PERSONAL DATA
Privacy policy
What Kalyneo collects, why, on what legal basis, for how long, who it is shared with, and how to exercise your rights.
Last updated: 4 September 2026
This translation is provided for your convenience. These documents are governed by French law and, in the event of any discrepancy, only the French version is authoritative.
Data controller
The controller for the data collected on kalyneo.com is Julien Rozelier, whose full details appear in the legal notice.
For any question about your data, the contact address is no-reply@kalyneo.com.
Processing and legal bases
Kalyneo requires no sign-up to be browsed. The processing operations below are the only ones carried out; each has a defined purpose, a legal basis and a retention period.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Providing the site and keeping it secure | Technical logs: IP address, user agent, page requested, date and time | Legitimate interest: keeping the service available and preventing abuse | Six months, without prejudice to statutory retention duties |
| Remembering your display preferences | Language, market browsed, light or dark theme, session identifier | Legitimate interest: the site does not work without those choices | For the session, or for as long as your browser keeps its local storage |
| Keeping your watchlist without an account | Identifiers of the products followed, tied to your session | Legitimate interest: carrying out a function you triggered | For the session, until it is attached to an account if ever |
| Account and price alerts | Email address, hash of the one-time sign-in code, products followed, alert thresholds | Performance of the service you request, and consent for sending alerts | Until the account is deleted, or three years without a sign-in |
| Measuring departures towards merchants | Offer and merchant concerned, page of origin, user agent, session identifier, irreversible hash of the IP address | Legitimate interest: measuring use of the service and reconciling the commissions reported by partner programmes | Twenty-five months |
| Audience measurement | Pages viewed, referrer, device type, in aggregate form | Consent | Thirteen months for the trackers, twenty-five months for the statistics |
| Replying to your message | Email address and content of your message | Legitimate interest: handling the request you send us | Three years after the last exchange |
Two points that matter. First, your IP address is not kept in the clear when departures towards merchants are measured: it is replaced at the moment of recording by an irreversible cryptographic hash, which allows counting without allowing you to be traced. Second, access to your account rests on no password at all: it uses a one-time code, sent by email, kept as a hash, valid for ten minutes and limited to three attempts. There is therefore no password to protect, neither at your end nor at ours.
Kalyneo carries out no advertising profiling, takes no automated decision producing legal effects concerning you, and neither sells nor rents your data.
Where the data comes from
All the personal data processed comes from you: from your browsing, or from the information you enter of your own accord. Kalyneo buys no lists and enriches your data with no third party.
Data about products, prices and buyer ratings comes from merchants and affiliate programmes; it is not personal data about you.
Recipients and processors
Your data is accessible only to the people who run the site, and to the technical providers listed below, who act on our instructions and on our behalf.
| Provider | Role | Location |
|---|---|---|
| HOSTINGER, UAB | Hosting of the site and the database | Švitrigailos str. 34, LT-03230 Vilnius, Lituanie |
The merchants you click through to receive no personal data from us: the link carries nothing but a publisher identifier, which designates Kalyneo and not you. What the merchant then collects, on its own site, is a matter for its privacy policy. The mechanism is described in the cookie policy.
Lastly, your data may be disclosed to an administrative or judicial authority where a legal provision requires it.
Transfers outside the European Union
Kalyneo itself transfers no personal data outside the European Union. Should one of the providers listed above come to process data outside the Union, the transfer would be covered by the European Commission’s standard contractual clauses or by an adequacy decision, and this page would say so explicitly.
When you follow a link to a merchant established outside the Union, however, the processing carried out by that merchant, including the tracker it places in your browser, is its own responsibility and follows its own policy. Whether to follow that link is up to you.
Security
Exchanges with the site are encrypted in transit. Access to the administration interface is restricted to editorial staff accounts, on a domain separate from the public site, with separate sessions. Sign-in codes for visitor accounts are kept as hashes, never in the clear, and expire after ten minutes.
No measure makes a system impregnable. In the event of a data breach likely to result in a high risk to your rights, you would be informed under the conditions laid down in article 34 of the General Data Protection Regulation.
Your rights
The General Data Protection Regulation grants you, over the data concerning you:
- a right of access: to obtain confirmation that it is being processed, and a copy of that data;
- a right to rectification: to have inaccurate data corrected or incomplete data completed;
- a right to erasure: to have it deleted, within the limits of our statutory retention duties;
- a right to restriction: to freeze its use while a check is carried out;
- a right to object: to object, on grounds relating to your particular situation, to processing based on our legitimate interest;
- a right to portability: to receive, in a structured and machine-readable format, the data you provided to us;
- the right to withdraw your consent at any time, where processing rests on it, without calling into question what was done beforehand;
- the right to lay down instructions about what becomes of your data after your death.
Every price-alert email also carries an immediate unsubscribe link, which asks for neither a sign-in nor a reason.
Exercising your rights
Write to no-reply@kalyneo.com stating the right you wish to exercise. We reply within one month of receiving the request, a period that may be extended by two months if the request is complex, in which case you are told within the first month.
If reasonable doubt remains about your identity, we may ask for something further to verify it. That item is used for that check alone, then deleted.
Complaining to the CNIL
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at https://www.cnil.fr.
If you live in another Member State of the European Union, you may also apply to the data protection authority of your country of residence.
Minors
The site is aimed at an adult audience. Creating an account and subscribing to a price alert are not intended for people under fifteen. If you find that an account has been created by a child under fifteen without the consent of the holder of parental authority, report it to the address above: the account and the associated data will be deleted.
Changes to this policy
This policy changes as the service changes: introducing a new measurement tool, a new partner programme or a new feature calls for it to be updated. The date at the top of the page indicates the latest version. No new processing that rests on your consent is carried out before you have given it.