+33 6 98 17 63 73

Privacy Policy

Privacy Policy

Cara’s Book Club
Last updated: 2 janvier 2026

This Privacy Policy explains how Cara’s Book Club (the “Provider”) collects, uses, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and French data protection law.

1. Data Controller

The data controller is: Cara’s Book Club
Legal form: company
Registered office: 20 Avenue Laurent Vibert Résidence Beaulieu Bâtiment A 13090 Aix-en-Provence
Email: co@carabookclub.com

2. Personal Data Collected

The Provider may collect the following categories of personal data:

  • Identification data (name, surname)
  • Contact details (email address)
  • Payment-related information (processed via secure third-party providers; no card data is stored)
  • Participation data (attendance, messages, contributions)
  • Technical data (IP address, browser type, connection logs)

3. Purposes of Processing

Personal data is processed for the following purposes:

  • Managing registrations, subscriptions, and payments
  • Organising online sessions and communications
  • Improving services and user experience
  • Complying with legal and regulatory obligations

4. Legal Basis for Processing

Processing is based on:

  • Performance of a contract (Article 6(1)(b) GDPR)
  • Legal obligations (Article 6(1)(c) GDPR)
  • Legitimate interests of the Provider (Article 6(1)(f) GDPR)
  • User consent, where required (Article 6(1)(a) GDPR)

5. Data Recipients

Personal data may be shared only with:

  • Technical service providers (hosting, video conferencing, payment platforms)
  • Public authorities, where required by law

All third parties are required to comply with GDPR standards.

6. Data Retention

Personal data is retained only for the period necessary for the purposes for which it was collected, including:

  • Registration data: for the duration of the contractual relationship
  • Billing data: as required by French accounting and tax law
  • Communication data: up to 1 year after last contact

7. Data Security

The Provider implements appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, or disclosure.

8. User Rights

In accordance with GDPR, users have the right to:

  • Access their personal data
  • Rectify inaccurate or incomplete data
  • Request erasure 
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

Requests may be sent to co@carabookclub.com. 

9. Complaints

Users may lodge a complaint with the French data protection authority (CNIL):
www.cnil.fr

10. Cookies

The Service may use cookies or similar technologies for functionality and analytics. Users may manage cookie preferences via their browser settings.