GDPR
Privacy & cookie policy
Last updated: 7 August 2026
GEDEON DSP takes your privacy seriously. This policy explains what data is collected on gedeondsp.com, why, how long it is kept and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR). This English version is provided for convenience; in the event of any discrepancy, the French version prevails.
1. Data controller
GEDEON DSP — Gérald JAKUBCZAK
GEDEONWEB — 6 rue Auguste Renoir, 62950 Noyelles-Godault, France
Email: support@gedeondsp.com
No Data Protection Officer has been appointed, as the organisation is not required to do so. Any request regarding personal data may be sent to the address above.
2. Principle: data minimisation
This is a static marketing website. There is no user account, no contact form and no comment section. Simply browsing the site requires no personal data: the web fonts are served from our own server (no requests to Google Fonts servers) and no tracker is set without your consent.
3. Data processed, purposes and legal bases
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Website delivery and security | Server logs: IP address, date and time, requested page, browser | Legitimate interest (Art. 6(1)(f)) — security and proper operation | Automatically purged by the host (typically 6 months maximum) |
| Order and payment processing | Name, email address, country, billing details, payment information (collected directly by Gumroad) | Performance of the contract (Art. 6(1)(b)) | Duration of the contractual relationship |
| Licence delivery and support | Email address, licence key, support correspondence | Performance of the contract (Art. 6(1)(b)) | 3 years from the last contact |
| Accounting and tax obligations | Invoices and supporting documents | Legal obligation (Art. 6(1)(c)) — Art. L123-22 French Commercial Code | 10 years |
| Audience measurement (optional) | Pseudonymous browsing identifier, pages viewed, truncated IP | Consent (Art. 6(1)(a)) — withdrawable at any time | 13 months maximum |
No data is used for targeted advertising, profiling or automated decision-making. Your data is never sold, rented or exchanged.
4. Payment: the role of Gumroad
Orders are processed by Gumroad, Inc. (United States), acting as merchant of record. When you click the buy button, you are redirected to a payment page hosted by that platform, which handles payment, invoicing, taxation and the issuing of licence keys.
No card data passes through or is stored on this website: card details are entered directly on Gumroad's payment page, whose transactions are processed by its provider Stripe, certified PCI-DSS. GEDEON DSP receives only the information needed for sales tracking and support: name, email address and product purchased.
As Gumroad is the seller in legal and tax terms, it is an independent controller for the transaction data. Its policy is available at gumroad.com/privacy.
5. Recipients and processors
- OVH SAS (France) — website hosting. Data stored in the European Union.
- Gumroad, Inc. (United States) — payment, invoicing, taxation and licence-key management. Gumroad itself relies on Stripe to process payments.
- Google Ireland Ltd. — audience measurement, only if you consent (see § 8).
No other third party has access to your data, except where required by law or by a competent authority.
6. Transfers outside the European Union
Some providers (Gumroad, Google) belong to groups established in the United States. Any transfers are governed by the European Commission's standard contractual clauses and, where applicable, by those companies' certification under the EU-U.S. Data Privacy Framework, together with additional technical measures (encryption in transit and at rest).
7. Security
The site is served entirely over HTTPS (TLS encryption). Administrative access is protected and limited to the publisher. Given the static nature of the site, no customer database is hosted on it.
8. Cookies and trackers
A cookie is a small file stored on your device when you visit a website. No non-essential tracker is set before your explicit consent. Declining is as easy as accepting: both banner buttons are presented at the same level.
8.1 Trackers exempt from consent
| Name | Type | Purpose | Duration |
|---|---|---|---|
gedeondsp_consent |
Local storage (localStorage) | Remember your cookie choice so you are not asked again on every page | 6 months |
This storage is strictly necessary to honour your choice: it cannot be disabled and enables no tracking.
8.2 Trackers subject to consent
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* |
Google Analytics | Anonymous audience measurement: number of visitors, pages viewed, traffic sources | 13 months maximum |
These cookies are set only if you click "Accept all". If you decline, or make no choice, no measurement script is loaded.
8.3 Changing your choices
You may change your decision at any time by clicking Cookie settings (also available at the bottom of every page). In any case, your choice is requested again after 6 months.
You can also configure your browser to block or delete cookies: Chrome, Firefox, Safari, Edge.
9. Your rights
Under Articles 15 to 22 of the GDPR, you have the right to:
- Access — confirm whether your data is being processed and obtain a copy;
- Rectification — have inaccurate or incomplete data corrected;
- Erasure — request deletion of your data, subject to legal retention obligations (invoices);
- Restriction — request the temporary freezing of a processing operation;
- Portability — receive your data in a structured, machine-readable format;
- Object — object to processing based on legitimate interest;
- Withdraw consent — at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, write to support@gedeondsp.com describing your request. You will receive a reply within one month. Proof of identity may be requested in case of reasonable doubt.
10. Complaints
If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — cnil.fr, or with the supervisory authority of your country of residence.
11. Changes
This policy may be updated to reflect changes to the site or to the law. The last update date appears at the top of this page. If a substantial change affects trackers, your consent will be requested again.