Privacy Policy
How the Association Sageocratie Internationale collects, processes and protects your personal data.
1. Preamble
The Association Sageocratie Internationale is committed to protecting the privacy and personal data of all persons who visit the sageocracy.org website, register on it as Sageocrats, make contact via the dedicated form, or contribute materially to the project.
This privacy policy describes, in a transparent manner, what data we collect, why we collect it, how we use it, how long we retain it, and how everyone can exercise their rights over their data.
It is drafted in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and French Law No. 78-17 of 6 January 1978, as amended, known as « Informatique et Libertés ».
2. Data Controller
Association Sageocratie Internationale
Association governed by the French Law of 1 July 1901
Registered office: 128 rue La Boétie, Unit 41, 75008 Paris
RNA Number: W751280810
SIREN Number: 991775495
Represented by its founder and president, Yannick Costechareyre, who also serves as the
contact for all questions relating to the protection of personal data.
For any request relating to your data, you can contact us via the contact form available on the website.
3. Data Collected and Purposes
3.1 Registration as a Sageocrat
- Data collected: title, first name, last name, date of birth, email address, country of residence, city of residence and, where applicable, telephone number (optional) and, under the age of 15, a parent's email address.
- Purposes: maintaining the global registry of Sageocrats, verifying the minimum age required for registration (12 years) and, under the age of 15, the consent of a parent, communicating developments of the project to registrants. Only the per-country registration totals are made public: no individual registration is published.
- Legal basis: explicit consent of the person at the time of registration (Article 6.1.a GDPR). Registering may reveal an opinion or a belief: this data is therefore treated as sensitive data, on the basis of this same explicit consent (Article 9.2.a GDPR).
- Young people under 18: registration is open from the age of 12. Between 12 and 14, it is only recorded with the consent of a parent (holder of parental authority), obtained through a link sent to the parent's email address; without this consent within 14 days, the request and the data are erased. The Sageocrat Card, which is paid, is reserved for people aged 18 and over. Registrants under 18 are not counted towards the Tipping Point threshold, which is a voting threshold: they appear separately in the totals by country.
3.2 Contact form
- Data collected: first name, last name, email address, country, city, subject of the request, message. Where applicable, telephone number (optional) and date of birth (only if the request concerns registration as a Sageocrat).
- Purposes: processing the request addressed to the association, providing a personal response to the requester.
- Legal basis: the association's legitimate interest in responding to the requests addressed to it (Article 6.1.f GDPR).
3.3 Acquisition of a Sageocrat Card
- Data collected: identity of the registered Sageocrat, photo shown on the card, data strictly necessary for processing the payment.
- Purposes: production and delivery of the Sageocrat Card, your personal supporter card, in digital form, accounting processing of the financial contribution.
- Legal basis: performance of a contract, the acquisition of the card (Article 6.1.b GDPR).
Important: banking data (card numbers, account identifiers) are at no point stored by the Association Sageocratie Internationale. They are processed directly by our secure payment providers Stripe and PayPal, according to their own privacy policies.
4. Data Recipients, Subprocessors
The data collected on this site is strictly reserved for internal use by the Association Sageocratie Internationale. It is never:
- Sold to third parties
- Shared for commercial, political or ideological purposes
- Transmitted to advertising platforms
- Used for automated profiling or automated decision-making
Technical subprocessors of the association
To ensure the operation of the site, certain data may be communicated to technical providers, within the strict scope of the performance of their services and according to contracts that guarantee a level of protection equivalent to that of the association:
Creation and management of the platform:
the company Aubremont, run by the author of the book, created and manages, on behalf of the association, the sageocracy.org platform, the support cards and the association's IT tools.
Website hosting:
OVH SAS, 2 rue Kellermann, 59100 Roubaix, France
Payment providers:
- Stripe (Stripe Payments Europe Limited, Ireland), for card payments
- PayPal (PayPal Europe Sàrl & Cie SCA, Luxembourg), for payments via PayPal account
These two providers are themselves subject to the GDPR for transactions made from the European Union. The Association Sageocratie Internationale never receives the raw banking data of contributors, only a payment confirmation and a transaction identifier are transmitted to it by the providers.
5. Data Retention
| Type of data | Retention period |
|---|---|
| Global Sageocrat registry data | Retained as long as the registration remains active, and at most until the referendum in the country: the list of names is then destroyed, only the totals are kept |
| Registrations whose email address was never confirmed | Deleted automatically 12 months after registration, together with any photo and account, unless a card has been paid for or an order placed |
| Data from the contact form | Maximum 3 years after the last exchange |
| Transaction data (Sageocrat Cards, donations) | 10 years (legal accounting and tax obligations) |
| Technical session data (cookies) | 13 months maximum |
Once the referendum has taken place in a country, the list of names of the people registered in that country is destroyed. Only the totals are kept. Everyone can also, at any time, ask for their registration to be deleted.
At the end of these periods, data is deleted or irreversibly anonymized.
6. Cookies and Trackers
This site uses only the technical cookies strictly necessary for its operation:
- Session cookies (maintaining the connection during browsing)
- Security cookies (protection against automated attacks, form verification)
No advertising cookie, no third-party tracking cookie, no external platform pixel is used. In accordance with the position of the CNIL on this point, cookies strictly necessary for the operation of the site do not require prior consent.
7. Data Security
The Association Sageocratie Internationale implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk. These measures include in particular:
- Hosting with a professional provider located in the European Union
- Encryption of connections (HTTPS / TLS)
- Daily off-server backups
- Strengthened authentication for access to registry data
- Application firewall and real-time monitoring
- Access to data strictly limited to authorized persons of the association
8. Your Rights
In accordance with the GDPR, you have the following rights over your personal data:
- Right of access: obtain confirmation that data concerning you is being processed, and receive a copy of it
- Right of rectification: have inaccurate or incomplete data corrected
- Right to erasure (« right to be forgotten »): request the deletion of your data
- Right to restriction of processing: have the processing of your data temporarily suspended
- Right to portability: receive your data in a structured, machine-readable format
- Right to object: object, on legitimate grounds, to the processing of your data
- Right to withdraw your consent at any time, without this affecting the lawfulness of prior processing
Contact to exercise your rights
The Association Sageocratie Internationale is not legally required to designate a Data Protection Officer (DPO) within the meaning of Article 37 GDPR, as the scale of its processing does not require it. Yannick Costechareyre, founder and president of the association, is the designated contact of the association for any question relating to the protection of personal data.
To exercise one of your rights, use the contact form by selecting the subject « Modification or erasure of my data (GDPR) » from the drop-down menu. A response will be provided to you within a maximum period of one month from the receipt of your request, in accordance with Article 12 GDPR.
Right to lodge a complaint
If you consider that your rights have not been respected, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):
CNIL
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Telephone: 01 53 73 22 22
Website: cnil.fr
9. Transfers Outside the European Union
The data collected on this site is stored within the European Union. No transfer to a third country is made directly by the Association Sageocratie Internationale.
Stripe and PayPal, as international payment providers, may occasionally make transfers outside the EU as part of their own processing (for example, for anti-fraud operations). These transfers are governed by the appropriate safeguards provided for by the GDPR: standard contractual clauses of the European Commission, adequacy decisions, or binding corporate rules.
10. Modification of This Policy
This privacy policy may be modified to reflect legislative, regulatory, technical or organizational developments. Substantial modifications will be brought to the attention of registrants through the association's usual means of communication.
Last updated: 12 May 2026