FDLM · Paris Official Guide
Privacy Policy
Last updated: June 2026
This Privacy Policy explains how FDLM · Paris Official Guide ("we", "us") collects, uses and protects your personal data when you use the website fdlm-paris.fr and purchase a pass. We process your data in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act ("Loi Informatique et Libertés").
1. Data Controller
The controller responsible for your personal data is [Company / individual name], [registered address]. For any privacy request, contact: info@fdlm-paris.fr.
2. Data We Collect
| Data | Purpose | Legal basis |
|---|---|---|
| Email address & account password | Create your account, deliver your login credentials, give you access to members-only content | Performance of contract |
| Payment information | Process your pass purchase (handled directly by Stripe — we never store your card details) | Performance of contract |
| Device identifier / fingerprint | Detect and prevent account sharing, secure your access | Legitimate interest (fraud prevention) |
| Connection & technical logs | Security, troubleshooting, abuse prevention | Legitimate interest |
3. Service Providers (Processors)
We rely on trusted third-party providers who process data on our behalf:
- Stripe — payment processing
- Supabase — account authentication & database
- Resend — sending your login credentials and transactional emails
- Netlify — website hosting and serverless functions
- FingerprintJS — device identification for anti-sharing protection
Some of these providers may process data outside the European Union. Where this is the case, transfers are governed by appropriate safeguards (such as the EU Standard Contractual Clauses).
4. How Long We Keep Your Data
Account data is retained for as long as your account is active. Payment records are kept for the period required by applicable accounting and tax law (generally up to 10 years). Technical logs are kept for a limited period for security purposes, then deleted or anonymised.
5. Your Rights
Under the GDPR, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data ("right to be forgotten");
- object to or restrict certain processing;
- request portability of your data;
- withdraw consent at any time, where processing is based on consent.
To exercise these rights, email info@fdlm-paris.fr. You also have the right to lodge a complaint with the French data protection authority, the CNIL.
6. Cookies & Similar Technologies
We use only the cookies and local storage strictly necessary to keep you logged in and to operate the Site securely. We do not use advertising cookies. The anti-sharing protection relies on a device identifier as described above. Third-party services (e.g. embedded maps or streaming links) may set their own cookies when you interact with them.
7. Data Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration. Passwords are stored in hashed form by our authentication provider and are never visible to us.
8. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest version. Material changes will be communicated where appropriate.
9. Contact
For any question about this Privacy Policy or your personal data, contact us at info@fdlm-paris.fr.