Privacy
Who this policy covers
This Privacy Policy explains how emmakellermusic.com ("the Site") collects, uses, and protects personal data, in line with the EU General Data Protection Regulation (GDPR) and the recommendations of the Commission Nationale de l'Informatique et des Libertés (CNIL).
Emma Keller is a minor. This Site is operated on her behalf by her parent/legal guardian, in coordination with her management (720 Pop), who act as the data controller for the processing described below.
For any question about this policy, or to exercise the rights described further down, contact: [email protected].
What we collect, and why
Newsletter (via Mailchimp): your email address and, optionally, your first name, so we can send you news about releases and announcements. Legal basis: your consent, given when you submit the form. You can withdraw it at any time using the unsubscribe link in any newsletter email.
Contact form: the name, email address, and message you provide, so we can reply to your inquiry. Legal basis: our legitimate interest in responding to messages sent to us. The form is protected by Cloudflare Turnstile, an anti-bot check that verifies you're human without profiling or tracking you across other websites.
Site analytics (Plausible), only where enabled: aggregated, anonymous visit statistics such as pages viewed, approximate country-level location, and device type. Plausible does not use cookies and does not build individual visitor profiles. Legal basis: our legitimate interest in understanding how the Site is used; CNIL recognizes this kind of privacy-first analytics as exempt from consent requirements.
Theme preference: a small cookie remembers the visual theme you picked, so the Site doesn't reset it on your next visit. This is strictly functional, contains no personal data, and is exempt from consent under CNIL guidance because it only stores a choice you made yourself.
Who we share it with
We use a small number of service providers ("processors") to run the Site. We do not sell your data, and we do not share it with unrelated third parties or use it for advertising profiling.
Mailchimp (The Rocket Science Group / Intuit Inc., USA) hosts our newsletter list. Cloudflare provides the Turnstile anti-bot check on the contact form. Netlify hosts the Site itself and processes basic technical server logs (such as IP address and request timestamp) for security and reliability. Plausible Analytics, where enabled, is EU-hosted. Once configured, a transactional email provider (currently planned: Mailgun) will deliver contact-form messages to Emma's team.
Some of these providers are based outside the European Union. Where that's the case, transfers rely on the safeguards required by the GDPR, such as the European Commission's Standard Contractual Clauses.
How long we keep it
Newsletter: until you unsubscribe.
Contact form messages: up to 3 years from our last exchange with you, then deleted.
Technical server logs: retained by our hosting provider for a limited period for security purposes, then deleted.
Analytics: Plausible does not retain data that identifies you individually.
Cookies and similar technologies
This Site only uses a strictly necessary cookie to remember your theme preference and, where enabled, Plausible analytics, which by design does not use cookies or collect personal data. We do not use advertising cookies or third-party tracking pixels.
Because none of these require tracking or profiling, this Site does not display a cookie-consent banner, consistent with CNIL guidance that strictly necessary and non-tracking tools are exempt from prior consent.
Your rights
Under the GDPR, you have the right to access, correct, and request erasure of your data, to restrict or object to its processing, to request portability, and to withdraw consent at any time (for the newsletter, simply use the unsubscribe link in any email).
To exercise these rights, contact [email protected]. We will respond within one month, as required by law.
If you believe your rights are not being respected, you may lodge a complaint with the CNIL: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — cnil.fr.
Security
We take reasonable technical measures to protect the data we hold, including encryption in transit (HTTPS), bot/spam protection on the contact form, and rate limiting. No online system is completely risk-free, but we work to minimize risk to your data.
Changes to this policy
We may update this policy as the Site evolves, for example when a new feature or service provider is added. The version published on this page is the one in effect. Last updated: September 2026.