Your data, clearly explained.

Poncelin de Raucourt Fine Arts, a French EURL with share capital of €1,000, registered with the Paris Trade and Companies Register under number 939 632 618, with its registered office at 229 rue Saint-Honoré, 75001 Paris, determines the purposes of the processing described here. For questions or requests concerning your data, contact info@la-selection.art.

Registration collects your email address, chosen language and consent to receive La Sélection. Your first name, last name and reader profile are optional. This information is used to manage registration, tailor communications and send the newsletter. The legal basis is your consent.

The website keeps the consent date and version, request status and information needed to follow up its transfer. The request is sent to Brevo, either directly or through the existing registration service hosted with Supabase. A request saved on the website does not confirm that an email has reached your inbox.

You can withdraw consent using the unsubscribe link in newsletters or by writing to info@la-selection.art. Withdrawal applies to future messages and does not affect the lawfulness of earlier processing. Newsletter registration is separate from Cercle membership and professional registration.

Cercle sign-in uses a one-time code sent to your email address by Brevo. The code expires after ten minutes. Your verified email and an account identifier associate your sign-in with your subscription and access rights. No ChatGPT account or password is required to join Le Cercle.

The website stores Stripe customer and subscription identifiers, payment status, billing-period dates, any cancellation instruction and references used to reconcile payment confirmations. The accepted terms version, a copy and the acceptance date provide a record of the agreement. When you save a favourite, its identifier is associated with your account. This processing is necessary to perform the contract or take the steps you request before subscribing.

Billing details and payment information are entered on Stripe-hosted pages. The La Sélection website does not store your full card number or security code. Refund, dispute or fraud-alert references may be matched to your subscription to investigate an incident; La Sélection’s follow-up relies on its legitimate interest in securing the service and defending its rights.

Professional registration requires your name, company, email address, a password and a language. Authentication and confirmation or recovery emails are handled by Supabase Auth. The password is transmitted to authenticate you; it is not stored in La Sélection’s application database. Encrypted session credentials keep you signed in.

La Sélection stores the profile, email-confirmation status, approval decision, slot requests, related messages and booking records. This information is used to assess your request and organise the services requested, as pre-contractual steps and for contract performance. Calendar access decisions are made by the owner.

Approved professionals can view availability and their own requests. The calendar does not reveal other advertisers’ names, amounts or internal notes. Detailed management information is restricted to La Sélection’s administration.

When you contact us, we use your contact details and message to reply and follow up your request. Withdrawal requests and complaints are handled to fulfil contractual and legal obligations. Please avoid sending sensitive data or information unrelated to your request.

A withdrawal declaration records your name, email, contract reference and date if supplied, together with the declaration, timestamp, receipt and case history. The email-acknowledgement transmission status and relevant internal notes enable La Sélection to handle the request. This information is not made public.

To limit abusive attempts, the website uses counters associated with a hash of the IP address or email, or with the account identifier. Hashing should not be treated as anonymisation. Hosting and sign-in providers may also process technical data necessary for their services. Security and abuse prevention rely on our legitimate interest in protecting accounts and website availability.

Information is accessible to authorised persons at Poncelin de Raucourt Fine Arts and the providers needed for the relevant service. It is not sold to La Sélection’s commercial partners. Disclosure may also be required by law or necessary to handle a dispute.

• Cloudflare: hosting, page delivery, the D1 database and technical security.
• Sites / ChatGPT, provided by OpenAI: website publication and identity used for owner access and any existing legacy member access.
• Supabase: professional authentication and the newsletter registration service when used.
• Brevo: mailing-list management and delivery of sign-in codes, newsletters, subscription confirmations and withdrawal acknowledgements.
• Stripe: payments, invoicing, subscription management and fraud prevention.
• Plausible Analytics: cookie-free audience measurement, with data processed and hosted in the European Union.

Some providers also process information for their own obligations or for services you use directly with them. Their policies do not replace this notice.

The services used operate international infrastructure. Depending on the provider and service, information may be hosted or accessed outside the European Economic Area, including in the United States. This version does not guarantee exclusively French or European hosting.

Providers publish information about their transfers and protection mechanisms, including adequacy decisions and standard contractual clauses where applicable. You can request the available details about recipients, processing locations and safeguards relevant to your information at info@la-selection.art.

Retention depends on the purpose. Information needed to deliver a service remains available during the relevant relationship; information required by law or to establish a right is subsequently retained only for that purpose. An erasure request therefore does not necessarily remove an invoice or evidence needed for an ongoing dispute.

• Newsletter: while registered, until consent is withdrawn; information used for marketing is reviewed no later than three years without active contact from you. A limited suppression record may be retained to prevent further unwanted contact.
• Member and professional accounts, favourites and requests: while needed for the account and requested relationship, then only as necessary for retention obligations or contractual evidence. Relevant contractual records are generally archived for five years after the relationship ends, subject to a longer statutory period or a dispute.
• Invoices and accounting records: ten years from the end of the relevant financial year. Specific electronic-contract archiving rules apply where required.
• Professional session: the cookie expires no later than fourteen days after creation and is removed on sign-out. Invalid session records are deleted when the website detects the invalidity; this sign-in period is not a general retention period for the profile.
• Security and incidents: for the period needed to prevent, understand and resolve the incident, taking applicable limitation periods into account. Technical counters are not used for marketing.

La Sélection uses Plausible Analytics to measure visits, pages viewed, traffic sources, countries and devices. Plausible presents aggregate statistics, without cookies or tracking across websites. No name, email or account identifier is added to analytics events. The website does not add advertising trackers.

Session and security mechanisms are needed for sign-in, private areas and requested payment services. Trackers strictly necessary for those functions do not require the prior consent applicable to optional trackers.

The Cercle cookie, named __Host-la_selection_member, keeps you signed in for up to thirty days. The temporary __Host-la_selection_login cookie binds code verification to the requesting browser and expires after ten minutes. These cookies are restricted to the site, secure and protected against script access. The professional workspace cookie remains valid for up to fourteen days. ChatGPT administration access and Stripe pages use their own mechanisms.

You can block or delete cookies in your browser, although sign-in functions may then stop working. External websites and any third-party-hosted images receive the technical information needed to display them.

This website notice is not a statement that newsletters contain no tracking. Any measurement of email opens or clicks depends on the Brevo delivery settings; uses requiring your consent must be accompanied by specific information and a choice.

Subject to the conditions of the GDPR, you may request access to, correction or erasure of your data, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time. You may withdraw consent without affecting the lawfulness of earlier processing.

Write to info@la-selection.art, identifying your request and the email address associated with the account. We normally respond within one month; a reasoned extension may be necessary as permitted by law. Proof of identity is requested only where there is reasonable doubt and in a proportionate way.

If you believe your rights have not been respected, you may complain to the French data protection authority (CNIL) or the competent supervisory authority in your country. Deleting information managed by La Sélection does not automatically delete your ChatGPT account or an account held directly with another provider.