Legal information
Privacy policy
Last updated: 2026-07-21
This policy explains which personal data are processed on callen-jf.com, why they are processed, for how long and how you may exercise your rights.
1. Data controller
The controller is CALLEN, TOULON, 83000 Toulon, France. Privacy enquiries: contact@callen-jf.com.
2. Data processed
- Visitors: security logs, language, accessibility and cookie choices. After analytics consent: anonymous session identifier, pages viewed, clicks, traffic source, campaigns, device, browser, operating system, language and screen size. IP addresses are not stored in detailed analytics.
- Members: username, first and last name, email, date of birth, postal address, securely hashed password, optional photo and profile data.
- Community activity: posts, comments, reactions, reports, messages, friendship relations, clubs, events and reading lists.
- Bookshops: business identity, contact details, orders, delivery and billing information.
- Contact and newsletter: email, message, language and consent record.
- Contests: entry, result and data strictly required to send a prize.
3. Purposes and legal grounds
| Purpose | Legal ground |
|---|---|
| Accounts, community functions, clubs and events | Performance of the terms of use |
| Age verification | Performance of the terms and legitimate interest in community safety |
| Postal address used only to send prizes | Performance of contest rules |
| Professional bookshop orders | Pre-contractual steps, contract and legal duties |
| Weekly newsletter | Consent |
| Moderation, fraud prevention and security | Legitimate interest and legal obligation where applicable |
| Optional audience measurement | Consent |
4. Required information
Required fields are necessary for the requested service. Postal addresses are never public or used for advertising and are reserved for prize delivery. Private data are not visible to other members.
5. Recipients
Data are accessible only to Jean-François Callen and authorised administrators according to their duties. Ordinary moderators cannot access postal addresses. Technical processors may provide hosting, email, backup, translation or analytics services. Data are never sold or rented.
6. International transfers
Data are hosted in France by OVHcloud. Any optional non-EEA service must rely on an adequacy decision, standard contractual clauses or another GDPR safeguard.
7. Retention
Accounts are kept while active and are deleted or anonymised after one year of inactivity following a warning. Public contributions may be anonymised to preserve discussions. Other data are retained only for the period required by their purpose, security, accounting or legal obligations.
8. Security
Measures include encryption of private information, password hashing, role-based access, administrator two-factor authentication, request protection, rate limiting, sensitive-action logs and backups.
9. Your rights
You may request access, correction, deletion, restriction, objection and portability, and withdraw consent at any time. Requests may be submitted through your account or to contact@callen-jf.com. You may also complain to the French data-protection authority (CNIL).
10. Minors
The Readers’ Circle is restricted to adults aged eighteen or over. Accounts breaching this rule may be suspended and deleted.
11. Updates
Material changes to this policy will be brought to members’ attention through a visible notice or notification.