Personal data and cookies

Last updated:

This is a translation: only the French version is legally binding.

This page explains which personal data the website 17RECORDS processes, why, for how long, and how to exercise your rights (Regulation (EU) 2016/679, known as the GDPR, articles 13 and 14).

Data controller

Tümay YILDIZ (17RECORDS). Contact: 17records.contact@gmail.com.

Data processed

PurposeDataLegal basisRetention period
Ensuring the security and proper functioning of the website (technical server logs)IP address, date and time, page requested, browser usedour legitimate interest (securing the website and detecting abuse)1 year at most
Answering messages sent with the contact formname, email address, content of the message and any attachmentour legitimate interest (answering the request you send us)the time needed to handle the request; 3 years from the last contact if it is commercial
Limiting the number of submissions of the contact form to prevent abuseIP addressour legitimate interest (protecting the contact form against abusive submissions)about 1 minute, in the server's memory

Mandatory form fields are indicated: without them, the request cannot be processed. No automated decision-making or profiling is carried out.

Recipients

Your data is never sold. Only the publisher and the following service providers, acting on its behalf, have access to it:

Service providerRoleLocation
OVH SAS, 2 rue Kellermann, 59100 Roubaix, FranceWebsite hostingFrance
Mailjet SAS (Sinch group), 43 rue de Dunkerque, 75010 Paris, FranceSending emailsdata hosted in the European Union (Germany, Belgium)
Google Ireland Limited (Google group), Gordon House, Barrow Street, Dublin 4, IrelandEmail service (receiving messages)data that may be transferred to the United States (Google LLC, certified under the Data Privacy Framework)

Transfers outside the European Union

Some service providers may transfer data outside the European Union, with the following safeguards:

  • Mailjet SAS (Sinch group): standard contractual clauses adopted by the European Commission
  • Google Ireland Limited (Google group): company certified under the EU–US “Data Privacy Framework” (adequacy decision of the European Commission of 10 July 2023)

Your rights

You have the following rights over your data:

  • access and rectification
  • erasure
  • restriction of processing
  • objection to processing based on legitimate interest
  • portability
  • setting guidelines on what happens to your data after your death

To exercise them, write to 17records.contact@gmail.com. We reply within one month. Learn more about your rights (CNIL).

If you believe that your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL): cnil.fr/fr/plaintes, or by post: CNIL, Service des plaintes, 3 place de Fontenoy, 75007 Paris.

Cookies and other trackers

The website uses the following trackers:

NameTypePurposeDurationSet byConsent
NEXT_LOCALECookieRemember the chosen language365 daysthe websitenot required
themeLocal storageRemember the chosen theme (light or dark)until you delete itthe websitenot required
17r-a11yLocal storageRemember your accessibility settingsuntil you delete itthe websitenot required
17r-a11y-rateLocal storageRemember the chosen text-to-speech reading speeduntil you delete itthe websitenot required

Trackers marked “not required” are strictly necessary for the website to work or for the service you request: they are exempt from consent (article 82 of the French Data Protection Act, loi Informatique et Libertés).

Additional information

Contact form: you may also, if you wish, provide the name of your company and your budget. This optional information is processed in the same way as the rest of your message.