Privacy policy

GDPR

Last updated: 7 April 2026

This privacy policy aims to inform users of bretaigne.bzh about how their personal data is collected, processed and protected, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data controller

The bretaigne.bzh website is published by DAO Bretaigne, a team of advisers acting as a decentralised autonomous organisation (DAO) without legal personality.

For any questions about your personal data, you can contact:

· Email: bretaigne.dao@kaz.bzh

1. Data collected

When you use the website, we collect the following data:

Through the contact form

· First name and surname (optional or required, depending on the form)
· Email address
· Message (free text)
· IP address (collected for security and abuse prevention purposes)

Through newsletter subscriptions

· Email address
· Subscription date
· IP address

Technical data

· IP address (while browsing)
· Browser and operating system information (automatically collected by the hosting provider OVH to operate the website)

1. Purposes of processing

Your data is collected for the following purposes:

Purpose Legal basis
Responding to enquiries sent through the contact form Consent (Article 6-1-a of the GDPR)
Sending the newsletter (information, news, projects) Consent (Article 6-1-a of the GDPR)
Securing the website and preventing abuse (technical logs) Legitimate interest (Article 6-1-f of the GDPR)
Ensuring the technical operation of the website Legitimate interest

1. Retention period

Type of data Retention period
Contact form messages 12 months from the last exchange
Newsletter subscriptions Until the user unsubscribes
Technical logs (IP address, etc.) 12 months

After this period, the data is deleted or anonymised.

1. Recipients of the data

The data collected is accessible only to:

· Members of the DAO Bretaigne team responsible for responding to enquiries and sending the newsletter;
· The hosting provider OVH as part of its provision of technical services (hosting, security).

No data is transferred outside the European Union. OVH has servers located in France.

1. Cookies

The website uses cookies and similar technologies for its operation and certain integrated services. The cookie policy details the declared services, their purposes and the available consent choices. Please consult it for this information and to manage your preferences.

Read the cookie policy

1. Your rights

Under the GDPR, you have the following rights over your personal data:

· Right of access: to know which data is being processed
· Right to rectification: to correct inaccurate data
· Right to erasure: to request the deletion of your data
· Right to restriction: to restrict processing in certain cases
· Right to data portability: to receive your data in a structured format
· Right to object: to object to processing

To exercise these rights, please contact:

· Email: bretaigne.dao@kaz.bzh

Your request must be accompanied by a copy of proof of identity to prevent fraudulent use. You will receive a response within a maximum of one month.

1. Right to lodge a complaint

If you believe that your rights are not being respected, you may lodge a complaint with the French data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL):

· Website: www.cnil.fr
· Address: 3 Place de Fontenoy, 75007 Paris, France

1. Changes to the policy

This privacy policy may be amended at any time to reflect changes to the website or legal obligations.