1. Data Controller
SAS Jalimani (trading as JLMN), SIREN 833 142 631, with its registered office at 3 chasse aux Gresles, 50630 Quettehou, France, processes personal data through the QronoPlay service (qronoplay.fr).
Contact: [email protected]
Designated DPO: [email protected]
2. Purposes and Legal Bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Account creation, subscription management | Performance of the contract (art. 6(1)(b) GDPR) | Contract term + 3 years |
| Management of game entries | Performance of the contract (art. 6(1)(b)) — CNIL recommendation IS001 | 6 months after prize delivery for winners; deletion as soon as the final draw is held for non-winners |
| Fraud prevention, security | Legitimate interest (art. 6(1)(f)) | 12 months (logs) |
| B2B prospecting on generic business email addresses | Legitimate interest (art. 6(1)(f)) | 3 years after last contact |
| Newsletter sending | Consent (art. 6(1)(a)) | Until unsubscription |
| Accounting and tax obligations | Legal obligation (art. 6(1)(c)) | 10 years |
3. Recipients of the Data
Data is accessible to internal departments of SAS Jalimani and to our contractually bound processors:
- OVH SAS (server hosting, France) — 2 rue Kellermann, 59100 Roubaix
- Resend, Inc. (transactional email delivery) — United States
- Mollie B.V. (payment processing) — Keizersgracht 313, 1016 EE Amsterdam, Netherlands
- Stripe Payments Europe (payment processing) — 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland
- Tawk.to LLC (live visitor chat support) — Las Vegas, Nevada, United States — transfer governed by the EU–US Data Privacy Framework (DPF)
4. Transfers Outside the EU
Data is hosted exclusively in France (OVH Roubaix). Some processors may handle data in the United States: Resend (transactional email), Tawk.to (live chat support). These transfers are governed by the Standard Contractual Clauses (SCCs) issued by the European Commission and/or the EU–US Data Privacy Framework (DPF) certification.
5. Your Rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights: access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to define post-mortem directives.
To exercise them: [email protected] or by post to SAS Jalimani, 3 chasse aux Gresles, 50630 Quettehou, France.
Response time: 1 month (extended by 2 months for complex requests).
Complaint to the CNIL: www.cnil.fr
To withdraw your consent for partner marketing, use the “Unsubscribe” link included in every email received, or contact the DPO.
6. Cookies
The website uses strictly necessary cookies (sessions, security) without prior consent. Third-party cookies are placed only after explicit consent via the tarteaucitron consent manager: Tawk.to (live chat support — cookies TawkConnectionTime, ss-cid, etc., set by tawk.to). No advertising cookies. Maximum lifetime: 13 months.
7. Security
TLS encryption in transit, encrypted database at rest, daily backups, MFA for admin access, and environment isolation.
8. B2B Customers — Processor Role (art. 28 GDPR)
When you use QronoPlay to collect and process the personal data of your own players, QronoPlay acts as a processor and you are the data controller. A standard Data Processing Agreement compliant with article 28 GDPR is available at qronoplay.fr/dpa.
9. Changes
This policy may evolve. Any substantial change will be notified by email to active accounts 30 days before it takes effect.