Privacy policy
This policy explains what personal data L'Orleanais collects, why, how long it is retained and how to exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and the amended Data Protection Act of 6 January 1978.
Last updated: 1 September 2026.
Data controller
The data controller is the site publisher L'Orleanais, reachable via the contact form. A data protection officer (DPO) can be contacted at contact@ioaproduction.fr for any question regarding your data.
Processed data, purposes and legal bases
| Purpose | Data | Legal basis | Duration |
|---|---|---|---|
| User account (login, profile) | Email address, display name, accessibility preferences | Performance of the requested service (Art. 6.1.b GDPR) | Account lifetime, deleted upon request |
| Comments and article reports | Display name, message content, account ID | Consent / legitimate interest of moderation (Art. 6.1.a and f) | As long as the comment is published; 12 months after rejection |
| Newsletter | Email address, selected topics, subscription status | Consent (Art. 6.1.a) — double opt-in | Until unsubscription; unsubscription logs 3 years |
| Push notifications (alerts) | Technical subscription identifier (endpoint, keys), selected topics | Consent (Art. 6.1.a) | Until browser unsubscription |
| Info alerts submitted by residents | Description, optional photo, position, contact details if accepted | Consent (Art. 6.1.a); anonymous submission possible | 12 months after publication or rejection |
| Audience measurement and statistics | Page views, user journey, pseudonymised session ID | Consent (Art. 82 Data Protection Act) | 13 months maximum |
| Local polls | Vote, anti-double voting technical token | Legitimate interest (ballot integrity, Art. 6.1.f) | Poll duration + 6 months |
Cookies and trackers are detailed in the cookie policy.
Recipients and processors
Data is hosted within the European Union on the site's cloud infrastructure. It is neither sold nor rented. Access is limited to: the editorial team (moderation), technical hosting and email sending service providers, to the extent necessary for their tasks and governed by processing contracts complying with Article 28 of the GDPR.
No data transfers outside the European Union are made without appropriate safeguards (standard contractual clauses of the European Commission).
Security
The site applies appropriate technical and organisational measures: encryption of exchanges (HTTPS), database-level access rules (each user only reads and modifies their own data), passwords hashed by the authentication provider, and administrative access restricted to authorised roles.
Your rights
You have the rights of access, rectification, erasure, portability, restriction and objection, as well as the right to define directives regarding the fate of your data after your death. To exercise them: contact@ioaproduction.fr (proof of identity requested only in case of reasonable doubt). We respond within one month.
You can withdraw your consent to cookies at any time from the cookie page, and unsubscribe from the newsletter via the link present in each email.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL (3 place de Fontenoy, 75007 Paris).