Privacy Policy

Last updated · 22 May 2026

Encora is a free weekly newsletter about Arab, African and Maghrebi concerts in Paris and Genève. This page explains, in plain language, what personal data we collect when you subscribe, why we collect it, and the rights you have over it.

01Who is responsible for your data

Encora is published by [Jelzia — full legal entity name and form], registered at [registered address][, registration number]. We are the "data controller" — the party responsible for your personal data.

For any privacy question or request, contact us at [privacy contact email — e.g. [email protected]].

02What we collect

• Your email address — when you fill in the subscribe form.
• How you found us — if you arrive through a tagged link, we record the source (for example "instagram") so we know which channels work.
• Whether you engage — when we send an issue, we record whether it was opened and which links were clicked. This tells us if the newsletter is actually useful.
• Basic technical data — such as an IP address — is handled by our hosting and email providers in the ordinary course of delivering the website and the emails.

We never ask for your name or anything beyond an email address.

03Why we use it — and our legal basis

We use your email address for one purpose: to send you the weekly Encora newsletter. The legal basis is your consent (GDPR Article 6(1)(a)) — you give it by subscribing and confirming through the double opt-in email we send you. The engagement data (opens and clicks) is used, also under your consent, only to measure whether the newsletter is working during this early validation period.

04Who else processes your data

We rely on a small number of trusted providers ("processors"):

• Brevo (Sendinblue SAS, France) — sends the newsletter emails on our behalf.
• [Server host — Hetzner, Germany / or Hostinger, Netherlands] — runs Listmonk, the software that stores the subscriber list, on a server inside the European Union.
• Cloudflare — hosts and delivers this website. Cloudflare is a US company; it serves the site from EU locations and operates under Standard Contractual Clauses for any data transfer.
• This site loads typefaces from Google Fonts, which means Google receives your IP address when the page loads.

We do not sell your data, and we never share it with anyone for advertising.

05Where your data is stored

The subscriber list lives on a server in the European Union. Our email provider, Brevo, is based in the EU. Some technical processing — website delivery — involves Cloudflare, a US provider, under Standard Contractual Clauses.

06How long we keep it

We keep your email address for as long as you stay subscribed. If you unsubscribe, we remove you from the active list. You can also ask us to erase your data entirely at any time — see your rights below.

07Your rights

Under the GDPR you can, at any time:

• Access the data we hold about you
• Correct it if it is wrong
• Have it erased
• Restrict or object to how we use it
• Receive a copy in a portable format
• Withdraw your consent — every email carries a one-click unsubscribe link, and unsubscribing withdraws your consent immediately

To exercise any of these, email us at [privacy contact email]. We will respond within one month.

If you believe we have mishandled your data, you can lodge a complaint with a data-protection authority — in France, the CNIL. Residents elsewhere in the EU, and in Switzerland, may contact the authority in their own country.

08Cookies

This website does not use tracking or advertising cookies. The only measurement is inside the emails themselves — the open and click tracking described in section 2. You can avoid it by disabling image loading in your email client, or by unsubscribing.

09Changes to this policy

If we change how we handle your data, we will update this page and change the "last updated" date above. For any significant change, we will tell subscribers by email.

10Contact

[Jelzia / Encora] — [privacy contact email].