Last updated: 20 September 2026

This policy explains what personal data is collected through artofdarkness.eu, why it is collected and what happens to it. It covers this website only. It does not cover the wider activities of the Art of Darkness project or of its individual partners.

Who is responsible

The website is published by LUCI Association, 6 place Louis Chazette, 69001 Lyon, France. LUCI Association is the data controller for the personal data collected here. For any question about this policy, or to exercise your rights, write to luci@luciassociation.org.

What we collect, and why

Contact forms

When you use a form on this site, we collect the information you enter, which includes your name, your email address and your message. It is used only to answer you. Submissions are stored in the website database and forwarded by email to the project team. They are kept for three years after our last exchange with you, then deleted. Legal basis: your consent, given when you send the form.

Comments

If you leave a comment, we store the name, email address and website you provide, along with your IP address and the identification string of your browser, which help us detect spam. An anonymised string created from your email address (a hash) may be sent to the Gravatar service, operated by Automattic Inc., in order to display your avatar. Comments and their metadata are kept for as long as the comment remains published. Legal basis: our legitimate interest in moderating public discussion on the site.

Audience measurement

We use Google Analytics 4, operated by Google Ireland Ltd., and Jetpack Stats, operated by Automattic Inc., to understand how the site is used: pages viewed, approximate origin of the visit, type of device. Neither tool is loaded before you accept statistics cookies. If you decline, or simply close the banner, no measurement script runs and no measurement cookie is placed. Google Analytics data is kept for a maximum of fourteen months. Legal basis: your consent.

Translation

The language selector is provided by GTranslate. When you choose a language, your browser sends the page content and your IP address to Google’s translation service so that the translation can be produced. If you do not use the selector, no translation request is made.

Server logs

Like every website, this one records each request in a technical log: IP address, date and time, address requested, response code and browser identification string. These logs are used only to keep the site secure and to investigate incidents. They are kept for a maximum of twelve months. Legal basis: our legitimate interest in the security of the service.

Cookies

Only cookies needed to display the site and to remember your consent choice are placed without your agreement. Everything else waits for it. The full list, with the purpose and lifetime of each cookie, is in our Cookie Policy.

You can change your choice at any time here:

Who else sees your data

We do not sell personal data and we do not use it for advertising. Beyond the project team, your data may be handled by the following service providers, each acting on our instructions:

  • OVH SAS (France): hosting of the website, on servers located in France.
  • Harvest (Lyon, France): technical maintenance of the website.
  • Brevo (France): delivery of the emails the website sends.
  • Google Ireland Ltd.: audience measurement, subject to your consent.
  • Automattic Inc.: Jetpack statistics, subject to your consent, and the Gravatar avatar service.

Transfers outside the European Union

Google and Automattic are groups based in the United States and part of the data they process on our behalf may be transferred there. These transfers are covered by the European Commission’s adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, and by standard contractual clauses where that framework does not apply.

Your rights

Under the General Data Protection Regulation you may ask us for access to your data, for its correction or erasure, for the processing to be restricted, or for your data to be sent to you in a portable form. You may object to any processing based on our legitimate interest, and you may withdraw your consent at any time where the processing rests on it.

Write to luci@luciassociation.org. We answer within one month. If you feel your request has not been handled properly, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Security

The site is served over an encrypted connection (HTTPS), its software is kept up to date, and access to its administration is limited to a small number of named accounts.

Changes to this policy

If this policy changes, the new version is published on this page and the date at the top is updated.