Privacy Policy

The association THE CASTLE CLUB, hereinafter referred to as "the Association", represented by Mr. Hugo de Mézerac in his capacity as legal representative, is designated as the data controller within the meaning of Article 4.7 of Regulation (EU) 2016/679 (GDPR) for personal data collected in the context of its statutory activities.

The Association may collect and process the following categories of personal data: • Identification data: surname, first name, date of birth for determining age. • Contact data: complete postal address, email address, telephone number, Instagram account identifier. • Membership-related information: how the individual became aware of the Association, reasons for joining, professional situation. • Information specific to owners of historical properties: property type and name, geographical location, historical elements, state of conservation, nature of activities offered to the public (guided tours, receptions, seminars, etc.), capacity, logistical data (nearby transport infrastructure, accommodation solutions, immediate environment, neighboring religious buildings).

The personal data collected are processed for the exclusive purposes of: • Administrative management of membership applications and effective memberships. • Administration of partnerships with owners of real estate of historical or heritage interest. • Communication of invitations and information relating to events organized by the Association. • Planning and organization of associative events. • Statistical analysis of website traffic via PostHog. Users have the choice to accept or refuse tracking cookies: – Acceptance: standard tracking with cookies to analyze traffic and user behavior. – Refusal: anonymous tracking only, without individualized tracking cookies; data stored temporarily in memory.

Processing is based on the following legal grounds: • Explicit consent of the data subjects, collected via online forms, in accordance with Article 6.1.a of the GDPR. • Legitimate interest pursued by the Association in the context of its statutory missions, in accordance with Article 6.1.f of the GDPR.

Personal data are retained for the duration of the membership or partnership. In case of refusal of membership or partnership, or upon termination of the relationship, data are immediately deleted, subject to legal retention obligations.

Personal data may be processed by processors mandated by the Association: • PostHog (statistical analysis service – hosting infrastructure located in the European Union). • Tally (form management service – hosting infrastructure located in the European Union). These service providers are bound by strict contractual obligations and may only process data on documented instructions from the Association, in accordance with Article 28 of the GDPR.

The Association's website uses only technical cookies strictly necessary for its operation, in accordance with Article 82 of Law No. 78-17 of January 6, 1978, as amended. For tracking and analytics cookies (PostHog), user consent is requested. Refusal results in anonymous tracking only, without individualized tracking cookies.

In accordance with the GDPR and Law No. 78-17 of January 6, 1978, as amended, data subjects have the following rights: • Right of access, rectification, and erasure (Articles 15, 16, and 17 GDPR). • Right to restriction of processing (Article 18 GDPR). • Right to object (Article 21 GDPR). • Right to data portability (Article 20 GDPR, under the conditions provided by law). To exercise these rights or for any question relating to the processing of personal data, data subjects may contact: contact@thecastleclub.fr

The Association implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 GDPR, and to preserve the confidentiality, integrity, and availability of personal data.

This Privacy Policy may be modified at any time, particularly to adapt to changes in applicable regulations or the Association's activities. Data subjects are invited to regularly consult the current version, accessible on the Association's website. Last updated: September 2025