FRENPrivacy
Privacy Policy
The data used by the Site, why it is processed and the rights available to you.
1. Who processes your data?
The data controller is the non-professional publisher of Deeply Curious, an individual whose identity has been provided to the hosting provider IONOS. The publisher has chosen to preserve public anonymity under the French framework for non-professional online publishing.
No data-protection officer has been appointed, given the nature and current size of the Site.
Exercise your rights: write to contact@deeply-curious.com or use the Contact. Deeply Curious does not sell readers’ personal data.
2. Data, purposes and legal bases
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Browsing and security | IP address, date, URL, user agent and technical logs | Display the Site, prevent abuse and diagnose incidents | Legitimate interest in securing and administering the Site |
| Public comments | Name or pseudonym, email address, content, date, IP address and user agent | Display and moderate discussions and combat spam and abuse | Legitimate interest in maintaining and protecting the discussion area |
| Message sent to the publication | Name or pseudonym, email address, subject, message and any attachments supplied | Respond to a request and process a correction or proposal | Legitimate interest or pre-contractual steps, depending on the request |
| Active newsletter | Email address, date, status and source of subscription, selected list and technical information needed to manage the subscription | Send the welcome message and requested newsletters, then manage preferences and unsubscribes | Consent |
| Optional cookies, if enabled | Identifiers, consent choices and browsing data depending on the disclosed partners | Audience measurement or advertising funding | Consent where required |
The Site offers no reader account or hosted contact form; messages are sent directly by email. The newsletter is active and subscription is immediate after the form is submitted, with no second confirmation email. Open, click and cookie tracking are disabled. Comments are open: every comment is held for manual moderation before publication. The pseudonym and approved comment are public; the email address and technical data are not.
3. Recipients and service providers
Data is accessible only to the publisher and service providers that require it to deliver their service:
- IONOS SARL, for hosting the Site and its technical logs ;
- WordPress, content-management software installed on the hosting service ;
- MailPoet, the active extension used to collect subscriptions, manage lists and unsubscribes, and send requested emails ;
- IONOS, for hosting and sending newsletter emails by SMTP ;
- Google Fonts, whose external font files are still loaded by some pages pending local hosting ;
- authorised authorities or advisers where required by law or to defend legal rights.
Current status: Google AdSense, advertising trackers and optional audience-measurement tools are not enabled. MailPoet uses basic tracking mode: Deeply Curious measures neither opens nor clicks and does not collect subscriber time zones. This list will be updated before any new service is added.
4. Retention periods
- Technical logs: no more than 12 months, unless a security incident or legal obligation justifies longer retention.
- Contact and correction requests: two years after the last exchange, unless evidence or a legal obligation requires longer retention.
- Approved comments: for as long as the article remains published or until a legitimate removal request. Rejected, spammed or trashed comments are periodically deleted.
- Newsletter: until consent is withdrawn or the reader unsubscribes. Messages stop for inactive subscribers after 12 months; their details are deleted or anonymised no later than three years after the last relevant contact, except where limited evidence must be retained.
- Evidence of consent or unsubscription: for as long as needed to demonstrate compliance and defend legal rights.
- Cookie choices: generally six months, after which the choice may be requested again.
After these periods, data is deleted, anonymised or separately archived where required by law or litigation.
5. Transfers outside the European Economic Area
No optional advertising or audience-measurement tool involving an international transfer is currently enabled. Some pages still load font files from Google Fonts; that request may transmit technical information such as the IP address and browser to Google. Deeply Curious does not use this loading to measure its audience and plans to replace these requests with locally hosted fonts. If another international provider is added, this policy will identify the service and applicable safeguards.
6. Your rights
Depending on the processing concerned, you may request access to your data, correction, erasure, restriction, portability or object to processing. You may withdraw consent at any time without affecting earlier lawful processing.
To exercise your rights, write to contact@deeply-curious.com. Proportionate identity verification may be requested where there is reasonable doubt. A response is normally provided within one month.
After exercising your rights with the publisher, you may lodge a complaint with the French Data Protection Authority (CNIL) if you believe your rights have not been respected.
7. Security and updates
Deeply Curious applies technical and organisational measures appropriate to the Site’s size: encrypted HTTPS connections, administrative access controls, updates, backups and data minimisation. No system can guarantee zero risk, and any significant incident will be handled under the applicable obligations.
This policy may change as the Site’s tools or applicable rules evolve. The online version states its latest update date.
Last updated: 28 August 2026.