Privacy Policy
Translation notice. This document is a courtesy English translation of the French-language "Politique de confidentialité". Only the French version has legal force. In the event of any discrepancy or conflict of interpretation between the two versions, the French version prevails.
This Privacy Policy describes how AnyoneDream processes the personal data of users of the website anyonedream.com, in accordance with Regulation (EU) 2016/679 ("GDPR") and French Act No. 78-17 of 6 January 1978, as amended.
Article 01Data Controller
The data controller is:
AnyoneDream, SAS, Paris Trade and Companies Register 101 103 398, registered office at 49 rue de Saussure, 75017 Paris, represented by its Publication Director, Édouard-Alexandre VAN GREMBERGEN.
Contact for any question relating to personal data: contact@anyonedream.com.
Article 02Data Collected
Data provided by the User:
first name, sex, occupation, hobbies, dream;
photograph (selfie);
delivery address, email address.
Technical data:
IP address, browser and device type;
pages visited, cookies and trackers (see Article 10).
Derived data:
generated comic book, order history.
Article 03Purposes and Legal Bases
Generating the comic book from the photographs: Explicit consent (Art. 6(1)(a)).
Order processing, delivery, invoicing: Performance of the contract (Art. 6(1)(b)).
Managing the customer relationship and customer service: Legitimate interest (Art. 6(1)(f)).
Audience measurement and Service improvement: Legitimate interest (Art. 6(1)(f)) or consent depending on the tracker.
Commercial prospecting: Separate consent (Art. 6(1)(a)).
Compliance with legal and accounting obligations: Legal obligation (Art. 6(1)(c)).
Article 04AI Processing - Specific Information
To generate your comic book, your data (information provided and photograph) is transmitted to artificial intelligence providers, acting as processors, for scenario generation and image processing. This processing may involve a transfer of data outside the European Union, subject to appropriate safeguards (see Article 6).
The photographs transmitted are not used to train the AI models (opt-out enabled with the providers).
Important information: once the Content has been generated, it is not technically possible to remove the data from a result that has already been produced. The source data is retained and deleted in accordance with the periods indicated in Article 7.
The results generated by these third-party services are produced automatically from the data provided. AnyoneDream does not control these providers' internal algorithms and implements a quality-control and art-direction process; the final result remains subject to the capabilities and limits of the AI technologies used.
Article 05Recipients and Processors
Data is only accessible to authorised staff of the Publisher and to the following categories of processors, strictly for the purposes described:
artificial intelligence providers (scenario generation and image processing);
secure payment provider;
printing and delivery provider;
Website hosting provider.
Each processor is bound by a data processing agreement (DPA) compliant with Article 28 of the GDPR. Data is neither sold nor transferred to third parties for commercial purposes.
Article 06International Transfers
Data is mainly processed within the European Union. Some processing involves a transfer to the United States. Such transfers are subject to appropriate safeguards within the meaning of the GDPR, such as the EU–US Data Privacy Framework where the provider is certified and/or the European Commission's standard contractual clauses. No transfer is made to a country that does not provide adequate safeguards.
Article 07Retention Periods
Source photographs: Period necessary for the order and to handle any dispute, and no later than 12 months after delivery.
Other personal data provided (first name, etc.): 12 months after delivery.
Order and invoicing data: 5 years (accounting and legal obligation).
Audience-measurement cookies and trackers: 13 months maximum (CNIL recommendation).
Prospecting data: 3 years from the last contact.
At the end of these periods, the data is deleted or anonymised.
Article 08Your Rights
In accordance with the GDPR, you have the following rights:
right of access (Art. 15);
right to rectification (Art. 16);
right to erasure (Art. 17);
right to restriction of processing (Art. 18);
right to data portability (Art. 20);
right to object (Art. 21);
right to withdraw your consent at any time (Art. 7(3)), without affecting the lawfulness of processing carried out before withdrawal;
right to set instructions regarding the fate of your data after your death.
To exercise these rights: contact@anyonedream.com. A response will be provided within a maximum of one month, which may be extended by two months for complex requests. Proof of identity may be requested in the event of reasonable doubt.
You also have the right to lodge a complaint with the CNIL – 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 – www.cnil.fr.
Article 09Security
The Publisher implements appropriate technical and organisational measures to protect data: encryption of communications (SSL/TLS), strict access control, secure storage and access logging.
Photographs are used solely as a visual reference for generation: they are not subject to any biometric identification processing.
Article 10Cookies and Trackers
The Website uses cookies and trackers:
strictly necessary cookies for the operation of the Website: placed without consent;
audience-measurement cookies and advertising cookies: placed only after your consent has been obtained.
You may give, refuse or withdraw your consent at any time via the cookie banner or the "Manage my cookies" link in the footer. The lifespan of cookies does not exceed 13 months and consent is requested again upon expiry of this period.
Article 11Amendment of the Policy
This Policy may be amended at any time to reflect legal, regulatory or technical developments. In the event of a material change, the users concerned will be informed by email and/or by a visible notice on the Website. The applicable version is the one in force on the date of consultation.