This Privacy Policy explains how your personal data is processed when you visit this website. It is drafted in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation — GDPR) and the French Data Protection Act (Loi Informatique et Libertés as amended).
As the data controller is based in France, French data protection law applies in addition to the GDPR. Visitors residing in the United Kingdom benefit from equivalent protections under the UK GDPR and the Data Protection Act 2018.
The entity responsible for processing personal data on this website is:
Éliette Abécassis
c/o Éditions Grasset & Fasquelle
61, rue des Saints-Pères
75006 Paris
France
Email: contact@elietteabecassis.com
As no condition of Article 37 GDPR applies, no Data Protection Officer has been appointed.
We process the personal data of our users only to the extent necessary to provide a functional website and our editorial content.
The processing of personal data takes place only with the user's consent, or in cases where prior consent cannot be obtained for factual reasons and the processing is authorised by law.
Where we obtain consent from the data subject for processing operations, Article 6(1)(a) GDPR serves as the legal basis.
Where processing is necessary for the performance of a contract to which the data subject is party, or for taking pre-contractual measures, Article 6(1)(b) GDPR serves as the legal basis.
Where processing is necessary to safeguard a legitimate interest of ours or of a third party, and provided that the interests, fundamental rights and freedoms of the data subject do not override that interest, Article 6(1)(f) GDPR serves as the legal basis.
When using this website, the following personal data may be collected:
Navigation data:
When you access the website, our hosting provider automatically logs technical information in server log files: IP address, date and time of access, page accessed, referrer URL, browser used and operating system.
Data from the contact form:
If you use the contact form, you provide us with your name, email address and the content of your message.
Data from subscription to The Letter:
If you subscribe to The Letter, the newsletter from Éliette Abécassis, you provide us with your email address and the date of your subscription.
Anonymous visit statistics:
Our hosting provider Vercel collects anonymous visit statistics (Vercel Web Analytics) without setting cookies or creating personal identifiers.
Personal data is processed for the following purposes:
— Providing and securing the website
— Responding to enquiries submitted through the contact form
— Sending The Letter to subscribed readers
— Improving the website through anonymous visit statistics
— Complying with legal obligations
— Navigation data and server log files: legitimate interest in providing a secure and functional website (Article 6(1)(f) GDPR).
— Contact form: consent given by submitting the form (Article 6(1)(a) GDPR) and legitimate interest in responding to your enquiry (Article 6(1)(f) GDPR).
— Subscription to The Letter: explicit consent from the data subject (Article 6(1)(a) GDPR), which may be withdrawn at any time.
— Anonymous visit statistics: legitimate interest in improving our offering (Article 6(1)(f) GDPR).
To operate this website, we use the following data processors within the meaning of Article 28 GDPR:
Website hosting:
Vercel Inc.
340 S Lemon Ave #4133
Walnut, CA 91789
United States of America
https://vercel.com
Content Management System (CMS) and storage of The Letter subscriptions:
Sanity AS
Bryggegata 9
0250 Oslo
Norway (within the European Economic Area)
https://www.sanity.io
Sending of emails (contact form and The Letter):
Resend Inc.
2261 Market Street #5039
San Francisco, CA 94114
United States of America
https://resend.com
Embedded YouTube videos in enhanced privacy mode:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
Certain data processors (Vercel, Resend) process data in the United States of America. These transfers take place on the basis of the EU-US Data Privacy Framework, to which these companies have certified. Vercel Inc. and Resend Inc. are certified under the Data Privacy Framework and are therefore committed to upholding European data protection standards.
Sanity AS processes data within the European Economic Area (Norway) and is fully subject to the GDPR.
Data is retained only for as long as necessary to fulfil the relevant purposes:
— Server log files (Vercel): a maximum of 30 days
— Messages from the contact form: three years from the last contact
— The Letter subscriptions: until the data subject unsubscribes
— Anonymous visit statistics: 13 months
This website does not set any cookies for tracking, analytics or advertising purposes. No cookie banner is displayed, as no consent-requiring cookies are used.
Vercel Web Analytics operates without cookies and without creating personal identifiers, in accordance with Article 82 of the French Data Protection Act.
Embedded YouTube videos are loaded through the youtube-nocookie.com domain, which uses only the technical information strictly necessary and does not set cookies before the video is actively played.
The fonts used on this website (Cormorant Garamond and Inter) are served entirely from the website's own server. No data is transmitted to external providers such as Google Fonts. This aligns with the recommendations of European data protection authorities regarding the local hosting of typography.
When you subscribe to The Letter, your email address and the date of your subscription are stored in the Sanity CMS. Emails are sent through the service provider Resend.
The legal basis is your explicit consent in accordance with Article 6(1)(a) GDPR, given when you tick the appropriate box during subscription.
You may unsubscribe at any time, either:
— through the dedicated unsubscription page (https://elietteabecassis.com/en/unsubscribe), which sends you a secure, individual unsubscription link by email
— or by sending an informal message to contact@elietteabecassis.com
After unsubscription, your email address is marked as inactive and you will no longer receive any communications. Your data will not be processed for other purposes.
You have the following rights regarding the personal data we hold about you:
— Right of access (Article 15 GDPR)
— Right to rectification (Article 16 GDPR)
— Right to erasure (Article 17 GDPR)
— Right to restriction of processing (Article 18 GDPR)
— Right to data portability (Article 20 GDPR)
— Right to object to processing (Article 21 GDPR)
— Right to withdraw consent (Article 7(3) GDPR)
To exercise these rights, an informal message by email is sufficient: contact@elietteabecassis.com
We will respond to your request within one month of receipt, in accordance with Article 12 GDPR.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR (Article 77 GDPR).
As the data controller is based in France, the competent supervisory authority is:
Commission nationale de l'informatique et des libertés (CNIL)
3 Place de Fontenoy — TSA 80715
75334 PARIS CEDEX 07
France
https://www.cnil.fr
Visitors residing in the United Kingdom may also lodge a complaint with their local data protection authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
United Kingdom
https://ico.org.uk
We use the widely adopted SSL/TLS protocol throughout your visit to the website, combined with the highest level of encryption supported by your browser.
This Privacy Policy may be amended at any time to reflect changes in legislation or in our services. The current version of this Privacy Policy is always available on this website.
Last updated: May 2026