Article 1 – Data Controller
Personal data collected via patronik.fr is processed by Christophe Gueux, acting as Data Controller.
Privacy Policy & Cookies
Article 2 – Data Collected
• Email address • Connection data (IP address, technical logs) • Payment data (via Stripe – no local storage)
Article 3 – Purposes and Legal Basis
Data processing is based on: • Contract performance (user account creation and management, service access, billing), • Compliance with legal and tax obligations (storage of invoices and payment data), • User consent (statistical analysis, cookies, marketing communication).
Article 4 – Data Retention
Data is retained for the duration of the subscription, extended by 3 years to meet fiscal and legal obligations.
Article 5 – User Rights
In accordance with the GDPR, all users have the following rights: • Access, rectification, erasure • Objection, restriction of processing • Data portability These rights can be exercised by email: contact@patronik.fr. In case of difficulty, users may also contact the French Data Protection Authority (CNIL): www.cnil.fr
Article 6 – Subprocessors and Data Transfers
To provide the service, Patronik relies on third-party providers who may process certain personal data as subprocessors under the GDPR: • Supabase (EU): hosting and managing the user database (authentication, database, files), servers located in the EU. • RunPod (EU / USA): GPU infrastructure for image generation and temporary storage. SCCs apply for transfers outside the EU. • Stripe Payments Europe Ltd. (Ireland): payment processing and billing. • Microsoft Ireland Operations Ltd.: email services. • Ionos SE (Germany): domain management and DNS services. AI subprocessors: • Stability AI (Stable Diffusion XL): generates high-quality images. • Google (Gemini API): generates vector sewing patterns. These providers only process data necessary for service delivery. SCCs apply for transfers outside the EU.
Article 7 – Cookies
The site uses technical and analytical cookies. Users may configure their browser to block cookies, though some services may then be limited.
Article 8 – Security
The publisher implements appropriate technical and organizational measures to protect data from unauthorized access.