Skip to content
FR EN
Quote Menu

Privacy policy

What we do with the information you share with us, and how you stay in control of it.

01Data controller

The controller of personal data collected on this website is La Casa du Cosplay, Association loi 1901, 1 rue Fontbrechet, 42800 Saint-Martin-la-Plaine. For any question: lacasaducosplay@gmail.com.

02Data we collect

The website only collects personal data when you fill in the quote request form:

  • identity: last name, first name;
  • contact details: email address, phone number (optional);
  • organisation and type of organisation;
  • event details: type, dates, location, number of guests, indicative budget, requested formats and costumes;
  • the content of your message.

To protect the form against abuse, an encrypted, non-reversible fingerprint of your IP address is kept for no more than two hours. Your IP address is never stored in plain text by the website. The host also keeps technical connection logs, in line with its legal obligations.

03Purposes and legal bases

  • Responding to your request and preparing a quote: pre-contractual steps taken at your request (article 6.1.b GDPR).
  • Managing the business relationship if a contract is concluded: performance of the contract (article 6.1.b GDPR) and legal obligations, including accounting (article 6.1.c).
  • Protecting the form against automated and abusive submissions: legitimate interest of La Casa du Cosplay (article 6.1.f GDPR).

Your data is never sold, rented out or used for marketing without your consent.

04Recipients

Your data is only accessible to authorised La Casa du Cosplay staff. It passes through the technical providers needed to deliver it: the website host (OVH SAS) and the email service to be specified, acting as processors.

05Retention periods

The website does not store requests: they are sent by email and then deleted from the server.

  • Request not followed up: 3 years from your last contact.
  • Request followed by a performance or hire: for the duration of the relationship, then for the legal retention period for accounting records (10 years).
  • Anti-abuse fingerprint: 2 hours at most.

06Transfers outside the European Union

Should a provider located outside the European Union be used, the transfer would be covered by a European Commission adequacy decision or by standard contractual clauses.

07Security

The website is served over HTTPS only. The form is protected against request forgery and automated submissions, and access to data is restricted to authorised people.

08Your rights

Under the GDPR and the French Data Protection Act, you have the right to access, rectify, erase and restrict the processing of your data, to object to it, to data portability, and to set instructions regarding your data after your death.

To exercise these rights, write to lacasaducosplay@gmail.com stating your request. You will receive a reply within one month. Proof of identity may be requested in case of reasonable doubt.

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL): www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

09Changes to this policy

This policy may be updated. The date of the latest update is shown at the top of the page.