What we do with your data

The short version

One email address, given by you, used to tell you twice that tickets exist. No cookies, no tracking, no profiling, no advertising, no sale of anything to anybody.

Who is responsible

The publisher named in the legal notice is the data controller. Write to us at the address there for anything on this page — we answer every request, and the law gives us one month to do it.

We are not required to have a data protection officer and do not have one. Your request goes to a person, not a department.

The mailing list

What we collect: your email address, the date and time you gave it, which form and which language it came from, and the exact wording you agreed to.

Why: to tell you when early-bird tickets open, and when they run out. That is the whole purpose. We will not use the list for anything else without asking you first.

The legal basis: your consent, given by submitting the form (GDPR article 6.1.a, and article L34-5 of the French Post and Electronic Communications Code for the email itself). You can withdraw it at any moment, and withdrawing is as easy as giving it was.

How long: until you unsubscribe, or 3 years after our last contact with you, whichever comes first. In practice the event is one night and the list is deleted after it.

Giving us your address is entirely optional. Nothing on this site is withheld if you do not.

Why we record the wording you agreed to

Article 7 of the GDPR says we have to be able to prove you consented. So alongside your address we store the timestamp and a copy of the sentence that was printed next to the field when you submitted it, taken from the server rather than from your browser so it cannot be altered in transit.

That record exists to protect you as much as us: it is the evidence of what you were actually told.

Keeping the form usable

The signup endpoint limits how many times the same connection can submit, so a script cannot flood the list. Doing that means recognising a repeat connection.

We do not keep your IP address to do it. The address is hashed as it arrives, with a random value generated when the server starts and never written down, and only the hash is held — in memory, for a few minutes, on a single server instance. It is not stored, not logged and not readable back into an IP address by us or anyone else.

The legal basis is our legitimate interest in not having the mailing list destroyed by bots (GDPR article 6.1.f).

Hosting

Serving a web page means our host, Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, United States, briefly sees the request: IP address, page, browser, timestamp. That is how the web works and it happens on every site you visit.

Those logs are the host's, kept for a short period for security and diagnostics under their own retention policy. We do not build anything on top of them and we do not analyse them.

Counting visits

To know how many people visit and whether the site is doing its job, we use Vercel Web Analytics, a cookieless audience-measurement tool provided by our host.

For each page viewed it records the page address, the site you came from, campaign tags in the link if there are any, your approximate location (country, region, city — worked out from your IP address, which is not stored), your type of device, operating system and browser, and whether the mailing-list form was submitted successfully.

It sets no cookie and writes nothing to your device. To tell one visit from another it uses a hash of the request that is reset every 24 hours, so you cannot be recognised from one day to the next or on any other website. We only ever see totals.

We never add your email address, or anything that could identify you, to these statistics. A signup is counted; it is not linked to the address that was given.

The legal basis is our legitimate interest in knowing how the site is used (GDPR article 6.1.f). Vercel keeps the aggregated statistics for the reporting period of our plan; we do not export them or keep them for longer than 25 months.

You can object at any time: one button on the cookie page switches it off in your browser. If your browser sends Global Privacy Control or Do Not Track, nothing is measured at all.

Emails you send us

If you write to us we keep the exchange for as long as it takes to deal with it, and up to a year afterwards in case you come back about the same thing. Legal basis: our legitimate interest in answering our post.

Who else sees your data

The mailing list lives at Brevo (Sendinblue SAS), 106 boulevard Haussmann, 75008 Paris, which sends the emails on our behalf and processes the data only on our instructions. Brevo is a French company and the list is held in the European Union.

The site is served by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, United States, a company established in the United States. Requests may therefore be handled outside the European Union, under the standard contractual clauses and the transfer framework its data processing agreement relies on.

Vercel also runs the anonymous visit count described above, on our behalf and only on our instructions.

Nobody else. We do not sell, rent, swap or share the list, including with the artists or the ticketing platform.

What we do not do

No cookies, and no trackers that follow you around the web — see the cookie page.

No advertising pixels, no social media widgets, no embedded fonts fetched from anyone else's server. The only measurement is the anonymous visit count described above.

No profiling and no automated decision-making. Nothing on this site decides anything about you.

The event is 18+ and the site is not aimed at children. If you believe a minor has given us an address, tell us and we will delete it.

Your rights

You can ask us for a copy of the data we hold on you, to correct it, to delete it, to restrict what we do with it, or to receive it in a portable form.

You can object to processing based on our legitimate interest, and you can withdraw your consent to the mailing list at any time.

Withdrawing consent needs no email to us at all: every message we send carries a one-click unsubscribe link, and using it removes you from the list.

Ask by writing to the contact address in the legal notice. We may ask you to confirm you are the holder of the address in question, which is a protection for you rather than an obstacle.

If we get it wrong

Tell us first — most things are a misunderstanding we can fix the same day. If you are not satisfied you have the right to complain to the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

Security

The site is served over HTTPS. The mailing list is held by a processor with its own security obligations, and access to it is limited to the people who send the emails.

The list is our only copy of your address. If a signup fails, the form tells you so rather than showing a success screen over nothing.

Changes

If this notice changes materially — a new purpose, a new processor, a longer retention — we will say so here and, where the law requires it, ask you again. The date at the top is the version you are reading.