Personal data
Privacy policy
Last updated: 24 September 2026.
In short
This page explains, simply, what data we collect on jerrywallis.com, why, how long we keep it and what your rights are. It is written under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the French Data Protection Act of 6 January 1978 as amended. Your data is never sold, rented or shared with third parties for marketing purposes.
Data controller
STARS PROD, a French limited liability company (SARL) with a share capital of 1,200 euros, registered in Narbonne under number 534 648 142 (head office SIRET 534 648 142 00022, APE code 70.21Z), VAT number FR65 534 648 142, head office 14 rue des Lavandes, 11100 Montredon-des-Corbières, France. Phone: +33 6 89 37 89 53. Email: [email protected]. STARS PROD has not appointed a data protection officer; the managing director is your contact for any question.
What data, and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Contact form (booking, press, partnerships, messages) | Name, email, phone if you provide it, subject, message | Pre-contractual steps at your request (GDPR art. 6.1.b) or legitimate interest in replying to messages (art. 6.1.f) | 12 months after our last exchange if nothing follows, or the duration of the contract (booking, service) |
| “The Gang” newsletter | Email, first name if you provide it, date and proof of subscription | Your consent (art. 6.1.a), given with the checkbox in the form | Until you unsubscribe, and at most 3 years without any open or click |
| Audience measurement (if you accept it) | Pages viewed, device, browser, referrer, cookie identifier | Your consent (art. 6.1.a), which you can withdraw at any time | 13 months maximum for the cookie, 14 months maximum for statistics |
| Google advertising: campaign measurement and retargeting (if you accept it) | Pages viewed, cookie identifier, conversions | Your consent (art. 6.1.a), which you can withdraw at any time | 13 months maximum for cookies |
| Spam protection of the form (contact page) | IP address, browser characteristics, interactions on the page | Legitimate interest: form security (art. 6.1.f) | Processed by Google for analysis, not kept by us |
| Security and server logs | IP address, date, page requested, browser | Legitimate interest: security and abuse prevention (art. 6.1.f) | 12 months maximum |
Cookies and trackers
On your first visit, a banner lets you accept or refuse audience measurement and advertising cookies. Refusing is as easy as accepting, and everything is refused by default: nothing is set until you accept. Your choice is stored in your browser (local storage, key “jw-consent”, no personal data) and you can change it at any time with the “Cookies” link at the bottom of each page.
Audience measurement and advertising. They rely on Google Analytics and Google Ads in consent mode (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Data may be transferred to the United States under the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.
Spam protection. On the contact page only, the form is protected by Google reCAPTCHA, which may use trackers strictly necessary for form security. The Google Privacy Policy and Terms of Service apply.
External content. Links to Spotify, Apple Music, YouTube or social networks take you to those platforms, which apply their own rules.
Who receives your data
Your data is processed by STARS PROD and its technical providers, only for the purposes described above:
- OVH (Roubaix, France): website hosting;
- Cloudflare, Inc.: website delivery and security;
- Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France): newsletter management and sending;
- Google Ireland Limited: audience measurement and advertising if you accept them, spam protection of the form;
- the website’s email delivery service and backup service, to deliver form messages and restore the website if needed.
Form messages reach us by email and a copy is kept in the website administration area, accessible only to administrator accounts. The shop at shop.jerrywallis.com, running on Shopify, has its own privacy policy.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, to withdraw your consent at any time (for example with the unsubscribe link in every newsletter) and to give instructions about your data after your death. To exercise these rights, write to [email protected] or by post to our head office. We reply within one month and may ask for proof of identity if there is reasonable doubt.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr, or with the authority of your country of residence.
Security
The website is served over HTTPS, behind Cloudflare. Administration access is protected by strong passwords and dedicated application passwords, and the website is backed up regularly.
Minors
The newsletter and the contact form are intended for people aged 15 and over. Below that age, a parent’s consent is required.
Changes
This policy may change, in particular if we add or replace a tool. The date of the last update is shown at the top of the page.