Privacy Policy

Last updated: November 2026

Data controller

Personal data collected through the mouillotins.fr website and the Festival Les Mouillotins mobile app is processed by the Association des Mouillotins Animation & Culture (AMAC), 3 passage du Cormier, 53540 Saint-Poix, France (RNA W531000575). Contact: mouillotins@gmail.com.

We collect as little data as possible and never sell or rent it.

What data, and why?

  • Newsletter and volunteer waitlist: your email address, if you sign up through one of the site’s forms (the festival newsletter, or the alert for when the volunteer call opens). Sign-up takes two steps: you first receive a confirmation email, and your address is only added to the list once you click the link inside it (valid for 48 hours). To be able to prove your consent, we keep on our servers the list concerned, the language, the IP address and the dates of your request and its confirmation. The mailing lists are managed by our emailing provider Mailjet. Legal basis: your consent. You can unsubscribe at any time using the link in every email. Retention: until you unsubscribe; an unconfirmed request is deleted after 30 days.
  • Contact by email or phone: the information you send us (name, email, message) is used to reply to you. Legal basis: our legitimate interest in answering requests. Retention: up to 3 years after the last exchange.
  • Tickets and memberships via HelloAsso: payments and registrations for our events (festival, Les Mouillos, parties…) go through the HelloAsso platform, which collects your details and processes the payment under its own privacy policy. AMAC receives your first name, last name and email to manage your participation. Legal basis: performance of your order. Retention: as long as needed to run the event and meet accounting obligations (10 years for accounting records).
  • Volunteer registration: this happens on the benevoles.mouillotins.fr app, which has its own privacy policy.
  • Technical error monitoring: to detect outages, the site uses Sentry, which records anonymised technical data when an error occurs (page, browser, operating system). Legal basis: our legitimate interest in keeping the site working. Retention: up to 90 days.
  • Protecting forms from bots: the site’s sign-up forms are protected by Cloudflare Turnstile, which checks that a request comes from a person rather than an automated program. To do so, Cloudflare analyses technical data from your browser (IP address, browser and operating system type, behaviour on the page), without advertising cookies or cross-site tracking, and only uses it to provide this protection service, under its Turnstile privacy policy. Legal basis: our legitimate interest in protecting the site against abusive sign-ups.
  • Audience measurement: the mouillotins.fr site measures its traffic with Umami, an open-source tool hosted in France at OVH, with no data passed on to a third party. Umami sets no cookie and reads nothing on your device: it receives the page address, the referring website, the screen size, the language, the country and the browser type. Your IP address is not stored: it is only used, together with your browser, to compute an anonymous visit identifier that changes regularly. These aggregated statistics are only used to improve the site and are kept for 25 months. Legal basis: our legitimate interest; this measurement meets the CNIL’s conditions for consent exemption, which is why there is no cookie banner.
  • Server logs: our host OVH temporarily keeps technical connection logs (IP address, date, requested page) for security purposes, for up to 12 months.

Mobile app

The “Festival Les Mouillotins” app (Android and iOS) is provided by AUDEBEAU SASU on behalf of the AMAC, which remains the data controller. It works without an account.

  • Notifications if you allow them, a technical identifier of your device (push token), the topics you pick and the list of your favourite artists are stored on our servers, to send you festival announcements and to tell you when one of your artists’ set times changes. If you are signed in to the volunteer area, this token is also linked to your account, for your schedule notifications. Notifications go through Expo, Google (Firebase Cloud Messaging) and Apple. Legal basis: your consent, which you withdraw by turning notifications off in your phone settings.
  • Error tracking: when the app crashes, it sends technical data to Sentry (screen, device model and system, app version). Legal basis: our legitimate interest in keeping the app working. Retention: 90 days at most.
  • Usage statistics: the app sends the screens you view and the actions you take to Umami, our audience measurement tool hosted on our own servers at OVH, with no data passed on to a third party. Each event also carries the screen size, the language, and the device model and system. No name, email, account ID, device ID or advertising ID is sent, no typed text, and no cookie is used. Your IP address is only used to work out the country and is not stored. The statistics are aggregated only, used solely to improve the app and kept for 25 months. Legal basis: our legitimate interest; this measurement meets the CNIL’s conditions for consent exemption. You can object at any time by turning off “Usage statistics” in the app’s Settings tab.
  • What stays on your phone your set reminders, preferred music app and the content kept for offline use are never sent, nor are your favourite artists when notifications are off. Location (distance to your volunteer post), the camera (scanning check-in QR codes) and the calendar (adding your favourite artists’ sets, then moving them if their time changes) are only used on the device, and only if you allow them.
  • Third-party content: the listening player (Spotify, Deezer, SoundCloud) and the cashless page are provided by those services under their own policies; the app passes them no data about you.
  • Volunteer area: the data of signed-in volunteers falls under the privacy policy of the volunteer app (benevoles.mouillotins.fr).

Deleting your volunteer account

Volunteer accounts are created on benevoles.mouillotins.fr, not in the app. To delete yours, sign in there, open your profile and click “Delete my account”: your personal data (identity, contact details, address, date of birth, social security number, professional situation) is anonymized immediately and permanently, and only your past registrations are kept anonymously. You can also request it by email to mouillotins@gmail.com; we handle it within one month. Without a request, an account unused for 3 years (no sign-in and no participation) is anonymized during our yearly clean-up in early February, after two reminder emails.

Cookies and third-party content

The site itself sets no advertising or audience measurement cookies. Only cookies strictly necessary for it to work (language preference) may be set, which does not require your consent. To know how much it is visited, the site, like the volunteer app benevoles.mouillotins.fr, uses Umami, a cookieless audience measurement tool hosted on our own servers at OVH: it counts page views and some actions, with the referring page, device type and country, without storing your IP address, without any identifier kept on your device and without following you on other sites. The resulting statistics are aggregated only. Legal basis: our legitimate interest in measuring how the site is used.

The home page video is hosted on our own servers, without going through a third-party service. Links to social networks (Instagram, Facebook, YouTube), ticketing or carpooling (iko) take you to third-party services with their own rules.

Artist pages may offer a Spotify, Deezer, SoundCloud or Apple Music player. It only loads if you click "Listen on …": before that click, no data is sent to these services. Once the player starts, that service receives your IP address and may set its own cookies, including audience measurement or advertising cookies, under its own privacy policy (Spotify, Deezer, SoundCloud, Apple). Legal basis: your consent, given by starting the player. To avoid it, simply don't start the player; you can also delete these cookies from your browser.

Photos and videos taken at the festival

The festival is photographed and filmed by the association for its communication (website, social networks, press, aftermovie). If you appear in a picture and would like it removed, contact us and we will take it down from our online channels as soon as possible.

Recipients and transfers

Your data is only accessible to the AMAC board members and volunteers who need it, and to our technical providers (OVH, Mailjet, Cloudflare, HelloAsso, Sentry, Expo, Google (Firebase Cloud Messaging) and Apple) within the limits of their services. Where one of them processes data outside the European Union, the transfer is covered by the safeguards required by the GDPR (standard contractual clauses or an adequacy decision).

Your rights

Under the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time. To exercise these rights, email mouillotins@gmail.com or write to AMAC, 3 passage du Cormier, 53540 Saint-Poix, France. We will reply within one month.

If you believe your rights are not respected, you can file a complaint with the CNIL, the French data protection authority (cnil.fr).

Updates

This policy may change. Only the online version is authoritative.