Privacy Policy
This policy describes how Wiseball collects and processes your personal data, in compliance with Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act of 6 January 1978, as amended.
1. Data controller
Kiwik (French micro-entreprise), represented by Fabien Evin, 20 place de la République, 56000 Vannes, France — SIRET 489 193 979 00023. Publisher of getwiseball.com.
Contact: [email protected]
2. Data collected
We collect only the data strictly necessary to operate the Service:
- Sign-up / wait-list: email address, first name (optional).
- Paid subscription: email address, Stripe payment identifier, billing country. Banking data (card number, CVC) is processed directly by Stripe and never transits through our servers.
- Communication: the content of emails you send us.
- Technical data (analytics): anonymised IP, pages viewed, browser, device, date and time, via our self-hosted Matomo instance. No third-party cookies, no data transmitted to Google Analytics or similar.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Delivering alerts and managing subscriptions | Performance of a contract |
| Launch-offer updates | Consent |
| Billing, accounting | Legal obligation |
| Audience measurement (first-party Matomo) | Legitimate interest (aggregated audience, no advertising cookie) |
| Service security, fraud prevention | Legitimate interest |
4. Retention periods
- Active subscription: for the entire duration of the contractual relationship.
- After cancellation: 3 years for commercial prospecting purposes.
- Accounting records: 10 years (French Commercial Code, art. L123-22).
- Technical and analytics logs: 13 months maximum.
- Wait-list email without subscription: 3 years from last contact.
5. Recipients
Your data is neither sold nor rented. It is shared only with strictly necessary sub-processors:
- Stripe Payments Europe, Ltd. — payment processing (EU, Ireland; US transfers covered by Standard Contractual Clauses).
- OVH SAS — infrastructure hosting, datacenters located in France (EU).
- Where applicable, our accountant and public authorities pursuant to legal requests.
Matomo is self-hosted: no analytics data is transmitted to any third party.
6. International transfers
Aside from payment operations via Stripe (which may involve transfers to the United States covered by the European Commission's Standard Contractual Clauses), no personal data is transferred outside the European Union.
7. Cookies and trackers
The site uses strictly necessary cookies (session, CSRF protection) and a first-party Matomo cookie considered "consent-exempt" under French CNIL guidelines: aggregated audience measurement, no cross-referencing, no advertising, anonymised IP.
No advertising cookies, no third-party pixels (Google, Meta, TikTok, etc.) are set.
8. Your rights
You have, at any time, the following rights over your data:
- Access — obtain a copy of your data;
- Rectification — correct inaccurate data;
- Erasure — delete your data (subject to legal retention obligations);
- Restriction — temporarily restrict processing;
- Portability — receive your data in a structured format;
- Objection — object to processing, in particular to prospecting;
- Withdraw consent — at any time, without retroactive effect;
- Post-mortem directives — on the fate of your data after death.
To exercise your rights: [email protected]. We will respond within one month.
If, after contacting us, you believe your rights are not respected, you may file a complaint with the French Data Protection Authority (CNIL).
9. Security
We implement appropriate technical and organisational measures (TLS in-transit encryption, environment isolation, restricted access, encrypted backups) to protect your data against unauthorised access, alteration or disclosure.
10. Updates to this policy
This policy may be updated. The last modification date is shown at the top of this document. Material changes will be notified to you by email.