Privacy policy
Last updated: 30 September 2026
This page explains what personal data the barn-records.fr website collects, why, for how long, who can access it, and how to exercise your rights.
1. Data controller
Barn Records, a simplified joint-stock company with a sole shareholder (SASU) with a share capital of €100, registered with the Évry Trade and Companies Register under number 982 485 260, whose registered office is at 24 rue de la Sablonnière, 91410 Les Granges-le-Roi, France.
For any question about your data: alex@barn-records.fr or 06 59 32 16 14.
2. Contact form
When you write to us through the contact page, we collect your name, your email address, your phone number (optional), the subject and your message.
- Purpose: to answer your request (quote, booking, information) and follow it up.
- Legal basis: steps taken at your request before a contract (Article 6(1)(b) GDPR) and our legitimate interest in following up our exchanges (Article 6(1)(f) GDPR).
- Recipients: Barn Records only. Your request is stored in our management software (Odoo), which runs on our server hosted by Scaleway in the Netherlands (EU); our email is hosted by OVHcloud. These providers act as technical subcontractors only.
- Business email addresses: if you use a company email address (not a consumer webmail), the domain name of that address (the part after the “@”) may be sent to the Odoo SA enrichment service (Belgium) to add public information about your company to your request.
- Retention: up to 3 years after our last exchange. If you become a customer, the data needed for invoicing is kept for 10 years, as required by accounting law.
3. Visit records kept by the website software
Odoo, the software that runs this website, keeps a “visitor” record listing the pages viewed and when, together with the language, the country (derived from your IP address) and the time zone of your browser. This record is linked to a technical identifier computed from your IP address, your browser and your session; your full IP address is not stored in it.
Only Barn Records has access to it. Visitor records are deleted automatically after 60 days without a visit, unless you have sent us a request through the contact form: the record is then attached to your request and kept with it (see section 2). Legal basis: our legitimate interest in running the site and following up requests (Article 6(1)(f) GDPR).
Like any web server, our server also records technical request logs (IP address, date, page requested, browser) for security and troubleshooting purposes.
4. Audience measurement (Matomo)
We measure the audience of this website with Matomo, an open-source analytics tool installed on a server administered by our team (analytics.okokumo.com) and hosted by Scaleway in Warsaw (Poland), European Union. The data is not sold, not used for advertising and not shared with anyone, except the server’s hosting provider acting as a technical subcontractor.
- this tool places no cookie on your device;
- your IP address is truncated before anything is stored: its last two bytes are removed (for example 82.67.0.0) and your full address is never kept;
- to group the pages you view into one visit, Matomo computes a short-lived technical fingerprint from this truncated IP address and characteristics of your browser. This fingerprint is a pseudonymous identifier: it does not contain your name, but it is still personal data;
- this fingerprint is not shared with the other websites measured on the same server: your browsing is not tracked from one site to another;
- your browser’s “Do Not Track” setting is honoured: when it is on, no visit is recorded;
- the pages about the Beat Master app (addresses starting with /beatmaster) are not measured.
Data recorded for each visit: pages viewed, date, local time and duration of the visit, the referring website (the site that brought you here), outbound links and downloads clicked, browser and version, operating system, device type (computer, phone, tablet) and, when detectable, its brand and model, screen resolution, browser language, and approximate country and city derived from the truncated IP address.
Retention: visit data is kept for 760 days (about 25 months), then deleted automatically.
Legal basis: this measurement is used only to produce aggregated traffic statistics for our own use. It is configured to fall within the consent exemption for audience measurement defined by the CNIL (Article 82 of the French Data Protection Act, “loi Informatique et Libertés”) and relies on our legitimate interest in understanding how our site is used (Article 6(1)(f) GDPR).
Opting out: you can object to this measurement at any time with the box below. To remember your choice, Matomo then stores a single cookie on your device, named mtm_consent_removed, which only contains the date of your choice and is used for nothing else. Matomo gives it a very long validity, which your browser may shorten. If you delete your cookies or change browser or device, you will need to opt out again.
5. Cookies and local storage
This inventory was measured in a browser on the pages of the site. All of these items are needed for the site to work; none is used for advertising, social networks or audience measurement.
- session_id (cookie): Odoo technical session, used for form security and for the site to work. Duration: 7 days.
- frontend_lang (cookie): remembers the display language you chose (French or English). Duration: 1 year.
- tz (cookie): your browser’s time zone, used to show dates at the right time. Duration: deleted when you close your browser.
- EXPIRABLE_STORAGE_im_livechat_history (local storage in your browser): list of the pages viewed during your visit, used only by Odoo’s live chat module; it is sent to no one unless you open a chat. Duration: 24 hours.
- presence.focus and presence.lastPresence (local storage in your browser): technical indicators telling Odoo whether the tab is active and when you last interacted with the page (a timestamp), used by the live chat module. They contain no other information.
- mtm_consent_removed (cookie): only if you opt out of audience measurement (see section 4).
6. Third-party content loaded by the site
To display the fonts, your browser downloads files from Google Fonts (fonts.googleapis.com and fonts.gstatic.com, Google, United States). Some photos come from the Unsplash image library: when they are displayed, your browser reports the view to Unsplash (views.unsplash.com). These requests send your IP address and technical information about your browser to these companies; they place no cookie through this site.
The Instagram and Facebook icons are plain links: nothing from these networks is loaded until you click them.
7. Your rights
Under the GDPR and the French Data Protection Act, you have the right to access, rectify and erase your data, to object to its processing, to restrict its processing and, for the data you gave us, to data portability.
To exercise them, write to alex@barn-records.fr or by post to Barn Records, 24 rue de la Sablonnière, 91410 Les Granges-le-Roi, France. We answer within one month. For audience measurement, you can also use the opt-out box in section 4.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – www.cnil.fr.
8. Changes
We will update this page if our practices change; the date at the top of the page shows the latest version. See also our legal notice.