Legal Notice
Who publishes this site, and what we do with your data.
What’s up EU is published from France. What follows is required by article 6 of the French law of 21 June 2004 on confidence in the digital economy, by Regulation (EU) 2016/679, and by French law no. 78-17 of 6 January 1978 as amended.
Publisher
- Company
- Studio WUEU, a French simplified joint-stock company (SAS)
- Share capital
- 1,000 euros
- Registered office
- 40 avenue Junot, 75018 Paris, France
- Trade register
- Paris 903 690 006
- SIRET
- 903 690 006 00015
- VAT number
- FR55903690006
- contact@whatsupeu.co
Publication director
Thomas Veldkamp, within the meaning of article 93-2 of the French law of 29 July 1982.
Hosting
This site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, États-Unis. Telephone: +1 559 288 7060.
The editorial database is hosted by Supabase in the European Union (Frankfurt region). It holds the published editions and the editorial team’s accounts — no reader data.
Intellectual property
The briefings, editorial texts and graphic elements on this site are the property of their authors and of the publisher. Short quotations are welcome, provided the source is named and linked. Any fuller reproduction, translation or republication requires prior permission — write to us and we will usually say yes.
Personal data
Processing of your data is governed by Regulation (EU) 2016/679 (GDPR) and by French law no. 78-17 of 6 January 1978 as amended. The controller is Studio WUEU, at the address above. The company has appointed no data protection officer, so requests come straight to us, at contact@whatsupeu.co.
Subscribing in French
Purpose — sending you the French edition. Data — the address you type in the form, and the delivery and reading statistics the platform records: opens, clicks, whether a message bounced. Processor — Kessel, a French newsletter platform operated by Marching Band Media, a simplified joint-stock company at 83 rue de Monceau, 75008 Paris.
Legal basis — your consent, article 6(1)(a) GDPR, which you may withdraw at any time without giving a reason. Retention — for as long as you are subscribed; Kessel’s own policy then sets three years from the last contact.
Subscribing in English
Purpose — sending you the English edition. The form on the English pages is served by Substack itself, inside a frame: the address you type there goes directly to Substack Inc., 548 Market Street PMB 72296, San Francisco, CA 94104, United States, which processes it on our behalf and records the same reading statistics. Legal basis — your consent, article 6(1)(a) GDPR. Retention — for as long as you are subscribed.
This means your data leaves the European Union. Substack states that it adheres to the EU-U.S. Data Privacy Framework, the adequacy decision of 10 July 2023 on which the transfer rests, under articles 44 and 45 GDPR. Kessel, for its part, relies on the Commission’s standard contractual clauses where it uses a provider outside the Union.
Writing to us, and server logs
Purpose — answering you, and keeping the site up and secure. Data — what you put in your message; and, in our host’s technical logs, IP addresses and request details. Legal basis — our legitimate interest, article 6(1)(f) GDPR: replying to someone who wrote to us, and defending the site against abuse. Retention — as long as it takes to deal with the message; a few weeks for the logs, on our host’s rolling schedule.
What we do not do
We do not sell, rent or trade reader data, and we pass none of it to advertisers. We take no decision about you by automated means, and we build no profile of you for advertising — article 22 GDPR does not come into play here.
Your rights
Every edition carries a one-click unsubscribe link, and unsubscribing takes you off the list. Beyond that you have the rights of access, rectification, erasure, restriction, portability and objection, articles 15 to 21 GDPR; the right to withdraw your consent at any time, article 7(3); and the right to give directives on what becomes of your data after your death, article 85 of the law of 6 January 1978. Write to contact@whatsupeu.co. If you think we have handled your data badly, you may complain to the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr — article 77 GDPR.
Cookies
Trackers fall under article 82 of the law of 6 January 1978. This site sets none for analytics or advertising: we do not measure our audience and we do not track readers across the web. You are asked for no consent because there is nothing to ask about.
Two exceptions. The subscription form on the English pages is a frame served by Substack, which may set its own cookies — those fall under Substack’s privacy policy. And a session cookie is used in the editorial back office, to keep the editors signed in.
Right of reply
Anyone named or identified in something we publish has a right of reply, under article 6-IV of the law of 21 June 2004 and decree 2007-1527 of 24 October 2007. It must be exercised within three months of publication, by writing to contact@whatsupeu.co or to the registered office above.
Corrections
We get things wrong sometimes. If you spot an error, or content you believe should not be there, tell us at contact@whatsupeu.co.