Your data

Privacy policy

Protecting your data matters to us. Here’s how it is collected, used and protected, and how to exercise your rights.

HomePrivacy

Data controller: Naopix, 1 Square Jean Heurtin 44000 — contact: contact@naopix.me

1. Data we collect

We only collect the data needed for the service to work:

  • Customer account: email address, password (stored encrypted) and, where applicable, name.
  • Orders: photos selected, amount, billing information and purchase history. Payments are processed by Stripe: we never store your bank details.
  • “Notify me” alert: email address and chosen gallery, so we can write to you once when its photos are online (unsubscribe link in the email).
  • Unfinished order reminder: if you start an order without paying for it, we may send you a reminder email within 30 days (legitimate interest). Each reminder contains a link to stop receiving them.
  • Contact / quote form: the name, email, phone number and message you send us and, for a quote request, the project details (service, date, location, number of participants, budget). To limit abuse, a salted hash of your IP address (never the address itself) is kept for one hour.
  • Messaging with the photographer: first name (optional), email address, messages exchanged and their date, so we can reply to you (also by email). To limit abuse, a salted hash of your IP address is stored with each message (never the address itself). A random token kept in your browser lets you get back to the conversation.
  • Technical cookies: strictly necessary for the session, authentication, the basket and remembering your cookie choice. No advertising trackers.
  • Audience measurement: visitor statistics via Google Analytics, only if you accept it (see Cookies and audience measurement).
  • Page view statistics (internal measurement): page viewed, date, truncated IP address (last number masked for IPv4, only the start of the address for IPv6), country and device type (see Internal audience measurement).
  • Technical error tracking: if there’s a bug, a technical report (page, browser, error message) is sent to our tracking tool, with no cookie, no email address and no form content.

2. Legal basis for processing

  • Performance of the contract: managing your account, your orders and the delivery of files.
  • Legitimate interest: website security, fraud prevention and improving the service.
  • Consent: replying to your requests via the contact or quote forms and the messaging, and audience measurement (Google Analytics).
  • Legal obligation: keeping invoices for accounting and tax purposes.

3. Retention period

  • Account data: for as long as the account is active.
  • Order data and invoices: 10 years, in line with accounting obligations.
  • Contact / quote messages: up to 3 years after the last exchange.
  • Conversations in the messaging with the photographer (messages, email): 3 years after the last message; salted hash of the IP address: 30 days.
  • “Notify me” alert: until the email is sent, then 30 days.
  • Technical cookies: length of the session or according to their purpose.
  • Audience measurement cookies (if accepted): 13 months maximum; statistics kept for 14 months in Google Analytics.
  • Page view statistics and measurement of where visits come from: 25 months.

4. Data sharing

Your data is never sold. It may be passed to our technical processors strictly for the service to work:

  • Stripe — secure payment processing;
  • Paceshot — publisher of the platform that hosts this shop (the photographer’s processor);
  • Vercel — website hosting (European Union, Frankfurt);
  • Neon — database (European Union, Frankfurt);
  • Cloudflare (R2) — photo storage (European Union);
  • Brevo (Sendinblue) — sending emails (order confirmations, messaging replies);
  • Amazon Web Services (AWS Rekognition) — bib number reading and facial recognition, EU region (Ireland, eu-west-1).
  • Google Ireland Ltd (Google Analytics) — audience measurement (only if you’ve accepted it).
  • Sentry (Functional Software) — technical error tracking, data hosted in the European Union (Germany).

Cookies and audience measurement

On your first visit, a banner asks you to accept or refuse audience measurement cookies (Google Analytics). Until you accept, no Google Analytics cookies are set and Google Analytics is not loaded: no data is sent to it.

  • Purpose: to know which pages are viewed and how people move through the website, in order to improve it. No advertising, no profiling, Google signals (personalised advertising) disabled.
  • Cookies set if you accept: _ga and _ga_* (Google Analytics), maximum duration 13 months.
  • Your choice is remembered for 6 months in the technical cookie av_consent, after which you’ll be asked again.
  • Changing your mind: the “Manage cookies” link at the bottom of every page. If you refuse, any Google Analytics cookies already set are deleted and Google Analytics measurement is switched off.

Internal audience measurement (without consent)

We also measure ourselves, without Google, where visits come from (search engine, social network, campaign link…) and which pages are viewed, to find out which actions bring people to the website. These measurements are for our own use only, never shared or used for advertising:

  • Data: landing page, referring website and campaign parameters (utm_*), pages viewed and length of visit, country and town, device type (mobile, tablet, computer) and browser and operating system families, without version. No IP address, no identity, and no tracking on other websites. Pages viewed are kept for 25 months.
  • Cookies: av_v (random browser identifier, 13 months, never extended) and av_s (current visit, 30 minutes).
  • Page view statistics: page viewed, date, truncated IP address (last number masked for IPv4, only the start of the address for IPv6), country and device type. No detailed browser, no account. No cookies. Kept for 25 months.
  • Object to the measurement of where visits come from and to page view statistics on this browser:

5. Selfie search and facial recognition

To help you find your photos when your bib can’t be read, the gallery offers selfie search. It relies on facial recognition, which means biometric data (article 9 of the GDPR): this service is optional, and you can always find your photos by bib number or by browsing the gallery.

  • Purpose: to show you the photos from an event in which you appear.
  • Legal basis: your explicit consent, given by ticking the box provided before each search. Without this box ticked, no search is run.
  • Your selfie is never kept: it is compared in memory with the faces from the event, then immediately discarded. It is not stored, not added to a face database and not shared. Only the list of photos found is kept for 30 minutes in a technical cookie in your browser (av_face), which you can delete with the “Clear my search” link.
  • Preventing abuse: for each search, we record the IP address, the gallery viewed, the date and the number of photos found (never the image). This information is used only to detect abnormal use of the service (legitimate interest) and is deleted after 30 days.
  • Faces in the photos: to make the search possible, the faces visible in an event’s photos are analysed and stored in a collection specific to that event. These face prints stay with our processor AWS (EU region, Ireland) and are not stored in our database. They are also used to group the photos of the same runner so their bib number can be added to them. The collection is deleted along with the event, or sooner on request.
  • Processor: Amazon Web Services EMEA SARL (AWS Rekognition service), under its data processing agreement (DPA).
  • Your rights: you can withdraw your consent at any time (simply stop using the search), and ask for your face to be removed from an event’s analysed photos by writing to contact@naopix.me.

6. Your rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

  • right of access to your data;
  • right to rectification;
  • right to erasure (“right to be forgotten”);
  • right to restrict and object to processing;
  • right to data portability.

To exercise these rights, write to us at contact@naopix.me. You can also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

7. Security

We put appropriate technical and organisational measures in place to protect your data against unauthorised access, loss or alteration (password encryption, secure HTTPS connections, restricted access).

8. Contact

For any question about this policy, contact us at contact@naopix.me or via our contact page.