Privacy Policy
At Tanophium, we respect your privacy and are committed to protecting your personal data. This
Privacy Policy explains how personal data may be collected, used, stored and protected when you
visit our website or contact us.
Tanophium is a self-discovery and self-help tools studio developing resources such as cards, books,
courses, games and digital tools.
Our website currently serves as an informational website. Online sales, newsletters, interactive
questionnaires and AI-powered tools are not currently offered through this website. If we introduce
these features, we will review and update this Privacy Policy where necessary before implementing
any new processing activities that require additional information.
DATA CONTROLLER
The data controller responsible for processing personal data through this website is:
BAN Domonkos, operating as a micro-entrepreneur in France under the Tanophium brand.
Email: info@tanophium.com
The data controller determines the purposes and means of processing personal data in accordance
with the General Data Protection Regulation (GDPR) and applicable French data protection laws.
2. Personal Data We Collect
The personal data processed depend on how you interact with the website.
2.1. Information You Provide
If you contact us by email, we may process the information you provide, including your email address,
name if included, the content of your message and any information you voluntarily share.
Please avoid sending sensitive personal information unless it is necessary for your enquiry.
2.2. Technical Information
When you visit the website, certain technical information may be processed by the hosting provider or
other technical services involved in operating and securing the website.
Depending on the technical configuration, this may include your IP address, browser and device
information, access timestamps, requested pages and security-related log data.
The precise information processed depends on the services enabled and their technical configuration.
2.3. Cookies and Similar Technologies
The website may use cookies or similar technologies depending on its configuration and the
integrations enabled.
At present, we have not intentionally activated optional analytics or marketing integrations. The use of
cookies and similar technologies remains subject to the website's actual technical configuration and
applicable legal requirements.
Further information is provided in Section 7.
3. Purposes and Legal Bases of Processing
We process personal data only for specified purposes and where an appropriate legal basis exists
under the GDPR.
Depending on the circumstances, personal data may be processed for the following purposes:
Operating and securing the website: to deliver website content, maintain functionality,
detect technical problems and protect against misuse. The legal basis may be our legitimate
interests, subject to the applicable requirements.
Responding to enquiries: to read and respond to messages sent to our contact email
address. The legal basis may be taking steps at your request before entering into a contract,
where applicable, or our legitimate interests in managing correspondence.
Complying with legal obligations: where processing is necessary to comply with obligations
imposed by applicable law.
Where we introduce additional features, such as online sales, newsletters, analytics or AI-powered
tools, we will identify the relevant purposes and legal bases before implementing the associated
processing activities.
4. Data Sharing and Service Providers
Personal data may be accessible to service providers where necessary to operate, maintain or secure
the website and manage communications.
The principal categories of potential recipients include:
Website hosting and technical service providers, including Hostinger, where they process
data in connection with website hosting, delivery or security.
Email and communication service providers, where they process data necessary to send,
receive or store correspondence.
Competent public authorities, where disclosure is required by applicable law.
We do not sell personal data to third parties.
Service providers may act as data processors on our behalf or as independent controllers, depending
on their role and the applicable arrangements.
We seek to limit access to personal data to what is necessary for the relevant purpose.
5. International Data Transfers
Some service providers may process personal data outside the European Economic Area (EEA).
Where personal data are transferred outside the EEA, we will ensure that an appropriate transfer
mechanism or safeguard is in place where required by the GDPR. This may include an adequacy
decision adopted by the European Commission or Standard Contractual Clauses.
The countries involved and the applicable safeguards depend on the services actually used.
Further information about relevant international transfers and safeguards may be requested by
contacting us at contact@tanophium.com.
6. Data Retention
Personal data are retained only for as long as necessary to fulfil the purpose for which they were
collected, subject to applicable legal obligations.
Retention periods depend on the category of data and the circumstances of the processing.
General enquiries: retained for the time necessary to respond to the enquiry and manage
any related follow-up. Once the enquiry has been resolved, the information will be deleted
when it is no longer necessary, unless a longer retention period is justified by legal obligations
or the establishment, exercise or defence of legal claims.
Business correspondence and records: where correspondence or other records relate to a
commercial relationship or are subject to a legal retention obligation, they may be retained for
the applicable statutory period. Under French law, certain commercial correspondence must
be retained for five years, while accounting records and invoices generally must be retained
for ten years.
Technical and security logs: retained according to the hosting provider's applicable
configuration, the security purposes for which they are generated and relevant legal
requirements.
When personal data are no longer necessary, they are deleted or anonymised where appropriate.
The applicable retention period depends on the nature of the data, the purpose of processing and any
legal obligation that applies.
7. Cookies and Similar Technologies
Cookies are small files stored on your device by a website. Similar technologies may also be used to
access information on your device or collect information about website usage.
Depending on the configuration of the website, these technologies may serve different purposes:
Strictly necessary technologies: required for website operation, security or a service
explicitly requested by the visitor.
Analytics technologies: used to understand website traffic and visitor interactions.
Marketing technologies: used to measure advertising performance or track interactions for
marketing purposes.
Technologies that require prior consent under applicable French law will not be activated before the
required consent has been obtained.
Where a consent mechanism is required, visitors must be able to refuse optional technologies as
easily as they can accept them and withdraw their consent through an accessible mechanism.
The specific cookies and technologies used on this website depend on its actual configuration and the
integrations enabled. This section will be updated if necessary to reflect the technologies actually
deployed.
8. Data Security and Confidentiality
We take reasonable technical and organisational measures to protect personal data against
unauthorised access, accidental loss, alteration, disclosure or destruction.
Access to personal data is limited to what is necessary for the operation of the website and the
handling of enquiries.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
9. Your Data Protection Rights
Under the GDPR and applicable French data protection law, you may have the following rights, subject
to the applicable legal conditions:
Right of access: to obtain confirmation of whether your personal data are being processed
and access those data.
Right to rectification: to request correction of inaccurate or incomplete personal data.
Right to erasure: to request deletion of your personal data where the legal conditions are
met.
Right to restriction of processing: to request restriction of processing in certain
circumstances.
Right to object: to object to processing based on legitimate interests, on grounds relating to
your particular situation, where the legal conditions are met.
Right to data portability: to receive certain personal data in a structured, commonly used
and machine-readable format, and to request transmission to another controller where the
legal conditions are met.
Right to withdraw consent: where processing is based on consent, to withdraw that consent
at any time. Withdrawal does not affect the lawfulness of processing carried out before
withdrawal.
To exercise your rights, please contact us at:
We will respond within the applicable legal timeframe. We may request information reasonably
necessary to verify your identity before responding.
You also have the right to lodge a complaint with the French Data Protection Authority, the
Commission nationale de l'informatique et des libertés (CNIL).
Official website: https://www.cnil.fr/
10. Children's Privacy
The website is not specifically directed at children, unless a particular product or service expressly
states otherwise.
We do not knowingly collect children's personal data for purposes requiring parental authorisation or
other safeguards without meeting the applicable legal requirements.
If you believe that a child has provided personal data to us inappropriately, please contact us so that
we can review the situation and take appropriate action.
11. Future Products and Services
Tanophium may introduce physical and digital products, online sales, educational resources,
questionnaires, newsletters or AI-powered self-discovery tools in the future.
Before introducing features that involve additional personal data processing, we will assess the
relevant privacy requirements and update this Privacy Policy where necessary.
Depending on the feature, additional information may be required about payment providers, delivery
services, questionnaire platforms, AI service providers, data retention, international transfers and the
legal bases for processing.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our website, services, technical providers or
applicable legal requirements.
The latest version will be published on this page, together with its revision date.
13. Contact
For questions about this Privacy Policy, the processing of your personal data or the exercise of your
data protection rights, please contact:
BAN Domonkos — Tanophium
Email: info@tanophium.com