Personal data
Privacy policy
Data controller
LUMIIK, SAS, 19 avenue d’Italie, 75013 Paris, France.
Email: privacy@black-corner.com.
Processing, purposes, legal bases and retention
Your newsletter sign-up is handled by Watchonomics, our internal tool. Your email address is used only to send you the Black Corner newsletter, on the basis of your consent. Every email includes an unsubscribe link; we keep your address until you unsubscribe.
To limit abuse, we keep a pseudonymous counter for 15 minutes, derived from your IP address without ever storing it.
| Processing | Purpose | Legal basis | Retention |
|---|---|---|---|
| Audience measurement (Umami) | Measure site audience | Legitimate interest (Art. 6(1)(f)) | 25 months maximum |
| Language preference (bc_locale) | Serve the language you chose | Necessary for a requested service | 12 months |
| Messaging (Chatwoot) | Reply to your message | Pre-contractual / legitimate interest | Commitment to delete: 3 years from last contact |
| Server and security logs | Operate and secure the site | Legitimate interest (Art. 6(1)(f)) | As set by the host provider |
| Newsletter requests | Send you the Black Corner newsletter and keep evidence of your consent | Consent (Art. 6(1)(a)) | Your address and the date you signed up, until you unsubscribe |
| Past product-alert requests | Let you know about the product you asked about. The site no longer collects these requests; those already received are kept in Mailchimp | Consent (Art. 6(1)(a)) | Until the earlier of 90 days after the first durable recording of the request or 30 days after the alert is fulfilled |
| Orders and pre-orders | Conclude and perform the contract of sale | Performance of the contract (Art. 6(1)(b)) | 5 years from the end of the relationship (Art. L. 110-4 French Commercial Code) |
| Payment | Take payment and prevent fraud | Performance of the contract (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f)) for fraud prevention | No card details are ever held by LUMIIK |
| Invoicing and accounting | Issue and keep invoices | Legal obligation (Art. 6(1)(c)) | 10 years (Art. L. 123-22 French Commercial Code) |
| Delivery | Hand the order to the carrier and get it to you | Performance of the contract (Art. 6(1)(b)) | For the duration of transit, then with the contract |
| Withdrawal, returns and guarantees | Handle a withdrawal, a return or a guarantee claim | Legal obligation (Art. 6(1)(c)) | Kept with the contract they relate to |
| Collection security | Prevent abuse | Legitimate interest (Art. 6(1)(f)) | Pseudonymous counter: 15 minutes |
Recipients and processors
Umami and Chatwoot are self-hosted — third-party software running on infrastructure we control, so no third party receives this data.
Watchonomics is an internal tool, not a third-party mailing provider. The relevant hosting and mailing providers are identified below.
| Processor | Role | Location |
|---|---|---|
| Vercel Inc. | Site hosting | United States |
| Hetzner Online GmbH | Hosts the Umami and Chatwoot instances | Finland (Helsinki), European Union |
| Intuit Inc. (Mailchimp) | Former newsletter service, no longer used for sending, while data remains there (former subscribers and past product-alert requests) | United States |
| Shopify International Limited | Order, payment and invoicing platform (Shopify Payments) | Ireland |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. | Payment by PayPal | Luxembourg |
| Klarna Bank AB (publ) | Payment by Klarna, including the creditworthiness assessment it carries out on its own account | Sweden |
| Carriers (including DHL, UPS, Colissimo) | Carries the order | European Union and destination country |
| Hetzner Online GmbH | Hosts Watchonomics and the site's anti-abuse counter | Finland (Helsinki), European Union |
| YMLP, Coupure 88, B-9000 Gent, Belgium, BE 0872284673 | Newsletter contact list and sending | European Union (provider declaration) |
Transfers outside the European Union
Vercel Inc. (United States), hosting: European Commission standard contractual clauses (Implementing Decision (EU) 2021/914), Module 2 (controller to processor).
Intuit Inc. (Mailchimp, United States), former newsletter and past product-alert requests: certified under the EU-U.S. Data Privacy Framework, backed by standard contractual clauses (Decision (EU) 2021/914), Module 2, which apply automatically should the framework cease to be valid.
Shopify International Limited (Ireland), orders and payment: the contract is with a company established in the European Union. Shopify group companies outside the European Economic Area act as sub-processors under Shopify's data processing agreement.
A copy of these safeguards is available on request at privacy@black-corner.com.
YMLP states that its servers and backups are located in the European Union and that the data remains there. Its public terms govern its processor role and restrict transfers outside the European Economic Area, except where required by applicable law. These statements cover all newsletter contacts, including sign-ups made on the site.
Your rights
You have a right of access, rectification, erasure, restriction and portability.
You also have a right to object, including to processing based on legitimate interest — this covers audience measurement and server logs.
Consent to the newsletter can be withdrawn at any time, without affecting messages already sent.
To exercise these rights, contact privacy@black-corner.com. We respond within one month.
You may lodge a complaint with France’s data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — https://www.cnil.fr.