PRIVACY POLICY – LittleBigCampus
Effective Date: October 21, 2025
This Privacy Policy describes how Little Big Campus ("we", "us", or "our") collects, uses, and protects the personal data ("Personal Data") of its users ("Users") when using the website littlebigcampus.com (the "Site") and its services, in accordance with the General Data Protection Regulation (GDPR) EU 2016/679.
1. Legal Information and Data Controller
This section defines the identity of the legal entity responsible for managing and processing user personal data (the "Data Controller"), in accordance with Article 13 of the GDPR.
Identity of the Data Controller
- Legal Entity: Sole proprietorship (Entreprise individuelle), under the trade name Little Big Campus.
- Representative: Mr. Clément VALLES (Operator).
- Address: Domiciled in France (full address available upon legitimate request to the Data Controller).
- SIRET: 51931294600022
- Status: Non-Commercial Profits regime (BNC).
- Contact:
This email address is being protected from spambots. You need JavaScript enabled to view it. (primary contact for GDPR inquiries).
Data Protection Officer (DPO)
The appointment of a Data Protection Officer is not mandatory for Little Big Campus's activities, as it does not process data on a large scale or handle sensitive data. Mr. Clément VALLES serves as the Data Controller and is the primary point of contact for exercising user rights.
Website Hosting
Website hosting and associated database storage are provided by:
- Host Name: o2switch
- Address: Chem. des Pardiaux, 63000 Clermont-Ferrand, France
- Phone Number: 04 44 44 60 40
- Website: https://www.o2switch.fr
2. Subscriptions and Payments
Little Big Campus offers paid subscriptions managed via the Membership Pro extension for Joomla.
Data Collected (Legal Basis: Performance of a Contract - Art. 6, §1, b of the GDPR)
The subscription process requires the creation of a user account and the collection of the following information, necessary for the execution of the subscription contract:
- Username (mandatory, used for public identification and comments);
- First and last name;
- E-mail address (mandatory, for account management and communications);
- Country of residence (for statistical and regulatory compliance purposes).
Little Big Campus does not collect phone numbers or any information not required for subscription management.
Payment Management
Payments are processed entirely via Stripe Checkout, operated by Stripe Payments Europe, Ltd., and, where applicable, other secure third-party providers (such as PayPal).
No banking data is stored on the LittleBigCampus website. Such data is transmitted directly to payment providers via a secure connection (SSL/TLS), complying with PCI-DSS standards imposed on online payment providers, and processed in accordance with their own privacy policies (acting as processors under the GDPR).
3. Communication and Newsletters
LittleBigCampus uses e-mail to send informational newsletters and communications reserved for subscribed members.
1. Informational Newsletter
- Legal Basis: Explicit consent (Article 6, §1, a of the GDPR).
- Data collected: E-mail address (mandatory); first name or username (optional).
- Procedure: A double opt-in procedure may be implemented.
- Unsubscribe: An unsubscribe link is included in every e-mail.
2. Subscription-related Communications (Registered Members)
- Legal Basis: Performance of the Subscription Contract (Article 6, §1, b of the GDPR).
- Purpose: Account management, notifications of content published exclusively for subscribers.
4. Comments and Interactions
Commenting features are reserved for subscribed members or crowdfunding contributors with a user account.
- Data collected: ID or username, e-mail address, message content, IP address, and timestamp (for security purposes).
- Legal Basis: Performance of a contract (Art. 6, §1, b) or Legitimate Interest (Art. 6, §1, f) for moderation purposes.
5. Contact Form
Data transmitted via the contact form is sent directly by e-mail to .
- Legal Basis: Legitimate Interest of LittleBigCampus to respond to inquiries (Art. 6, §1, f of the GDPR).
- Retention Period: Exchanges are kept for the duration necessary to process the request, then archived for a maximum of 3 years.
6. Cookies and Audience Measurement (Trackers)
The Site uses Google Tag Manager (GTM) to deploy audience measurement or advertising services, such as Google Analytics 4 (GA4).
Types of Cookies Used
- Strictly Necessary Cookies: Essential for the operation of the Site (session, cart, authentication). These do not require consent.
- Analytical Cookies: Subject to your prior consent via the cookie management banner.
Processing of Tracking Data
- Traffic data (pages viewed, time spent, traffic source) is collected in an anonymous and aggregated manner.
- Activation of analytical cookies is conditioned upon the prior consent of the user (via the cookie management banner).
- You can modify your preferences or refuse non-essential cookies at any time via your browser settings.
Data Transfer Outside the European Union (EU)
Due to the use of Google services (GA4, GTM, AdSense), user traffic and advertising data may be transferred to and stored on servers located outside the European Union, notably in the United States.
Little Big Campus ensures that these transfers are governed by appropriate safeguard mechanisms in compliance with the GDPR, such as the Standard Contractual Clauses (SCCs) of the European Commission.
7. Data Retention Period
Data is kept for the time necessary to achieve the intended purposes:
- Subscription/Account Data: For the duration of the subscription + 5 years after termination.
- Billing Data: 10 years (legal accounting obligations).
- Connection and Security Data (Logs): 12 months maximum.
- Marketing Data (Newsletter): For as long as the user remains subscribed.
- Contact Form Data: Duration necessary for processing + 3 years maximum.
7bis. Data Security
Little Big Campus implements appropriate technical and organizational measures to protect your Personal Data against destruction, loss, alteration, unauthorized disclosure, or accidental or unlawful access. These measures include:
- Encryption of connections (SSL/TLS protocol);
- Securing access to databases;
- Restricting data access to authorized personnel only.
However, no method of transmission over the Internet is entirely secure. In the event of a data breach likely to result in a high risk to your rights and freedoms, you will be informed in accordance with Article 34 of the GDPR.
8. Your GDPR Rights
In accordance with the GDPR, you have the following rights regarding your Personal Data:
- Right of Access (Art. 15): Obtain confirmation that your data is being processed and, if so, access it.
- Right to Rectification (Art. 16): Request the correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten") (Art. 17): Request the deletion of your data, under certain conditions.
- Right to Restriction of Processing (Art. 18): Request the freezing of the use of certain data.
- Right to Data Portability (Art. 20): Receive the data you provided to us in a structured, machine-readable format.
- Right to Object (Art. 21): Object at any time to the processing of your data, particularly for commercial prospecting.
- Right to Withdraw Consent (Art. 7): Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, please contact Mr. Clément VALLES (Data Controller) in writing at:
We commit to responding within one month of receiving your request.
9. Right to Lodge a Complaint (CNIL)
The user has the right to lodge a complaint with the French supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL):
- Address: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
- Website: www.cnil.fr
10. Changes to the Privacy Policy
Little Big Campus reserves the right to modify this Privacy Policy at any time, notably to comply with legislative and regulatory changes.
In the event of a substantial modification, registered users will be informed via e-mail or a notification on the Site.
The "Effective Date" will be systematically updated. We encourage you to consult this page regularly.
