PRIVACY POLICY

Last updated: 24 October 2026

The Jazz Kreiz Breizh association, which organises Fest Jazz, takes the protection of your personal data very seriously. This policy explains what data we collect on the fest-jazz.com website, why, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Data controller

Association Jazz Kreiz Breizh (non-profit association under the French law of 1901)
7 rue de la Mairie, 29520 Châteauneuf-du-Faou, France
SIRET: 479 231 540 00028
Contact for any question about your data: contact@fest-jazz.com

2. What data do we collect and why?

Contact form

When you write to us using the contact form, we receive your name, email address and message. This information is used only to reply to your request. It is sent to us by email and is not stored in the website's database.
Legal basis: our legitimate interest in replying to messages sent to us.
Retention period: as long as needed to deal with your request, then no more than 3 years after our last exchange.

If you sign up for our newsletter, we collect your email address (and your name, where provided) in order to send you festival news. Emails are sent by our service providers Brevo (France) and Mailchimp (Intuit, United States). Every email contains an unsubscribe link.
Legal basis: your consent, which you can withdraw at any time.
Retention period: until you unsubscribe.

Tickets

Tickets are sold through the HelloAsso platform, via an embedded widget. The data you enter when buying (identity, contact details, payment) is collected and processed by HelloAsso, under its own privacy policy, available at helloasso.com. HelloAsso passes on to us the information needed to manage your order and your entry to the festival.
Legal basis: performance of the sales contract.
Retention period: for the duration of the event management, then for the period required by our accounting obligations (10 years for accounting records).

Audience measurement and advertising

With your consent, we use Google Analytics to understand how the site is visited (pages viewed, visit duration, type of device) and, where applicable, Google Ads to measure the effectiveness of our adverts. These tools set cookies and are only activated once you have accepted them in the cookie banner.
Legal basis: your consent.
Retention period: cookies for a maximum of 13 months; statistical data kept for a maximum of 14 months.

Embedded content (YouTube, Google Maps)

Some pages contain YouTube videos and a Google Maps map. These services may collect data about you and set cookies. They are blocked by default and only load once you have given your consent.
Legal basis: your consent.

Website security

To protect the site against attacks and abuse, our firewall temporarily records certain technical connection data (IP address, browser, pages requested).
Legal basis: our legitimate interest in keeping the site secure.
Retention period: a few weeks at most.

3. Cookies

On your first visit, a banner lets you accept, refuse or customise non-essential cookies. You can change your choice at any time. The full list of cookies used can be found in our cookie policy.

4. Recipients and service providers

Your data is intended only for the members of the association responsible for organising the festival. It is never sold. We use the following service providers, who act on our behalf:

IONOS (website and email hosting) – European Union
Brevo (newsletter sending) – France
Mailchimp / Intuit (newsletter sending) – United States
HelloAsso (ticketing) – France
Google (Analytics, Ads, YouTube, Maps) – United States

5. Transfers outside the European Union

Some providers (Google, Mailchimp) are based in the United States. These transfers are covered by appropriate safeguards: the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.

6. Your rights

Under the GDPR, you have the following rights over your data at any time:

the right of access and to obtain a copy of your data;
the right to rectification;
the right to erasure;
the right to restriction of processing;
the right to object;
the right to data portability;
the right to withdraw your consent at any time;
the right to set instructions regarding what happens to your data after your death.

To exercise these rights, write to us at contact@fest-jazz.com or by post at the address given above. We will reply within one month.

If, after contacting us, you feel your rights have not been respected, you can lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr – 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

7. Security

We take appropriate technical and organisational measures to protect your data: secure connection (HTTPS), firewall, regular updates and protected backups.

8. Changes to this policy

We may update this privacy policy, in particular if the website or the regulations change. The date of the last update is shown at the top of this page.

Fest Jazz