Privacy Policy - Sageocracy International

1. Preamble

The Association Sageocratie Internationale is committed to protecting the privacy and personal data of all persons who visit the sageocracy.org website, register on it as Sageocrats, make contact via the dedicated form, or contribute materially to the project.

This privacy policy describes, in a transparent manner, what data we collect, why we collect it, how we use it, how long we retain it, and how everyone can exercise their rights over their data.

It is drafted in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and French Law No. 78-17 of 6 January 1978, as amended, known as « Informatique et Libertés ».

2. Data Controller

Association Sageocratie Internationale
Association governed by the French Law of 1 July 1901
Registered office: 128 rue La Boétie, Unit 41, 75008 Paris
RNA Number: W751280810
SIREN Number: 991775495
Represented by its Founder-President, Yannick Costechareyre, who also serves as the contact for all questions relating to the protection of personal data.

For any request relating to your data, you can contact us via the contact form available on the website.

3. Data Collected and Purposes

3.1 Registration as a Sageocrat

Data collected: first name, last name, date of birth, email address, country of residence, city of residence.
Purposes: maintaining the global registry of Sageocrats, verifying the legal age of majority required for registration (in accordance with Article 2 of the association's statutes), communicating developments of the project to registrants.
Legal basis: explicit consent of the person at the time of registration (Article 6.1.a GDPR).

3.2 Contact form

Data collected: first name, last name, email address, country, city, subject of the request, message. Where applicable, telephone number (optional) and date of birth (only if the request concerns registration as a Sageocrat).
Purposes: processing the request addressed to the association, providing a personal response to the requester.
Legal basis: the association's legitimate interest in responding to the requests addressed to it (Article 6.1.f GDPR).

3.3 Acquisition of a Sageocrat identity card

Data collected: identity of the registered Sageocrat, data strictly necessary for processing the payment.
Purposes: production and delivery of the digital identity card, accounting processing of the financial contribution.
Legal basis: performance of a contract — the acquisition of the card (Article 6.1.b GDPR).

Important: banking data (card numbers, account identifiers) are at no point stored by the Association Sageocratie Internationale. They are processed directly by our secure payment providers Stripe and PayPal, according to their own privacy policies.

4. Data Recipients — Subprocessors

The data collected on this site is strictly reserved for internal use by the Association Sageocratie Internationale. It is never:

Sold to third parties
Shared for commercial, political or ideological purposes
Transmitted to advertising platforms
Used for automated profiling or automated decision-making

Technical subprocessors of the association

To ensure the operation of the site, certain data may be communicated to technical providers, within the strict scope of the performance of their services and according to contracts that guarantee a level of protection equivalent to that of the association:

Website hosting:
OVH SAS — 2 rue Kellermann, 59100 Roubaix, France

Payment providers:

Stripe (Stripe Payments Europe Limited, Ireland) — for card payments
PayPal (PayPal Europe Sàrl & Cie SCA, Luxembourg) — for payments via PayPal account

These two providers are themselves subject to the GDPR for transactions made from the European Union. The Association Sageocratie Internationale never receives the raw banking data of contributors — only a payment confirmation and a transaction identifier are transmitted to it by the providers.

5. Data Retention

Type of data	Retention period
Global Sageocrat registry data	Retained as long as the registration remains active
Data from the contact form	Maximum 3 years after the last exchange
Transaction data (Sageocrat cards, donations)	10 years (legal accounting and tax obligations)
Technical session data (cookies)	13 months maximum

At the end of these periods, data is deleted or irreversibly anonymized.

6. Cookies and Trackers

This site uses only the technical cookies strictly necessary for its operation:

Session cookies (maintaining the connection during browsing)
Security cookies (protection against automated attacks, form verification)

No advertising cookie, no third-party tracking cookie, no external platform pixel is used. In accordance with the position of the CNIL on this point, cookies strictly necessary for the operation of the site do not require prior consent.

7. Data Security

The Association Sageocratie Internationale implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk. These measures include in particular:

Hosting with a professional provider located in the European Union
Encryption of connections (HTTPS / TLS)
Daily off-server backups
Strengthened authentication for access to registry data
Application firewall and real-time monitoring
Access to data strictly limited to authorized persons of the association

8. Your Rights

In accordance with the GDPR, you have the following rights over your personal data:

Right of access: obtain confirmation that data concerning you is being processed, and receive a copy of it
Right of rectification: have inaccurate or incomplete data corrected
Right to erasure (« right to be forgotten »): request the deletion of your data
Right to restriction of processing: have the processing of your data temporarily suspended
Right to portability: receive your data in a structured, machine-readable format
Right to object: object, on legitimate grounds, to the processing of your data
Right to withdraw your consent at any time, without this affecting the lawfulness of prior processing

Contact to exercise your rights

The Association Sageocratie Internationale is not legally required to designate a Data Protection Officer (DPO) within the meaning of Article 37 GDPR, as the scale of its processing does not require it. Yannick Costechareyre, Founder-President, is the designated contact of the association for any question relating to the protection of personal data.

To exercise one of your rights, use the contact form by selecting the subject « Modification or erasure of my data (GDPR) » from the drop-down menu. A response will be provided to you within a maximum period of one month from the receipt of your request, in accordance with Article 12 GDPR.

Right to lodge a complaint

If you consider that your rights have not been respected, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):

CNIL
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Telephone: 01 53 73 22 22
Website: cnil.fr

9. Transfers Outside the European Union

The data collected on this site is stored within the European Union. No transfer to a third country is made directly by the Association Sageocratie Internationale.

Stripe and PayPal, as international payment providers, may occasionally make transfers outside the EU as part of their own processing (for example, for anti-fraud operations). These transfers are governed by the appropriate safeguards provided for by the GDPR: standard contractual clauses of the European Commission, adequacy decisions, or binding corporate rules.

10. Modification of This Policy

This privacy policy may be modified to reflect legislative, regulatory, technical or organizational developments. Substantial modifications will be brought to the attention of registrants through the association's usual means of communication.