Privacy Policy (GDPR)

Controller: 2D ONLINE — privacy@2donline.fr.

Data collected: technical data (logs, analytics), forms (contact, registration), user accounts where applicable.

Purposes: service delivery, security, statistics, communication.

Legal basis: contract performance, legitimate interest, consent where required.

Retention: security logs (12 months), accounts (usage duration + 3 years), invoicing (6–10 years).

Recipients: authorized staff and processors (hosting, email, analytics) under contract.

Transfers: where outside the EU, appropriate safeguards (SCC). Details on request.

Rights: access, rectification, erasure, objection, restriction, portability. Contact: privacy@2donline.fr. Complaint: CNIL.

Generative AI: some content (music, images, texts) may be AI-assisted; human oversight is systematic by the association’s board. A transparency label is displayed where relevant.