Privacy Policy

1. Data Controller & Scope

This Privacy Policy applies to all websites, publications, and services operated under the Le Roi du Monde ecosystem, including the central hub (leroidumonde.com), the eight editorial Mondes (Le Roi du Château, Le Roi du Jardin, Le Roi du Voyage, Le Roi du Village, Le Roi du Vin, Le Roi du Patrimoine, Le Roi des Batailles, Le Roi du Bateau), and the professional network Le Cercle du Roi (lecercleduroi.com).

The statutory data controller under the General Data Protection Regulation (GDPR / AVG) is Meijer Projectontwikkeling B.V., established in Leiden, The Netherlands, registered with the Dutch Chamber of Commerce under number 90309480.

For any questions regarding your personal data or this policy, contact our Data Protection desk at privacy@leroidumonde.com.

2. Categories of Data Collected

We collect only the minimum personal data strictly necessary to deliver our heritage documentation and network services:

• Reader Account & Passport (My Monde): Email address and authentication credentials managed securely via Supabase Auth when you create an account to record visited or saved heritage places.
• Newsletter Subscriptions: Email address and language preference, collected strictly via double opt-in verification. Every email contains a one-click unsubscribe mechanism.
• Editorial Corrections & Inquiries: Name, email address, and factual notes provided voluntarily when submitting an editorial update or archive correction.
• Le Cercle du Roi Professional Inquiries: Name, organization, professional discipline, email address, and project brief submitted when requesting a qualified introduction or membership evaluation.
• Technical Analytics: Anonymous telemetry and usage metrics collected via Google Analytics 4 strictly under Google Consent Mode v2. Without explicit user consent, analytics storage is disabled.

3. Legal Bases for Processing (GDPR Art. 6)

We process personal data solely on legitimate grounds recognized by European law:

• Consent (Art. 6(1)(a)): Applied to double opt-in newsletter delivery, voluntary cookie-based analytics, and submission of bespoke consultation inquiries.
• Contractual Performance (Art. 6(1)(b)): Applied to the provision of user accounts (My Monde / Passport) and private professional introductions within Le Cercle du Roi.
• Legitimate Interest (Art. 6(1)(f)): Applied to maintaining platform security, verifying data provenance, correcting historical public records, and preventing denial-of-service or fraudulent claims.

4. Data Processors & Hosting Infrastructure

We never sell, rent, or commercialize personal data or contact details. Data is processed exclusively by reputable, GDPR-compliant infrastructure providers bound by Data Processing Agreements (DPAs):

• Vercel Inc. (Cloud edge hosting, serverless execution and secure delivery within European edge regions).
• Supabase Inc. (PostgreSQL database and authentication services hosted in certified European data centres).
• Resend Inc. (Transactional email delivery and newsletter dispatch with cryptographic SPF/DKIM verification).
• Google Ireland Ltd. (Google Analytics 4 with IP anonymization and Consent Mode v2 gating).

5. Retention Schedules

Personal data is retained only for as long as necessary to fulfill the purpose for which it was collected:

• Account data: Retained until you request account deletion or close your profile.
• Newsletter subscriptions: Retained until you click unsubscribe or request removal.
• Editorial corrections: Retained for up to 24 months after verification and resolution to ensure provenance auditability.
• Le Cercle inquiries: Retained for up to 36 months to maintain confidential audit trails of professional handshakes.

6. Your Rights Under GDPR

Under Articles 15 to 22 of the GDPR, you have the right to request access to, rectification of, or erasure of your personal data, as well as the right to data portability, restriction of processing, and objection to processing.

To exercise any of these rights, send an email to privacy@leroidumonde.com. We respond to all verified requests within 30 days without fee.

You also retain the right to lodge a formal complaint with the competent supervisory authority: the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, Bezuidenhoutseweg 30, 2594 AV Den Haag, autoriteitpersoonsgegevens.nl).