Data controller
The data controller for your personal data is the site's publisher, a private individual: To complete: publisher's full name.
For any question about your data, email To complete: email address for personal data requests or use the contact page.
Email alerts
You can ask to receive an email when new facilities are listed in the towns you follow. Alerts work without a contributor account.
- Data collected: your email address, your language, the towns and facility types you follow, and the date and proof of your consent.
- Purpose: sending you these alerts, and nothing else.
- Legal basis: your consent.
- Double opt-in: after you sign up, you receive an email with a link to click. No alert is sent until you confirm.
- Retention: your data is kept for as long as you are subscribed. When you unsubscribe, you can tick “Also delete all my data” to erase everything straight away. Otherwise, your preferences are kept for To complete: retention period for preferences after unsubscribing, in case you come back. Unconfirmed sign-ups are deleted after To complete: deletion period for unconfirmed sign-ups.
- Processor: emails are sent by Brevo, a French company acting on our behalf and on our instructions.
Every alert includes a one-click unsubscribe link. You can also unsubscribe at any time from the Unsubscribe page.
Contributor account
A free account lets you suggest facilities and follow your suggestions from My account. There is no password: you receive a sign-in link by email, valid for 20 minutes and usable only once.
- Data collected: your email address, the date your account was created and the date you last signed in. If an account is blocked for misuse, that is recorded too.
- Purpose: identifying you, letting you suggest facilities and telling you the decision on each of your suggestions.
- Legal basis: providing the service you ask for when you create an account, under our terms of use.
- Session: once you sign in, a session token is saved in your browser's local storage for 30 days. It is only sent to our servers when you use the contributor area. Signing out deletes it.
- Preventing misuse: the number of sign-in link requests and suggestions is limited per email address. To apply this limit, we record the time of these requests. We may block an account that sends false or abusive suggestions. Legal basis: our legitimate interest in protecting the service and the quality of the data.
- Retention: until you delete your account. An account with no sign-in for two years is deleted.
- Processors: Netlify hosts the account and runs the site's functions; Brevo sends the sign-in emails.
Deleting your account: you can do it at any time from My account. Your address, your pending or declined suggestions and their photos are erased. Facilities already published stay on the map, with no link to you.
Facility suggestions and photos
When you suggest a facility, we receive the information from the form and link it to your account.
- Data collected: the facility type, its GPS location and how it was obtained (your phone's position and its accuracy, a pin placed on the map, coordinates typed in or read from a photo), the town, the name, lighting, surface, wheelchair access, the description, the supporting link, up to 3 photos, the date sent and the form language. Then the decision, its date and, if declined, the reason.
- Purpose: checking the suggestion, publishing it if approved and telling you the decision.
- Legal basis: providing the service you ask for when you send the suggestion.
- Checking: the site's administrator reviews every suggestion by hand, comparing the location with aerial imagery, your photos and the available sources.
- What is published: only the information about the facility, marked “Verified contribution”. Your email address is never published, and neither are your photos. Please do not include personal details in the description.
- Retention: photos are deleted as soon as a decision is made. A declined suggestion is deleted after 90 days. An approved suggestion stays linked to your account until you delete the account, after which it is no longer linked to anyone.
- Processors: Netlify stores suggestions and photos; Brevo sends the email telling you the decision.
Photos: before sending, your browser reads any GPS position stored in the photo, then resizes it. The photo's other metadata is not sent to us. Please do not photograph people or number plates. If a photo shows some anyway, it is only used for checking and is deleted with the others after the decision.
Contact form
When you write to us, we receive your email address, your message and anything else you choose to include. We use this only to reply and follow up on your request. Legal basis: our legitimate interest in answering people who contact us.
These exchanges are kept for as long as it takes to handle your request, then deleted after To complete: retention period for contact messages.
Analytics and hosting
We measure traffic with Plausible Analytics, a tool hosted in the European Union. Plausible sets no cookies and collects no personal data: it does not follow you across websites and cannot identify you. We only see overall figures, such as the number of visits or the most viewed pages.
The site is hosted by Netlify, which also runs the contributor area's functions and stores accounts, suggestions and photos. Like any hosting provider, Netlify keeps technical logs when you visit (for example your IP address and the page requested) to run the service and keep it secure.
Netlify is a US company. Where data is transferred outside the European Union, these transfers are covered by the safeguards provided for in the GDPR.
Your browser
- Location: the “Near me” feature uses your position only inside your browser, to work out which facilities are close by. Your position is never sent to our servers or stored. You can refuse location access and search for a town instead. In the “Suggest a facility” form, the “Use my location” button only places the pin: the position is sent only if you send the suggestion, as the facility's location.
- Favourites and preferences: your favourites, language and display preferences are saved in your browser's local storage. They never leave your device. The details are on the cookies and trackers page.
- Session and draft: the contributor area's session token and the draft of a suggestion in progress are also saved in local storage. The draft only leaves your device if you send the suggestion.
Weather and air quality: when you open a facility's listing, the site shows the weather and air quality there. Your browser asks Oukonjou's own server, which queries the Open-Meteo service using only the facility's coordinates, rounded. Open-Meteo never receives your position, your IP address or any identifier, and this feature sets no cookies.
The site shows no advertising and sets no tracking cookies.
Sharing your data
We do not sell or rent your data to anyone. It is only shared with the technical providers below, limited to what they need to provide their service, or with a public authority where the law requires it.
- Netlify: hosting, the site's functions, and storage of accounts, suggestions and photos.
- Brevo: sending alerts, sign-in links and decision emails.
OpenStreetMap: the published information about an approved facility may be offered to OpenStreetMap. Your email address and photos never are.
Open-Meteo: this weather service receives no data about you, only the rounded coordinates of the facility you are viewing, sent by our server. It therefore processes no personal data on our behalf and is not a processor.
Your rights
You have the following rights over your data:
- access: find out what data we hold about you;
- rectification: correct inaccurate data;
- erasure: ask us to delete your data;
- objection: object to processing based on our legitimate interest;
- restriction: ask us to pause processing for a while;
- portability: receive your data in a machine-readable format;
- withdrawing consent: stop alerts at any time, without affecting emails already sent.
You can also delete your contributor account yourself, at any time, from My account.
To exercise these rights, write to us from the contact page. We may ask you to confirm your identity, for example by replying from the email address concerned.
If you feel your rights have not been respected, you can complain to the French data protection authority, the CNIL: www.cnil.fr.
If you live outside France
Oukonjou is also meant for visitors from the other countries it covers. You can contact the data protection authority in your country:
- Belgium: Data Protection Authority (Autorité de protection des données, APD);
- Luxembourg: National Commission for Data Protection (CNPD);
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC, known in French as PFPDT);
- Andorra: Andorran Data Protection Agency (APDA);
- Monaco: Personal Data Protection Authority (APDP).
Children
In France, email alerts and the contributor area are intended for people aged 15 and over. Below that age, using them requires the agreement of a parent or legal guardian. In other countries, the age at which a minor can consent alone may differ: if in doubt, ask a parent first.
If you believe a child has signed up or created an account without that agreement, let us know and we will delete their data.
Changes to this policy
We may update this policy as the site or the law changes. The date of the latest update is shown at the top of the page. If a change significantly affects alert subscribers or account holders, we will let them know by email.