Privacy

Data controller

The data controller is the HUB CITY6 collective. For any question about your data, you can contact us at [email protected].

Data we collect

We apply the principle of minimisation: we only collect what is strictly necessary for the hub to work.

• Newsletter: your e-mail address, only if you subscribe voluntarily.
• Community contributions: the pseudonym and content you submit (guide, correction, translation).
• Technical data: temporary server logs (truncated IP address, browser type) needed for security and abuse prevention.
• To date, no analytics and no advertising cookies are deployed.

Legal bases and purposes

Each processing activity relies on a legal basis set out in Article 6 of the GDPR:

• Consent: sending the newsletter and, in the future, anonymised analytics.
• Legitimate interest: site security and fraud/spam prevention through technical logs.
• Performance: publishing and moderating the contributions you entrust to us.

Retention period

We keep your data only for as long as necessary for the purposes described:

• Newsletter e-mail address: until you unsubscribe, which is possible at any time via the link in every message.
• Technical logs: 12 months at most, then deleted or anonymised.
• Published contributions: kept as long as the content stays online, unless you request its removal.

Recipients and processors

Your data is never sold or rented. It may be processed by our technical providers acting as processors within the meaning of the GDPR: Vercel (hosting) and Supabase (database). These providers are bound by contractual confidentiality and security commitments.

Transfers outside the European Union

Some providers are established outside the European Union. Where applicable, such transfers are governed by appropriate safeguards (the European Commission's standard contractual clauses) to ensure an equivalent level of protection.

Your rights

In accordance with the GDPR, you have the following rights over your data at any time:

• Right of access: obtain confirmation that data about you is processed and receive a copy.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: request the deletion of your data (the "right to be forgotten").
• Right to portability: receive your data in a structured, machine-readable format.
• Right to object and to restriction: object to a processing activity or ask for it to be restricted.
• Right to withdraw your consent at any time, without retroactive effect.

Exercising your rights

To exercise any of these rights, write to [email protected] describing your request. We reply within one month at most. If you believe your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris — www.cnil.fr — or with the supervisory authority of your country of residence.

Data protection officer

Given its volunteer, non-commercial nature, HUB CITY6 is not legally required to appoint a data protection officer (DPO). Requests relating to personal data are nonetheless centralised at [email protected].

Security

We implement reasonable technical and organisational measures (encrypted communications, restricted access, minimisation) to protect your data against loss, unauthorised access or disclosure.