Last updated: 24 May 2026
This page explains what personal data is collected on Kilomètre-0, why it is collected, how long it is kept, and how you can exercise your rights over that data. It complements the site’s legal notice.
Kilomètre-0 is a culinary publication produced by the Kilomètre-0 association, a non-profit association governed by the French law of 1 July 1901 and run on a non-profit basis. The association’s income (donations, advertising displayed via Google AdSense, and any editorial partnerships) is allocated in full to funding its activities. The amount of data collected is deliberately kept to what is necessary for the site to function and for the association to pursue its purpose.
1. Who is responsible for processing your data?
The data controller is the Kilomètre-0 association, an association under the French 1901 law, whose registered office is at 13 chemin de la fontaine bleue, 44850 Le Cellier, France.
The association is represented by its Management Board, made up of three co-presidents. Within the Board, responsibilities are divided as follows:
- Karl Pineau is in charge of technical and administrative management, which includes the operational implementation of this policy and the handling of requests to exercise rights.
- Martine Pineau is in charge of editorial management and acts as the site’s publication director.
- Lionel Pineau is in charge of artistic and photographic direction.
Contact for any question regarding your data: contact@kilometre-0.fr
The association is not required to appoint a Data Protection Officer (DPO).
2. What data is collected, and why?
You can browse part of Kilomètre-0 without providing any personal data. Some site features, as well as advertising, do however require limited data collection, detailed below.
2.1 When you leave a comment under a recipe or an article
| Data | Why | Legal basis |
|---|---|---|
| Pseudonym or name | To publicly sign your comment | Consent (field filled in voluntarily) |
| Email address | To moderate, to reply to you, and — if you tick the box — to notify you of replies | Consent |
| Comment content | For publication | Consent |
| IP address | Stored by WordPress, used only in the event of abuse (mass spam, unlawful content) | The association’s legitimate interest (site security) |
Your email address is never displayed publicly. It is passed to the Gravatar service (see section 4), which may display an avatar linked to your email if you have created one. If you do not have a Gravatar account, no avatar is retrieved.
2.2 When you use the contact form
The name, email address, subject and message fields are sent by email to the association and kept in the corresponding inbox. This data is not used for any purpose other than replying to you.
Legal basis: consent (you fill in the form voluntarily).
2.3 When you sign up to the newsletter
Signing up to the seasonal letter collects only your email address. A confirmation email is sent to you to validate your subscription (double opt-in).
Contact management is handled in-house by the association, in a database hosted by OVH (France), and emails will be sent via Scaleway Transactional Email (Scaleway SAS, France). No subscriber data is transferred outside the European Union.
Legal basis: consent, collected explicitly at the time of sign-up.
You can unsubscribe at any time via the link at the bottom of each newsletter, or by writing to contact@kilometre-0.fr.
2.4 When you simply browse the site
Traffic statistics are measured with Matomo, hosted in France, in a cookieless configuration and with anonymisation of the IP address (the last two octets are removed before any recording). This configuration complies with the consent exemption defined by the CNIL (the French data protection authority) for audience-measurement tools.
In practical terms, this means that:
- no audience-measurement cookie is placed on your device;
- no identifying data (full IP, persistent identifier) is kept;
- the data is never cross-referenced with other processing, nor passed to third parties for commercial purposes.
Legal basis: the association’s legitimate interest (understanding the publication’s audience in order to improve it, in line with its purpose).
2.5 When you view a page containing advertising
Kilomètre-0 displays ads provided by Google AdSense (Google Ireland Limited). These ads help to fund the site’s technical costs (hosting, domain name, third-party services), in service of the association’s purpose.
When you load a page containing ads, and only if you have consented via the banner shown on your first visit, Google may collect:
- cookies and technical identifiers used to measure ad delivery, combat fraud and limit the number of times the same ad is shown to you;
- depending on the choices you make in the consent banner, data used to personalise the ads displayed (inferred interests, browsing history across Google’s advertising network).
You can refuse personalised advertising while continuing to use the site: in that case, you will be shown non-personalised ads. You can also withdraw your consent at any time by clicking the « Manage my choices » link in the footer.
Legal basis: consent, collected via the cookie-management banner (Article 82 of the French Data Protection Act, the loi Informatique et Libertés).
To find out more about the processing Google carries out in this context, see Google’s privacy policy and the page How Google uses information from sites or apps that use its services.
3. How long is your data kept?
In line with the CNIL’s recommendations:
| Data | Retention period |
|---|---|
| Published comments (pseudonym, email, content) | For as long as the recipe or article remains published, unless you request deletion |
| IP address of comments | 12 months maximum, unless a moderation procedure is ongoing |
| Messages received via the contact form | 3 years from the last exchange |
| Newsletter subscriptions | Until you unsubscribe, or after 3 years of inactivity (no email opened) |
| Aggregated, anonymised Matomo statistics | 25 months maximum |
| Google AdSense advertising cookies | Periods set by Google, generally from 30 days to 13 months depending on the cookie |
Once these periods expire, the data is deleted or irreversibly anonymised.
4. Who has access to your data?
Your data is neither sold, rented, nor transferred to commercial partners for marketing purposes.
Within the association, your data is accessible to members of the Management Board in the course of their respective roles, and first and foremost to the co-president in charge of technical and administrative management.
Certain technical sub-processors handle data on the association’s behalf:
| Sub-processor | Role | Data location |
|---|---|---|
| OVH | Hosting of the site, the database and, eventually, the newsletter subscriber database | France (EU) |
| Matomo (self-hosted) | Audience measurement | France (EU) |
| Scaleway (Scaleway SAS) | Sending the newsletter (Transactional Email) | France (EU) |
| Gravatar (Automattic Inc.) | Displaying avatars on comments | United States |
| Google AdSense (Google Ireland Limited) | Delivering advertising | EU and United States |
Transfers outside the European Union
As at the date this page was updated, Gravatar and Google AdSense involve a transfer of data to the United States. These transfers are governed by the Data Privacy Framework between the European Union and the United States, which Automattic (Gravatar) and Google have signed up to, as well as by the European Commission’s standard contractual clauses.
If you do not want Google AdSense to process data about you, refuse the advertising cookies via the consent banner. If you do not want your email passed to Gravatar, leave your comment without entering an email address linked to a Gravatar account.
5. Cookies and trackers
Kilomètre-0 distinguishes between two categories of cookies.
Cookies exempt from consent (always placed)
| Cookie | Issuer | Purpose | Duration |
|---|---|---|---|
wordpress_*, wp-settings-* | WordPress | Identifying users logged in to the administration area | Session or 1 year |
comment_author_* | WordPress | Pre-filling your details if you comment again (only if you tick the dedicated box) | 1 year |
| Consent-preference cookie | Site | Remembering your choices regarding advertising cookies | 6 months |
Matomo works without cookies (see 2.4).
Cookies subject to consent (placed only after acceptance)
| Cookie | Issuer | Purpose |
|---|---|---|
AdSense cookies (__gads, __gpi, IDE, etc.) | Ad delivery, measuring advertising performance, frequency capping, fraud prevention | |
| Advertising-personalisation cookies | Google and partners | Personalising ads based on your inferred interests |
You can change your choices at any time by clicking the « Manage my choices » link in the site footer, or delete cookies already placed via your browser settings.
6. What are your rights?
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), you have the following rights over your data:
- Right of access: obtain confirmation that data about you is being processed and receive a copy of it.
- Right to rectification: correct inaccurate or incomplete data.
- Right to erasure: request the deletion of your data (for example, removing a comment).
- Right to restriction: request the temporary suspension of processing.
- Right to object: object to processing based on legitimate interest.
- Right to portability: retrieve your data in a structured format.
- Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
How to exercise your rights
Write to contact@kilometre-0.fr or by post to the association’s registered office (13 chemin de la fontaine bleue, 44850 Le Cellier, France), stating the purpose of your request. You will receive a reply within a maximum of one month. Proof of identity may be requested in the event of reasonable doubt about your identity.
Lodging a complaint with the CNIL
If, after contacting us, you consider that your rights are not being respected, you can lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the French data protection authority:
- Online: www.cnil.fr/fr/plaintes
- By post: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
7. Security
The site is served exclusively over HTTPS. The database is hosted by OVH in France. Access to the WordPress administration is protected by strong authentication. No sensitive data (banking data, health data, data revealing origin, opinions or sex life) is collected or stored.
8. Legal changes and continuity of processing
The Kilomètre-0 site was published in a personal capacity by Martine Pineau from 2015 onwards. When the Kilomètre-0 association was formed in 2026, all pre-existing data processing (the comment database, the newsletter subscriber database, and the archive of messages received via the contact form) was transferred to the association, which thereby became the data controller.
This change brings no modification to the original purposes for which your data was collected, nor any reuse for new purposes. Your rights remain fully exercisable, under the same conditions, with the association.
9. Changes to this policy
This policy may change over time, in particular if a tool changes (for example, the planned migration from Mailchimp to Scaleway TEM), if the site’s features evolve, or if the association’s governance or the applicable regulations change. The date of the last update appears at the top of this page. Substantial changes will, where relevant, be announced in a future newsletter.
10. Contact
For any question regarding this policy:
Kilomètre-0 association 13 chemin de la fontaine bleue, 44850 Le Cellier contact@kilometre-0.fr