Privacy Policy – Yelinka

1. Introduction

This Privacy Policy describes how Yelinka (https://www.yelinka.com) collects, uses and protects users’ personal data.

Yelinka is committed to complying with applicable regulations, in particular the General Data Protection Regulation (GDPR).

In the event of any discrepancy between the French version and this English version, the French version shall prevail.

2. Data controller

The data controller is:

Yelinka
Vincent Hooge
33 rue d’Anchin
59146 Pecquencourt
France
Email: contact@yelinka.com

3. Data collected

Yelinka may collect the following data:

• Identification data: email address, username, band or music project name
• Account data: information required for authentication and account management
• Content data: presskit, biography, images, media, messages, booking information and information related to concert organization
• Technical data: logs, IP address, security information
• Browsing data: pages viewed, interactions, cookies or trackers where used

Yelinka only collects data that is strictly necessary for the provision of the Service.

Yelinka does not ask users to provide sensitive data within the meaning of the GDPR. Users are invited not to publish or transmit sensitive data through the Service, unless strictly necessary for their own use.

Payment data is processed by Stripe. Yelinka does not store full bank card details.

4. Purposes of processing

The data is used to:

• create and manage user accounts;
• provide the platform’s features;
• enable the publication of public presskits;
• enable the receipt and management of booking requests;
• enable concert organization and the management of declared availability;
• ensure security and prevent abuse;
• respond to support requests;
• produce aggregated internal indicators relating to the proper operation, use of features and improvement of the Service;
• improve the Service.

5. Legal bases

The processing operations carried out by Yelinka are based, depending on the case, on:

• performance of a contract, where the processing is necessary for account creation, provision of the Service, management of subscriptions, orders, credits or support;
• Yelinka’s legitimate interest, in particular to ensure the security of the Service, prevent abuse, diagnose errors, improve the platform, measure feature usage and retain certain evidence;
• compliance with legal obligations, in particular regarding billing, accounting and retention of certain documents;
• the user’s consent, where required, in particular for certain cookies, trackers or marketing communications.

6. Public data

Users may make certain data public through their presskit.

This information may:

• be accessible to everyone;
• be indexed by search engines;
• be viewed outside the platform.

The user is responsible for the data they choose to make public.

7. Cookies and audience measurement

Yelinka uses audience measurement tools in order to understand how the Service is used, measure website performance and improve the user experience.

These tools may include PostHog and Vercel Analytics.

PostHog is used for product analytics and usage measurement. It may collect certain browsing or interaction data, such as:

• pages viewed;
• interactions with the website;
• usage events within the Service;
• certain technical information relating to the browser, device or session.

PostHog trackers are only activated after the user has given consent through the cookie management banner. The user may accept or refuse these trackers. Their choice is stored for 6 months.

Vercel Analytics is used to measure website audience and performance, in particular based on the pages or routes accessed. This tool is used for technical measurement, performance monitoring and Service improvement purposes.

This data is not used for personalized advertising.

8. Processors

Yelinka uses technical service providers:

• Vercel: hosting, performance and technical audience measurement via Vercel Analytics
• Supabase: database, authentication and storage of data necessary for the Service
• Cloudflare: CDN and security
• Brevo: transactional email delivery
• Stripe: payment processing, billing and subscription management
• Upstash: security and protection against abuse
• PostHog: product analytics and usage measurement, subject to user consent where required

These service providers act as processors and process data only on behalf of Yelinka.

9. Transfers outside the European Union

Some service providers may be located outside the European Union.

In such cases, Yelinka ensures that the transfers are governed by appropriate safeguards, including Standard Contractual Clauses or any other mechanism recognized by applicable regulations.

10. Retention period

Personal data is retained for the period necessary for the purposes for which it is processed.

In practice:

• account data is retained as long as the user account is active;
• content published or stored in the Service is retained as long as it is maintained by the user or until account deletion;
• data related to the public presskit is retained as long as the presskit is published or maintained by the user;
• data related to booking requests and concert organization is retained as long as the account is active or for the period necessary to follow up on the Service;
• data relating to billing, payments and accounting obligations is retained for the applicable legal retention periods;
• data necessary for security, abuse prevention and evidence may be retained for a limited period after collection or after account closure;
• requests relating to GDPR rights may be retained for the time necessary to process them and to prove the response provided.

Data may be deleted at the user’s request, subject to applicable legal retention obligations.

11. Security

Yelinka implements appropriate technical and organizational measures, including:

• secure access controls;
• encryption of data in transit;
• protection against unauthorized access;
• abuse and fraud prevention measures.

12. Users’ rights

In accordance with the GDPR, you have the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability.

You may exercise these rights at: contact@yelinka.com

You may also lodge a complaint with the CNIL, the French data protection authority.

13. Emails

Yelinka may send emails:

• transactional emails, including emails related to the account, notifications, security, booking requests or use of the Service;
• emails related to the operation or follow-up of the Service.

No marketing email is sent without prior consent.

14. Changes

This Privacy Policy may be updated at any time.

In the event of a significant change, Yelinka may inform users by any appropriate means.

15. Contact

For any question relating to this Privacy Policy or to the processing of personal data, you may contact Yelinka at the following address:

contact@yelinka.com