GLOBE SCRIBE · LEGAL INFORMATION
Privacy policy
Version dated 24 September 2026
Data controller
Melik Nakhla, individual entrepreneur, French micro-enterprise, 60 rue François 1er, 75008 Paris, France.
For privacy questions and requests : contact@globe-scribe.com.
Browsing and data minimisation
No traveller account is required. Optional Google Analytics starts only after permission, stored locally with its date; it can be refused or withdrawn in the footer settings. If enabled, Google processes pages viewed, browser and device details, and technical data; Google says it uses IP addresses for approximate location and then removes them from Analytics logs. The site does not enable personalised advertising. The server also receives technical information necessary for connections; the publisher must check hosting logs and their retention. Visitor data is not sold and no automated decisions with legal effects are made about visitors.
Purposes, legal bases and retention
- Optional audience analytics: pages viewed and technical information processed by Google Analytics only after permission (consent, GDPR Article 6(1)(a)). The choice and its date remain in the browser until changed. You can withdraw permission in the footer. Google says it removes IP addresses from Analytics logs but derives approximate location from them.
- Notebook: guide titles, URLs and notes are stored only in your browser to provide the requested service (GDPR Article 6(1)(b)). They remain until you or your browser delete them, with no copy sent to our server. Saving is optional; without storage the notebook will not persist. Export and deletion controls are available in the notebook.
- Editorial reports: message, related guide, date and handling status, to correct content (legitimate interest in accuracy, Article 6(1)(f)). A message is required only if you choose to submit a report. It is not published. Records older than 12 months are removed by the daily cleanup while the worker is running. Do not include sensitive data.
- Email contact: address, message and voluntarily supplied attachments to answer your request (legitimate interest, or pre-contractual steps for a contract enquiry). Retention policy: 12 months after closure, except legally required or dispute-related restricted archives. The publisher must apply this deletion in the mailbox; the website has no mailbox access.
- Administration: authorised staff identity and hashed password, an 8-hour session, 15-minute login rate limiting and a 6-month action log. Purpose: access control and security, based on legitimate interest. Expired sessions and counters are cleaned daily while the worker is running. Accounts must be disabled when access ends and personal details deleted or anonymised after checking remaining obligations.
Recipients and service providers
The publisher, Google for audience measurement after permission, and authorised hosting and email staff and providers access data necessary for their tasks. Google says it acts as an Analytics processor subject to the account configuration and terms. The publisher must check and document sharing settings, retention and contractual terms for the Analytics property before production. Hosting and email provider identities, locations, subprocessors and safeguards remain to be confirmed. Email provider: Information required before public launch
Third-party services and transfers
Automatic advertising scripts are disabled. Google Analytics may process data outside the EEA depending on the infrastructure and terms applicable to the account; the publisher must check Google’s location, settings and safeguards for the property. Following an external link is subject to the destination site's policy. Some illustrations may be hosted by a third party; displaying them sends information including your IP address to that host. External requests omit the referrer. Production hosting locations and safeguards must be checked before public launch.
Exercise your rights
Subject to GDPR conditions, you may request access, correction, deletion and restriction, and object to processing based on legitimate interest. Portability applies to automated processing based on consent or contract. Consent can be withdrawn without affecting prior lawful processing. French law also provides for instructions concerning data after death. Contact us with enough information to locate the relevant records; identity documents are not routinely required. Requests are normally answered within one month; a justified extension of up to two additional months must be notified within the first month. You may complain directly to the CNIL.
Submit a complaint to the CNIL
Security and backups
Editorial access is role-restricted, passwords are hashed and session cookies are protected. HTTPS must be enabled on the production domain. Backups, permissions, infrastructure logs and deletion requests also require operational controls. Production backups are intended to be retained for no more than 30 days; rotation must be configured and checked with the host before launch. Cleanup and deletion requests must be reapplied after a restore.