Civix Institute

Legal information

Legal notice, general terms of sale and privacy policy

This document constitutes the single contractual and informative framework of the Civix Institute service. It brings together the legal notices required by the French law of 21 June 2004 on confidence in the digital economy, the general terms of sale applicable to any order placed on the site, and the privacy policy describing the processing of personal data carried out by the publisher. It may be printed or saved by the user. This English text is a courtesy translation: the contract is governed by French law and, in the event of any discrepancy, the French version prevails. Version in force as at 19 August 2026.

Part I

Legal notice

Identification of the publisher, contact details, hosting, intellectual property rights and the exact nature of the service offered.

1. Publisher of the site

The site accessible at the address civix-institute.com, hereinafter “the Site”, is published by GANKOR, a limited liability company with a share capital of 100 euros, registered with the Nanterre trade and companies register under SIREN number 918 324 609, whose principal establishment bears SIRET number 918 324 609 00026, operating under activity code 62.02A relating to consultancy in computer systems and software.

The company’s registered office is established at 144 avenue du Général Leclerc, 92330 Sceaux, France. Its intra-Community value added tax identification number is FR15918324609.

“Civix Institute” and “Civix” are trading names used by GANKOR. Any reference, in this document, to “Civix Institute”, “Civix”, “the publisher”, “the seller”, “we” or “the service” designates the company GANKOR acting under those trading names. Any reference to “you”, “the user” or “the customer” designates the natural person who accesses the Site, answers the questionnaire on it or places an order on it.

The company is registered in France and carries on its activity from French territory. It is not backed by any group, neither holds nor is held by any political formation, association or organisation carrying on an activity of interest representation, and receives no funding from such entities.

2. Contact details and means of contact

The official channel of the service is the electronic address contact@civix-institute.com . This address receives any request for information prior to an order, any question relating to a report, an account or a subscription, any request to exercise the rights recognised by the regulations on personal data, as well as any complaint.

We acknowledge receipt of each request within 48 working hours. The processing time depends on the nature of the request: it is specified in article 26 for commercial complaints and in article 41 for the exercise of rights relating to personal data.

Postal correspondence may be addressed to the registered office mentioned in article 1. As the service is supplied exclusively online, no physical reception is provided at that address and no hand delivery is possible there.

We never send any request for bank details, passwords or security codes by electronic mail or by telephone. Any solicitation of this kind must be regarded as fraudulent and may be reported to us at the address given above.

3. Publication management

Publication of the Site is directed by GANKOR. The editorial content published in the Site’s review is established under the responsibility of the publisher, who assumes the editorial line defined in article 7.

4. Hosting and technical infrastructure

The Site is hosted by Vercel Inc., a company incorporated under United States law whose offices are located at 340 S Lemon Ave #4133, Walnut, CA 91789, United States, reachable through its site vercel.com.

Application data, which include in particular the answers to the questionnaire, the computed profiles and account information, are hosted by Supabase on infrastructure located within the European Union.

Payment operations and subscription management are handled by Stripe Payments Europe Limited, an authorised payment institution, whose involvement is described in article 19. The routing of transactional electronic mail is entrusted to Resend.

The role of each of these providers under the regulations on personal data, as well as the guarantees framing their involvement, are set out in articles 36 and 37.

5. Intellectual property

The Civix analytical model, the structure and wording of the questionnaire, the division into dimensions, the definition and naming of the profiles and of the families of thought, the texts of the report, the graphical representations, the illustrations, the elements of visual identity, the typographic charter and all the editorial content of the Site constitute works protected by intellectual property law and remain the exclusive property of GANKOR.

The database constituted by the questionnaire, its wording variants and the associated calculation rules is protected as such, both by copyright and by the database producer’s right provided for in articles L. 341-1 et seq. of the French Intellectual Property Code.

Any reproduction, representation, adaptation, translation, extraction, substantial or repeated re-utilisation, in whole or in part, by any process and on any medium whatsoever, is prohibited without the prior written authorisation of the publisher. Consulting the Site, placing an order and personal use of the report entail no transfer of intellectual property rights.

The report is delivered to the user for their strictly personal use. They may consult it, save it, print it and communicate it within a private setting. They may neither distribute it publicly, nor market it, nor incorporate it into a service offering, nor use it to reconstitute the analytical model.

Also prohibited are the automated extraction of the Site’s content, the making of copies of all or part of the questionnaire, as well as the use of the content for the purposes of training an automated system, save with prior written authorisation.

6. Trade marks and distinctive signs

The trading names, logos and distinctive signs appearing on the Site are the property of the publisher or are used with the agreement of their holders. No stipulation of this document confers any right of use over those signs.

The names of third-party companies cited in this document, notably those of the providers mentioned in article 4, are cited purely for information, with respect for the rights of their respective holders.

7. Nature of the service and scope of the results

Civix Institute offers profile analysis questionnaires — to date the political profile, the romantic profile and the emotional profile — as well as a personalised report drawn up from the answers provided. Each model situates those answers on six independent dimensions and attaches the user, by proximity, to one of the twelve profiles described by the questionnaire concerned, themselves grouped into four families.

The results are supplied for purposes of information, education and personal reflection. They in no case constitute voting advice, a recommendation for or against a party, a candidate, a list or an organisation, a certified scientific expert opinion, a psychological assessment, a diagnosis, or professional advice of any kind whatsoever.

The user acknowledges that the report describes declared positions at a given moment, that it predicts no behaviour, and that it cannot found any personal, family, professional, financial or electoral decision. The methodological limits of the arrangement are set out publicly in the Site’s review.

The editorial content published in the review describes mechanisms, notions and documented disagreements. It expresses no partisan support and recommends no position.

8. Accessibility, availability and developments of the Site

The Site is in principle accessible twenty-four hours a day and seven days a week, subject to interruptions scheduled for maintenance, technical updates, and events beyond our control, notably a failure of hosting, telecommunication or payment services.

Access to the Site presupposes that the user has a terminal connected to the internet and an up-to-date browser, the cost, operation and security of which remain their responsibility. Certain features require the activation of JavaScript and the acceptance of the strictly necessary cookies described in article 38.

We may develop the Site, its presentation, its content and its features at any time, in order to improve its quality or to take account of technical and regulatory constraints. Developments liable to affect an ongoing paid service are framed by articles 22 and 30.

9. Hypertext links and third-party content

The Site may contain links to external resources, cited for documentary purposes. We exercise no control over those resources, over their content, over their availability or over the practices of their publishers, and decline all liability in their regard.

The setting up of a link to the Site is free, provided that it does not mislead as to the origin of the content, does not infringe the publisher’s rights and does not associate the service with unlawful or defamatory content or content inciting hatred. We reserve the right to request the removal of any link not complying with those conditions.

10. Reporting a content item

Any person considering that a content item published on the Site infringes their rights may inform us at the address given in article 2. The report gains in effectiveness if it specifies the exact address of the page concerned, the nature of the alleged infringement, the elements of law or of fact relied upon and the contact details of its author.

Each report is examined. We take, where appropriate, the suitable measures, which may go as far as removal of the content, and inform its author of the action taken.

Part II

General terms of sale

Purpose, description of the service, price, payment, duration, termination, right of withdrawal, liability and settlement of disputes.

11. Definitions

For the purposes of this part, the following terms have the meaning indicated. “The Test” designates one of the profile analysis questionnaires accessible free of charge on the Site, to date the political profile, the romantic profile and the emotional profile. “The Preview” designates the partial and free rendering of the results. “The Report” designates the complete digital content delivered after payment, described in article 14.

“The Member Area” designates the personal area giving access to the Report, to the corrected quizzes and to the content added during the term of the subscription. “The Subscription” designates the open-ended, renewable contract described in articles 16 and 20. “The Introductory Period” designates the seven-day period following the initial payment.

“The Customer” designates the natural person placing an order for purposes falling outside the scope of a professional activity. “Working day” designates any day with the exception of Saturdays, Sundays and public holidays in metropolitan France.

12. Purpose and scope of application

This part governs the sale, by GANKOR to a consumer or to a non-professional, of access to the Report and of the Subscription to the Member Area, to the exclusion of any other document or condition, save written agreement to the contrary.

It is brought to the Customer’s attention before any order, in a permanent and accessible manner. Its acceptance is collected by a separate tick box, prior to payment, and conditions the placing of the order. That acceptance constitutes acknowledgement of having read it and of accepting it in its entirety.

The version applicable to an order is the one in force on the day of that order. A copy of the applicable version is retained by the publisher under the conditions provided for in article 32.

The service is intended for persons having the legal capacity to contract and residing in a country where it is lawfully accessible. It is supplied in French, in English and in Spanish; the French version of this document is the one that prevails.

13. Identity of the seller

The seller is the company GANKOR, whose corporate name, legal form, share capital, registration number, registered office, value added tax number and electronic contact address appear in articles 1 and 2 of this document, to which express reference is made.

14. Description of the services

The Test and the Preview are free of charge and involve no payment and no communication of bank details. No registration is required to access them.

The Report is digital content supplied without a material medium, delivered immediately after the payment has been collected. It includes the Customer’s positioning on the six dimensions of the model, the detailed analysis of each dimension, the graphical representation of their profile, their affinities with the four families of thought, the elements that distinguish their profile from the average of the profiles observed, as well as the editorial developments attached to those elements.

The Subscription gives access to the Member Area, to permanent consultation of the reports already obtained, to the corrected knowledge quizzes, and to the content, quizzes and tests added during its term. The composition of the Member Area evolves under the conditions provided for in article 22.

The services are supplied on a personal basis. They involve no obligation of result as regards the interpretation the Customer will make of their profile, and no service of individual support, advice or personalised assistance, save express mention to the contrary in a specific offer.

15. Customer account

An account is created automatically upon the first payment, from the electronic address communicated when the order was placed. The Customer receives an electronic mail enabling them to set their password and to access their Member Area from any terminal.

The Customer undertakes to communicate a valid electronic address and to keep it up to date, that address constituting the contractual means of communication between the parties, notably for sending the receipt, the information prior to renewal and the notifications provided for in articles 17 and 30.

Login credentials are personal and confidential. The Customer is responsible for keeping them and for any operation carried out from their account. They undertake to report to us without delay any unauthorised use of which they become aware, so that the necessary measures may be taken.

16. Ordering process

The order presupposes prior completion of the Test. The Customer then accesses a page summarising the service, its price and its terms. They tick the box accepting these terms, including the request for immediate performance referred to in article 21, then validate their payment with our provider.

The order is definitively formed upon acceptance of the payment by the provider. The Customer then receives, at the electronic address communicated, a receipt recalling the subject of the order, the amount paid, the terms of the Subscription, the date of the first forthcoming debit and the terms of termination.

We reserve the right to refuse or cancel an order in the event of legitimate suspicion of fraud, of a previous unpaid amount, of automated use of the service or of a characterised breach of these terms. The Customer is informed of this and any payment is refunded.

17. Price

Access to the Report is invoiced at 1.95 euros inclusive of all taxes, paid immediately when the order is placed. That payment opens the seven-day Introductory Period.

At the end of the Introductory Period, and unless termination has occurred before its expiry, the Subscription to the Member Area continues automatically at the price of 29.95 euros inclusive of all taxes per month, until terminated by either party under the conditions provided for in articles 20 and 24.

Prices are expressed in euros, inclusive of all taxes. They do not include any conversion charges, commissions or transaction fees levied by the Customer’s bank, which remain their responsibility. The applicable prices are those displayed on the Site on the day of the order.

Any change to the price of the Subscription is notified to the Customer by electronic mail at least thirty days before it takes effect, specifying the new amount and the effective date. The Customer remains free to terminate without charge before that date in accordance with article 20; failing that, continuing the Subscription constitutes acceptance of the new price.

18. Promotional offers

The reference price of the access service is that of the Subscription mentioned in article 17. Where a reduction is applied, the reference price indicated corresponds to a price actually charged by the publisher, in accordance with the provisions relating to the announcement of price reductions.

Promotional offers are reserved for new subscriptions, save mention to the contrary, cannot be combined with one another and cannot give rise to any retroactive refund. They may be limited in time or in number.

19. Payment and security of transactions

Payments are operated by our provider Stripe. Card details are entered in an environment supplied and secured by that provider; they do not pass through our servers, where they are at no time recorded. We have no knowledge of the card number, of its expiry date, or of its security code.

By validating their order, the Customer authorises the recurring debits corresponding to the Subscription, at successive due dates, until its termination. That authorisation may be revoked at any time by the termination provided for in article 20.

In the event of a failed debit, notably for insufficient funds or expiry of the means of payment, further attempts may be made by the provider according to an automated schedule. The Customer is informed of this by electronic mail and invited to update their means of payment. Failing regularisation, access to the Member Area may be suspended, and the Subscription then terminated.

Transactions are subject to the strong authentication arrangements provided for by the regulations applicable to payment services. We implement, together with our provider, fraud prevention measures liable to lead to the refusal of a transaction presenting a characterised risk.

20. Duration, renewal and termination

The Subscription is concluded for an indefinite duration. It is tacitly renewed for successive periods of one month, each period commenced being due in its entirety.

In accordance with articles L. 215-1 et seq. of the French Consumer Code, the Customer may terminate at any time, without charge, without penalty and without having to give a reason, from their Member Area, by means of a feature accessible online that is as simple to use as the subscription itself.

Termination takes effect at the end of the current period: no new debit is made and access remains open until that expiry. A confirmation is sent to the Customer by electronic mail, stating the effective date.

The publisher may terminate the Subscription with reasonable notice given by electronic mail, notably in the event of discontinuation of the service, the period already paid for then being refunded pro rata. It may terminate it without notice in the event of a serious breach by the Customer, notably in the event of fraudulent use, sharing of credentials, automated extraction of content or abusive disputing of payments.

21. Right of withdrawal

Report. In accordance with article L. 221-28 13° of the French Consumer Code, the right of withdrawal may not be exercised in respect of digital content supplied without a material medium whose performance has begun with the consumer’s prior express agreement and their acknowledgement of the loss of their right of withdrawal. By requesting immediate access to their Report and by accepting these terms before payment, the Customer gives that express agreement and acknowledges losing their fourteen-day right of withdrawal for the supply of that content, which is delivered to them immediately. The price of 1.95 euros is consequently non-refundable.

Subscription. The fourteen-day right of withdrawal provided for in article L. 221-18 of the French Consumer Code applies to the Subscription, running from its taking out. A Customer who exercises it within that period is refunded the sums paid in respect of the Subscription, less, in accordance with article L. 221-25 of the same code, the amount proportionate to the service already supplied up to the communication of their decision.

Procedure. The decision to withdraw may be notified by any unambiguous statement addressed to the electronic address given in article 2, without any particular form being required. The refund is made within a maximum period of fourteen days following receipt of the request, by the same means of payment as that used when the order was placed, save express agreement by the Customer to another means.

The exercise of the right of withdrawal in respect of the Subscription is distinct from the termination provided for in article 20, which remains open at any time, with no condition of period or of reason.

22. Information prior to renewal

An electronic mail is sent to the Customer before the end of the Introductory Period. It recalls the date and amount of the first debit of the Subscription, the frequency of the following debits, the possibility of terminating before that date and the exact path for doing so.

That information is sent to the electronic address communicated by the Customer when the order was placed. It is for the latter to ensure that this address is valid and that our mail is not filtered by their messaging provider.

23. Obligations and undertakings of the Customer

The Customer undertakes to provide accurate information when placing their order, to use the service in accordance with its purpose, with these terms and with the applicable laws, and not to impair the proper functioning of the Site.

Prohibited in particular are access to the service by a circumventing means, the attempt to bypass technical protection measures, the automated extraction of content, the sharing of credentials with third parties, the resale of access and the use of the service for the purpose of building a competing offering.

The account is strictly personal. We may suspend access in the event of manifestly shared, automated or fraudulent use, after informing the Customer where circumstances allow, and without prejudice to the termination provided for in article 20.

24. Availability and development of the services

We endeavour to ensure the continuous availability of the service and may interrupt it temporarily for maintenance or updating operations, limiting the resulting inconvenience as far as possible.

The content of the Member Area evolves: content may be added, modified, reorganised or withdrawn, without the substance of the service subscribed to being affected. The lasting withdrawal of an essential element of the service would give the Customer the right to terminate without charge and to obtain a pro rata refund for the current period.

25. Liability and legal guarantees

We are answerable for any lack of conformity of the digital content under the conditions provided for in articles L. 224-25-12 et seq. of the French Consumer Code. The Customer benefits from the applicable legal guarantees, which no stipulation hereof may restrict or set aside.

Our liability cannot be engaged by reason of the use the Customer makes of the results, nor of the decisions they might take on their basis, the service being of an informative and educational nature, as recalled in article 7.

Nor can it be engaged in the event of unavailability attributable to the internet network, to the Customer’s terminal or configuration, to a technical provider, or to an event of force majeure within the meaning of article 26.

In the event that our liability were established, compensation would be limited to the direct and foreseeable damage suffered by the Customer by reason of the service in question, without that limitation being able to apply in the event of personal injury, of gross or wilful misconduct, or in any case where the law sets it aside.

26. Force majeure

Neither party may be held liable for a breach of its obligations resulting from an event of force majeure within the meaning of article 1218 of the French Civil Code.

Performance of the obligations is suspended for the duration of the event. If it continues beyond thirty consecutive days, either party may bring the contract to an end by written notification, without indemnity, the sums corresponding to the services not supplied being refunded.

27. Invoicing and taxes

GANKOR is liable for value added tax under number FR15918324609. The prices displayed include the applicable tax at the rate in force.

An invoice is drawn up for each payment and made available to the Customer, accessible at any time from their Member Area. Any change in the statutory rate of taxation applies as of right to the instalments following its entry into force.

28. Personal data

The processing of personal data carried out on the occasion of the order and of the performance of the contract is described in part III of this document , which specifies the categories of data, the purposes pursued, the legal bases, the recipients, the retention periods and the arrangements for exercising rights.

29. Complaints

Any complaint is addressed in writing to the address given in article 2, specifying the subject of the request and, if possible, the reference of the order concerned. We acknowledge receipt within 48 working hours.

A reasoned reply is provided within a maximum period of one month. We favour in all cases the search for an amicable solution, including where the request exceeds our contractual obligations.

Failing an amicable settlement, the dispute may be brought before the competent court in accordance with the terms provided for in article 33.

30. Modification of the terms

We may modify these terms, notably to take account of developments in the service, in the regulations or in the practices of our providers.

Substantial modifications affecting an ongoing Subscription are notified to the Customer by electronic mail at least thirty days before they take effect. The Customer remains free to terminate without charge before that date; continuing the Subscription beyond it constitutes acceptance.

Orders already performed remain governed by the version of the terms applicable on the day they were placed.

31. Assignment and subcontracting

We may assign the contract, notably in the context of a restructuring, merger or business transfer operation, provided that such assignment entails no reduction in the Customer’s rights, of which they would be informed.

We may call upon providers for the performance of all or part of our obligations, while remaining liable for their involvement towards the Customer. The providers involved with personal data are identified in article 36.

32. Evidence and archiving

The computerised records kept in our systems and in those of our payment providers, as well as the electronic mail exchanged, constitute proof of orders, of payments, of the consents collected and of the communications between the parties.

The elements establishing the collection of the consent mentioned in article 34 and the acceptance of these terms are retained for the period necessary to prove the contract and to satisfy our legal obligations.

33. Partial nullity, forbearance, applicable law and disputes

If one of the stipulations of these terms were declared void or inapplicable, the other stipulations would retain their full force, and the stipulation concerned would be replaced by a clause of equivalent and lawful scope.

The fact of not immediately relying on a breach does not constitute a waiver of the right to rely on it subsequently.

These terms are governed by French law, without this being able to deprive a consumer residing in another Member State of the European Union of the protection afforded to them by the mandatory provisions of the law of their residence.

In the event of a dispute, the consumer may bring the matter, at their choice, before one of the courts having territorial jurisdiction under the French Code of Civil Procedure, or before the court of the place where they resided at the time the contract was concluded.

Part III

Privacy policy

Identity of the controller, data processed, legal basis for the processing of political opinions, recipients, transfers, retention periods, security and exercise of rights.

34. Controller and applicable framework

The controller is the company GANKOR, whose registered office is established at 144 avenue du Général Leclerc, 92330 Sceaux, France, registered under SIREN number 918 324 609.

The processing described below is subject to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, hereinafter “the Regulation”, as well as to French Law no. 78-17 of 6 January 1978 on data processing, data files and individual liberties.

Any question relating to this processing, as well as any request to exercise the rights described in article 41, is to be addressed to the electronic address given in article 2. The designation of a data protection officer is not mandatory in view of the nature and volume of the processing; the publisher directly assumes the corresponding obligations.

35. Data processed

Data communicated by the user: the answers to the Test, the optional indication relating to gender where it is provided, the electronic address supplied at payment, the password in encrypted and non-reversible form, as well as the content of exchanges with customer service.

Data produced by the service: the profile computed from the answers, the date the Test was taken, the status of the Subscription and the associated due dates, the technical identifiers making it possible to attach a report to an account, and the history of accesses to the content of the Member Area.

Payment data: these are collected and processed directly by Stripe as controller as regards the obligations incumbent upon it. We receive neither the card number, nor its expiry date, nor its security code, and never retain them. We retain only the technical identifiers making it possible to attach a payment to an account.

Technical data: the technical logs necessary for the security and proper functioning of the service, as well as, subject to the consent described in article 38, audience measurement and advertising performance data.

36. Political opinions and specific legal basis

The answers to the Test reflect political opinions. They fall on that account within the special categories of data mentioned in article 9 of the Regulation, the processing of which is in principle prohibited and is possible only on the basis of one of the exceptions it lists.

The exception relied upon is the explicit consent of the data subject, provided for in paragraph 2, point a, of that article. This consent is collected by a separate tick box, presented before the first question of the Test, the validation of which is necessary in order to continue.

This consent is freely given: the Test is not necessary for access to any other service, and refusing it entails no consequence. It is specific, informed and unambiguous, the purpose of the processing being stated at the moment it is collected. It may be withdrawn at any time, by a simple request addressed to the address given in article 2; that withdrawal entails the erasure of the answers and of the computed profile, without prejudice to the retention of accounting records mentioned in article 39.

These answers and this profile are never transmitted to advertisers, advertising networks, data brokers, political parties, candidates, trade union or voluntary organisations, or to any third party for advertising, targeting, prospecting, polling or research purposes. They are not used to build audience segments, nor to send personalised advertising.

The measurement tools mentioned in article 38 receive only technical events, such as the start of the Test, the viewing of a page or the amount of a purchase, to the exclusion of any answer, any score and any profile.

No decision producing legal effects concerning the user, and no decision significantly affecting them, is taken on the basis of automated processing of these data. The Report constitutes informative content personally intended for them.

37. Purposes and legal bases

Computing the profile and producing the Report: explicit consent within the meaning of article 9, paragraph 2, point a, of the Regulation, under the conditions detailed in article 36.

Giving access to the Report and to the Member Area, managing the account and the Subscription, sending the electronic mail necessary for the performance of the contract, including the receipt and the information prior to renewal: performance of the contract, within the meaning of article 6, paragraph 1, point b, of the Regulation.

Drawing up and retaining accounting and tax records, responding to a request from a competent authority: compliance with legal obligations, within the meaning of article 6, paragraph 1, point c.

Ensuring the security of the service, preventing and dealing with payment fraud, establishing and putting an end to abusive use: legitimate interest, within the meaning of article 6, paragraph 1, point f, balanced against the rights of the data subjects.

Measuring the Site’s audience and the effectiveness of advertising campaigns: consent, within the meaning of article 6, paragraph 1, point a, collected by the banner described in article 38 and revocable at any time.

38. Cookies, trackers and audience measurement

Cookies strictly necessary for the functioning of the service, notably those that maintain the authentication session and those that retain the record of the choice expressed as regards trackers, do not require prior consent.

Audience measurement and advertising performance trackers, notably those associated with Google Analytics, Google Ads and Meta, are placed only after collecting the user’s consent, expressed by means of the banner displayed on the first visit. In the absence of consent, the corresponding scripts are not loaded.

Refusal has no consequence on access to the service or on the quality of the services. The choice expressed may be changed at any time, and proof of that choice is retained for six months.

39. Retention periods

The answers to the Test and the computed profile are retained for the lifetime of the account, then deleted within a maximum period of three years from the last login. They are deleted without delay in the event of withdrawal of consent or of a request for erasure.

Billing data and accounting records are retained for ten years from the close of the financial year concerned, in accordance with legal obligations. Exchanges with customer service are retained for three years from the last contact. Technical security logs are retained for twelve months at most.

On expiry of these periods, the data are deleted or irreversibly anonymised, with no possibility of re-identification.

40. Recipients, processors and transfers

The data are neither sold, nor rented, nor exchanged. They are accessible to authorised persons within the publisher, within the limits of what their duties require, and to the following processors, who act on instruction and under a contract compliant with article 28 of the Regulation: Supabase, for hosting the database within the European Union; Stripe, for processing payments and managing subscriptions; Resend, for routing transactional electronic mail; Vercel, for hosting the Site.

The data may in addition be communicated, at their request and within the limits provided for by law, to the competent administrative or judicial authorities, as well as to our advisers in the context of exercising or defending a right.

Some of the providers mentioned above are established in the United States, as are the measurement tools referred to in article 38. The corresponding transfers are framed by the standard contractual clauses adopted by the European Commission and, where applicable, by those providers’ adherence to the data protection framework between the European Union and the United States. The data mentioned in article 36 are not the subject of any transfer for advertising purposes.

41. Rights of data subjects

Every data subject has a right of access to their data, of rectification, of erasure, of restriction of processing, of objection and of portability, as well as the right to withdraw at any time the consent given, without that withdrawal calling into question the lawfulness of the earlier processing.

They may also lay down directives relating to the fate of their data after their death, and designate a person responsible for carrying them out.

These rights are exercised at the address given in article 2. A reply is provided within one month of receipt of the request. That period may be extended by two months in the event of a complex request or of multiple requests, the data subject being informed of this within the initial period. Proof of identity may be requested in the event of reasonable doubt as to the identity of the applicant, and will be destroyed after verification.

42. Security and data breach

We implement the technical and organisational measures appropriate to the risks: encryption of exchanges by secure protocol, partitioning of access to the database, restriction of access to authorised and authenticated persons only, storage of passwords in encrypted non-reversible form, logging of administrative access, and selection of providers offering guarantees compliant with the Regulation.

In the event of a personal data breach, we analyse it and, where it is liable to give rise to a risk to the rights and freedoms of individuals, notify it to the French data protection authority within the periods provided for by the Regulation. Where the risk is high, the data subjects are also informed individually.

43. Complaint to the supervisory authority

Any person considering, after having contacted us, that their rights are not respected may lodge a complaint with the Commission nationale de l’informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or from its site www.cnil.fr.

A data subject residing in another Member State of the European Union may also, in accordance with article 77 of the Regulation, lodge their complaint with the supervisory authority of the Member State of their habitual residence or of their place of work.

44. Updating of this policy

This policy may be updated in order to take account of developments in the service, in the providers we call upon or in the applicable regulations. The date of the version in force appears at the head of this document.

Any substantial modification of the processing based on consent is the subject of prior information and, where necessary, of a fresh collection of consent.

Version in force as at 19 August 2026. Requests concerning this document are to be addressed to the contact address given in article 2. Back to the home page

See the tests →