Privacy policy

The controller of the personal data collected through gargantuart.com (hereinafter “the Site”) is INTERNET ART SOLUTIONS, a French SARL with a share capital of EUR 1,500, registered with the Paris Trade and Companies Register under number 539 998 328, whose registered office is at 3 rue Bonaparte, 75006 Paris, France.

For any question relating to your personal data, you can write to contact@gargantuart.com.

We process your personal data for the following purposes, on the legal bases indicated:

• User account (email address, display name, preferences): creation and management of your account, access to your personal library. Legal basis: performance of the contract; the creation of the account itself is based on your consent.
• Payments (order and billing data, processed by our provider Stripe): processing of one-off purchases and subscriptions. Legal basis: performance of the contract.
• Transactional emails (sign-up confirmation, password reset, purchase confirmations): proper operation of the service. Legal basis: performance of the contract.
• Email marketing: information about new content and offers. Legal basis: legitimate interest, with a right to object exercisable at any time (an unsubscribe link is included in every email), or consent where you voluntarily join a waiting list.
• Email engagement measurement: our emails contain a measurement pixel (an invisible one-pixel image) telling us whether the message has been opened, so that we can gauge interest in our mailings and limit follow-ups. Blocking image display in your mail client neutralises this measurement. Clicks on links are counted through a redirect hosted on our own infrastructure, with no third-party tracker. Legal basis: legitimate interest, with a right to object exercisable through the unsubscribe link included in every email.
• Email capture on the landing page (“be notified at launch”): notifying you when the service opens. Legal basis: consent.
• Technical and anti-abuse logs (IP addresses, access logs, rate-limiting measures): security of the Site, prevention of fraud and bulk content extraction. Legal basis: legitimate interest.
• Audience measurement: anonymous traffic statistics (page views, referring page, device type, country), used to understand how the Site is used and to improve it. The tool is hosted on our own infrastructure, sets no cookie, does not track visitors across sites and only produces aggregate statistics. Legal basis: legitimate interest.
• Social networks: GargantuArt runs a Facebook page and an Instagram account. When you visit, follow or react to them, your data is processed by Meta Platforms Ireland Limited under its own privacy policy; we only receive aggregate statistics (reach and interactions of posts), for which Meta and the publisher are joint controllers under Meta’s Insights Controller Addendum. The Site itself embeds no Meta tracker. Legal basis: legitimate interest (promoting the service).

Your data is intended for the publisher’s authorised internal services. It is processed by the following processors, strictly to the extent necessary for their tasks:

• Amazon Web Services (AWS EMEA SARL, Luxembourg): hosting of the Site and its data (Europe region, Paris, eu-west-3), email delivery via Amazon SES and relaying of sending events (delivery, bounce, complaint, open) via Amazon SNS.
• Stripe: secure payment processing. We never have access to your card numbers.
• Google: only if you choose to sign in with Google (OAuth). This sign-in method is optional.

No personal data is sold or rented to third parties.

• Account data: kept for as long as you use the service, then deleted when the account is deleted.
• Marketing contacts: kept for 3 years after the last contact or your last interaction, then automatically purged.
• Anti-abuse access logs: kept for 12 months.
• Audience measurement data: kept for 13 months, then automatically purged.
• Billing data: kept in accordance with statutory accounting obligations (10 years).

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the rights of access, rectification, erasure, objection, restriction of processing and portability of your data.

You can exercise these rights by writing to contact@gargantuart.com, or directly from your account page: self-service account deletion is available there.

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

The Site’s data is hosted within the European Union (AWS Paris region). The use of Stripe, Google and, for the Facebook page and the Instagram account, Meta may however involve data transfers to the United States. These transfers are governed by the EU-US Data Privacy Framework and/or standard contractual clauses adopted by the European Commission.

The use of cookies and trackers on the Site is described in the cookie policy.

This policy may be updated to reflect changes in the service or in regulations. The date of the last update is shown at the top of the page. In the event of a substantial change, users with an account will be informed.