About this policy
This policy explains how KLIPSK uses your data when you visit klipsk.co or subscribe to Klipsk news, including the launch announcement. It also describes the internal notifications and audience measurement.
Who is responsible for your data?
KLIPSK, a French simplified joint-stock company, 15 allée des Tennis, 78230 Le Pecq, France, SIREN 101 207 744, is the controller for these activities.
For any question or to exercise your rights, contact hello@klipsk.co. You can also write to KLIPSK at its registered office.
Receiving Klipsk news
We use your email address and the language selected on the website to send you regular Klipsk news, including the email announcing its launch, in that language. Your email address is required to receive these messages. Signing up is optional and you can browse without doing so.
This processing is based on your consent, given by activating the “Notify me at launch” button after reading the information displayed beside the form: “Your email address will be used to notify you of the launch and send you Klipsk news. Unsubscribe at any time.”
We also record when you made your request and the version of the information shown to you, so that we can demonstrate your consent. We use delivery, failure and unsubscribe information as needed to manage these emails.
You can withdraw your consent at any time by emailing hello@klipsk.co. Withdrawal is free and does not affect the lawfulness of processing carried out beforehand.
Managing sign-ups
After a successful sign-up, Resend sends an internal notification to the Klipsk team’s Microsoft 365 mailboxes. It contains your email address, chosen language and the information needed to manage your sign-up. This processing relies on our legitimate interest in checking that the form works and managing subscriptions.
Website operation and security
When you visit the website and use the form, technical data is processed to display the website, handle your request and prevent abuse. This includes your IP address, browser information, request time and security check results. This processing is based on our legitimate interest in providing a reliable website and protecting the form against automated registrations.
The form uses Cloudflare Turnstile. Cloudflare analyses technical signals, including your IP address, connection and browser characteristics, and the website concerned, to distinguish people from bots. A successful check is required to complete registration. You can contact us if this check prevents you from registering.
Cloudflare acts on our behalf when providing this protection. It also processes certain signals as an independent controller to improve bot detection. Its notice explains this processing and how to contact its data protection officer.
Understanding website traffic
We use Google Analytics 4, installed through Google Tag Manager, to understand website traffic, interactions with its content and successful sign-ups. This measurement relies on your explicit consent. No Google measurement service loads or receives data before you agree or after you refuse.
If you accept, Google receives information about pages viewed, visits and certain interactions: page scrolling, link clicks, site searches, video viewing, downloads and form use, where those features are available. Successful sign-ups are counted separately. Cookie identifiers and general browser and device information are also used. We do not send your name, email address or the content of your form responses. Email address redaction is enabled in Google Analytics. Advertising features and Google Signals are disabled.
Results may be viewed as grouped statistics in a private Google Data Studio dashboard, formerly Looker Studio. Refusing measurement does not prevent you from browsing the website or subscribing. Your measurement choice is separate from your consent to receive Klipsk news.
Who can access your data?
Data is accessible to authorised people at KLIPSK as needed for their work and to providers supporting the website: Vercel for hosting and server-side form processing; Resend (Plus Five Five, Inc.) for storing the subscriber list in Resend Contacts and sending Klipsk news, including the launch email; and Cloudflare for DNS and Turnstile protection. These providers may use their own subprocessors.
Microsoft stores internal notifications in authorised Klipsk staff members’ Microsoft 365 mailboxes. Google provides optional audience measurement and allows grouped statistics to be viewed in dashboards. Account and report access is restricted to those who need it.
Vercel, Resend and Cloudflare also process certain operational or security data as independent controllers, as explained in their notices. We do not sell the subscriber list or share it with partners for their own marketing.
Data may be disclosed to public authorities where required by law.
How long is data kept?
Data in the Klipsk news subscriber list is kept for 3 years from collection or the last contact initiated by you, unless you withdraw your consent before then. Our own emails do not extend this period. At the end of this period, the data is deleted from the list.
Sign-up notifications in Microsoft 365 mailboxes are manually deleted when no longer needed, no later than the same 3-year deadline as the related subscription, or sooner if you withdraw. They do not extend the retention of your address.
After withdrawal, your address is excluded from recipients as soon as the request is processed. Information needed to honour the withdrawal may be kept separately, solely to prevent another email.
Google Analytics is set to retain individual user and event data for 2 months, without resetting this period when new activity occurs. This setting does not apply to Google Analytics’ standard aggregated statistical reports.
Website technical logs: runtime logs available to KLIPSK in Vercel cover one hour under the current plan. Technical data kept by providers, backups and email delivery records: Resend retains email messages and delivery logs for 30 days and backups for 7 days; remaining customer data is deleted within 90 days after account closure. These periods do not replace the subscriber-list retention period stated above. Cloudflare retains data processed on our behalf until the contract ends or processing is no longer necessary, whichever comes first, unless legally required otherwise. For their own operational and security data, providers determine retention according to service needs, risks, legal obligations and disputes, then delete or anonymise the data as described in their notices.
If a dispute or a specific legal obligation requires it, only necessary data may be retained separately for the applicable period, with restricted access.
Processing outside Europe
Some of our providers are based in the United States and may process data there and in other countries outside the European Economic Area. Selecting a European region for part of the hosting does not mean that all data remains in Europe.
Resend stores service data, including the subscriber list, in the United States. The selected sending region in Ireland determines email routing and does not move this storage to Europe.
Google may process measurement data outside the European Economic Area. Initial collection in Europe does not guarantee that storage or processing takes place exclusively in Europe. The location of Klipsk’s Microsoft 365 mailboxes is not confirmed, so we cannot guarantee that notifications are stored only in Europe.
The data processing agreements of Resend and Cloudflare provide for European Commission standard contractual clauses where transfers are not covered by an applicable adequacy decision, together with technical and organisational safeguards. For data it processes as an independent controller, Vercel states in its notice that it uses these clauses or other appropriate legal mechanisms where required by law.
The Google Analytics data processing terms accepted by Klipsk provide, among other safeguards, for standard contractual clauses for relevant transfers.
You can request further details and a copy of the applicable safeguards at hello@klipsk.co.
Your rights
Subject to your circumstances and the conditions set by the GDPR, you can access your data, correct it, ask for its deletion or restrict its use. You can also request portability of data you provided where automated processing is based on your consent.
You can withdraw consent to Klipsk news, including the launch email, at any time. You can object to processing based on our legitimate interests on grounds relating to your particular situation. You can object to use of your data for direct marketing at any time.
To exercise your rights, contact hello@klipsk.co. We normally respond within one month. If an extension is needed under the GDPR, we will inform you. Proportionate proof of identity will only be requested if there is reasonable doubt about your identity.
You may lodge a complaint with the CNIL, including online at cnil.fr, or with the competent supervisory authority in your country of residence or work.
The anti-bot check may reject an automated registration. It does not make a decision that has legal or similarly significant effects on you.
Changes to the website
This policy will be updated if processing changes. New features, such as a contact form, customer account or online purchase, will have appropriate information before they are used. Your Klipsk news registration will not automatically be used for those new services.