1. Data controller
The data controller is:
Auto-Entreprise Web Online Concept
Rue Paul Estival, 31200 Toulouse, France
SIRET: 510 583 800 00048
Email: contact@pronos.club
2. Data collected
The following data may be collected when using the site:
• During registration: email address, username (optional), avatar (optional).
• During Premium subscription: payment data is processed directly by Stripe. The publisher does not store any banking data.
• During site use: notification preferences, followed predictions history, personal bankroll configuration.
• Technical data: IP address, browser type, connection data (for security and service improvement purposes).
3. Processing purposes
Personal data is collected for the following purposes:
• User account management and authentication.
• Service provision (access to predictions, personal space customization).
• Subscription management and billing via Stripe.
• Sending notifications (email, push) according to user preferences.
• Managing access to the Premium Telegram group.
• Service improvement and anonymized usage statistics.
4. Legal basis for processing
Processing is based on:
• Contract execution (Article 6.1.b GDPR): registration, subscription, service provision.
• Consent (Article 6.1.a GDPR): email notifications, non-essential cookies.
• Legitimate interest (Article 6.1.f GDPR): site security, fraud prevention, service improvement.
5. Subprocessors and data transfers
Data may be transmitted to the following subprocessors, strictly within the scope of service provision:
• Supabase (Singapore/EU) — database hosting and authentication.
• Vercel (United States) — website hosting.
• Stripe (United States) — payment processing.
• Brevo (France) — transactional emails and notifications.
• Telegram (United Arab Emirates) — Premium discussion group management.
Data transfers outside the European Union are governed by the European Commission's standard contractual clauses and/or the EU-US Data Privacy Framework.
6. Data retention
• Account data: retained for the duration of the account's existence, then deleted within 30 days of a deletion request.
• Payment data: retained in accordance with legal accounting obligations (10 years).
• Connection data: retained for 12 months in accordance with applicable legislation.
• Cookies: maximum duration of 13 months.
7. User rights
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
• Right of access: obtain confirmation that data concerning you is being processed and obtain a copy.
• Right of rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data.
• Right to portability: receive your data in a structured, commonly used and machine-readable format.
• Right to object: object to the processing of your data on legitimate grounds.
• Right to withdraw consent: withdraw your consent at any time (notifications, cookies).
To exercise your rights, contact us at contact@pronos.club. We will respond within 30 days.
In case of a complaint, you may contact the CNIL (French National Commission on Informatics and Liberty): www.cnil.fr.
8. Cookies
The site uses cookies strictly necessary for the operation of the service:
• Authentication cookie: maintains your login session (duration: 7 days).
• Site protection cookie: verifies site access during testing phase (removed at public launch).
These cookies are essential for the site to function and do not require your prior consent. No advertising or tracking cookies are used.
If Google Analytics is enabled in the future, a consent banner will be implemented in accordance with CNIL recommendations.
9. Security
The publisher implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction or alteration. Authentication is performed via magic link without password storage. Communications are encrypted via HTTPS (TLS 1.3). Payment data is processed exclusively by Stripe (PCI DSS Level 1 certified).
