measurement and messaging data stay within the European Union.
Shopify International Limited (Ireland), orders and payment: the contract is with a company established in the European Union. Shopify group companies outside the European Economic Area act as sub-processors under Shopify's data processing agreement.
A copy of these safeguards is available on request at privacy@black-corner.com.
Your rights
You have a right of access, rectification, erasure, restriction and portability.
You also have a right to object, including to processing based on legitimate interest — this covers audience measurement and server logs.
Consent to the newsletter can be withdrawn at any time, without affecting messages already sent.
To exercise these rights, contact privacy@black-corner.com. We respond within one month.
You may lodge a complaint with France’s data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — https://www.cnil.fr.