Privacy Policy
Last updated: 31 August 2025
We respect your privacy. This Privacy Policy explains what personal data we collect on lunaannese.com (the “Site”), why we collect it, on which legal bases, how long we keep it, who we share it with, and your rights under the EU GDPR.
1. Data Controller
Controller: Luna Annese
Postal address: 7 Rue Joséphine, 33300 Bordeaux, France
Email (privacy): contact@lunaannese.com
Website: https://lunaannese.com
Data Protection Officer: Not appointed.
2. Data We Process, Purposes & Legal Bases
| Context | Data | Purpose | Legal basis (Art. 6 GDPR) |
| Browsing the Site | Technical identifiers (IP address, user agent, pages viewed, timestamps); strictly necessary cookies if any | Display and secure the Site; prevent abuse | Legitimate interests in operating and securing the Site |
| Contact by email | Your email address, message content and metadata | Responding to inquiries and follow-up | Pre-contractual steps / Legitimate interests |
At the date above, the Site has no contact form, no newsletter, no e-commerce, and no analytics or embedded social/advertising trackers by default. The Site runs on WordPress (Divi).
3. Recipients (Processors/Third Parties)
We may share data only as needed with:
Email service used to receive and send messages at contact@lunaannese.com.
Technical service providers for maintenance, development or security, bound by confidentiality.
We do not sell your personal data.
4. International Transfers
If a provider is located outside the EU/EEA (e.g., in the United States), we rely on a recognised transfer mechanism (adequacy decision, the EU–US Data Privacy Framework where certified, or the European Commission’s Standard Contractual Clauses, with supplementary measures where required).
5. Retention
| Purpose | Retention |
| Security/technical logs | up to 12 months |
| Email correspondence | 24 months after last contact, then archived if needed for evidence |
| Strictly necessary cookies | Session or a few days (see Cookie Policy) |
6. Security
We use appropriate technical and organisational measures (TLS encryption, WordPress/theme/plugin updates, least-privilege access, backups, firewall/anti-spam, anomaly monitoring). No system is perfectly secure; if a data incident occurs, we will follow GDPR notification duties where applicable.
7. Cookies & Third-Party Content
We do not use non-essential cookies (no analytics, advertising or social tracking). See our Cookie Policy for details.
By default, we do not embed third-party content (e.g., YouTube, Instagram). If we add embeds in future, they may set their own cookies; this Policy will be updated.
8. Your Rights
Under the GDPR and French law, you have the rights to access, rectify, erase, object, restrict, portability, and to set post-mortem directives (France).
To exercise your rights, email contact@lunaannese.com and include information necessary to identify you. You may also lodge a complaint with your local Supervisory Authority. In France: CNIL (www.cnil.fr).
9. Children
The Site is not intended for children under 15. If you believe a child provided personal data without proper consent, contact us to delete it.
10. Changes
We may update this Policy to reflect legal or technical changes. See the “Last updated” date above. Material changes may be announced on the Site.
This text is informational and must be adapted if your practices change. It is not legal advice.