Privacy Policy

1. Data controller

The data controller is Groupe M-XO, a French SAS with share capital of €15,000, registered with the Paris Trade and Companies Register under no. 500 511 373. Publication director: Miguel MARIE. Contact: contact@homenura.com.

2. Data collected

Home Nura is an editorial site with no user accounts or registration forms. We do not collect any direct personal data. The only data processed are: (a) anonymised technical data collected by our host (truncated IP address, browser type, pages visited) for performance and security purposes; (b) anonymised browsing data (visit count, time spent) via audience measurement cookies where applicable; (c) emails you voluntarily send to contact@homenura.com.

3. Purposes and legal bases

We process your data on the following legal bases (GDPR article 6): (a) Legitimate interest (art. 6.1.f) — site security, fraud detection, abuse prevention, anonymous statistical analysis; (b) Consent (art. 6.1.a) — placement of non-essential cookies (audience measurement, advertising), which you can accept or decline via our cookie banner; (c) Performance of a request (art. 6.1.b) — replying to your contact emails.

4. Retention periods

Server logs (truncated IP addresses): 12 months maximum. Emails received at contact@homenura.com: 3 years from the last interaction. Technical cookies: session duration. Audience measurement cookies: 13 months maximum (CNIL recommendation). Amazon affiliate cookies: according to Amazon's policy (up to 24 hours).

5. Data recipients

Your data is never sold. It may be shared with: our host Vercel Inc. (United States, covered by the European Commission Standard Contractual Clauses) for technical service delivery; Amazon EU S.à r.l. under the Partner Program when you click an affiliate link; administrative or judicial authorities upon legal request.

6. Transfers outside the European Union

Some processors (Vercel Inc., Amazon) may process your data outside the European Union, particularly in the United States. These transfers are governed by the appropriate safeguards provided by the GDPR (Standard Contractual Clauses, adequacy decisions where applicable).

7. Security

We implement appropriate technical and organisational measures to protect your data: TLS/HTTPS encryption across the entire site, HTTP security headers (CSP, HSTS, X-Frame-Options), restricted log access, and regular infrastructure updates.

8. Cookies used

The table below details the cookies placed on your device. Non-essential cookies are only placed after your consent via our banner. You may withdraw consent at any time by clearing cookies in your browser.

9. Your rights

Under the GDPR (articles 15 to 22), you have the following rights regarding your personal data:

• Right of access: obtain confirmation that your data is processed and receive a copy
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): request deletion of your data
• Right to restriction of processing: request temporary suspension
• Right to data portability: receive your data in a structured, reusable format
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent at any time, without affecting the lawfulness of prior processing
• Right to define post-mortem directives on the fate of your data

10. Exercising your rights

To exercise these rights, contact us at contact@homenura.com specifying your request. We will reply within one month (extendable by two months for complex requests). Proof of identity may be requested in case of reasonable doubt.

11. Complaint to the supervisory authority

If after contacting us you believe your rights are not respected, you have the right to lodge a complaint with the French data protection authority (CNIL): 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr. You may also contact your local EU supervisory authority.