Privacy policy

The controller of the personal data collected through gargantuart.com (hereinafter “the Site”) is INTERNET ART SOLUTIONS, a French SARL with a share capital of EUR 1,500, registered with the Paris Trade and Companies Register under number 539 998 328, whose registered office is at 3 rue Bonaparte, 75006 Paris, France.

For any question relating to your personal data, you can write to privacy@gargantuart.com.

We process your personal data for the following purposes, on the legal bases indicated:

• User account (email address, display name, preferences): creation and management of your account, access to your personal library. Legal basis: performance of the contract; the creation of the account itself is based on your consent.
• Payments (order and billing data, processed by our provider Stripe): processing of one-off purchases and subscriptions. Legal basis: performance of the contract.
• Transactional emails (sign-up confirmation, password reset, purchase confirmations): proper operation of the service. Legal basis: performance of the contract.
• Email marketing: information about new content and offers. Legal basis: legitimate interest, with a right to object exercisable at any time (an unsubscribe link is included in every email), or consent where you voluntarily join a waiting list.
• Email capture on the landing page (“be notified at launch”): notifying you when the service opens. Legal basis: consent.
• Technical and anti-abuse logs (IP addresses, access logs, rate-limiting measures): security of the Site, prevention of fraud and bulk content extraction. Legal basis: legitimate interest.

Your data is intended for the publisher’s authorised internal services. It is processed by the following processors, strictly to the extent necessary for their tasks:

• Amazon Web Services (AWS EMEA SARL, Luxembourg): hosting of the Site and its data (Europe region, Paris, eu-west-3) and email delivery via Amazon SES.
• Stripe: secure payment processing. We never have access to your card numbers.
• Google: only if you choose to sign in with Google (OAuth). This sign-in method is optional.

No personal data is sold or rented to third parties.

• Account data: kept for as long as you use the service, then deleted when the account is deleted.
• Marketing contacts: kept for 3 years after the last contact or your last interaction, then automatically purged.
• Anti-abuse access logs: kept for 12 months.
• Billing data: kept in accordance with statutory accounting obligations (10 years).

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the rights of access, rectification, erasure, objection, restriction of processing and portability of your data.

You can exercise these rights by writing to privacy@gargantuart.com, or directly from your account page: self-service account deletion is available there.

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

The Site’s data is hosted within the European Union (AWS Paris region). The use of Stripe and Google may however involve data transfers to the United States. These transfers are governed by the EU-US Data Privacy Framework and/or standard contractual clauses adopted by the European Commission.

The use of cookies and trackers on the Site is described in the cookie policy.

This policy may be updated to reflect changes in the service or in regulations. The date of the last update is shown at the top of the page. In the event of a substantial change, users with an account will be informed.