Privacy Policy

The only collection point on this site is the contact form at the bottom of the page. The following data is gathered there:

- Name (required)

- Email address (required)

- Phone number (optional)

- Message content (required)

No data is collected without your knowledge outside of this form: this site uses no Google Analytics, no audience measurement tool, no behavioural tracking script and no advertising cookie.

When you submit the form, the IP address of your request and your User-Agent may be logged by the technical subprocessors (see section 4) for anti-spam filtering and security logging purposes.

Data submitted via the form is used exclusively to:

- Reply to your contact, audit or quote request

- Discuss the qualification of your need and prepare a possible engagement

- Keep a record of our exchanges in case of a subsequent contractual relationship

Your data is never sold, exchanged, nor used for automated commercial prospecting to third parties.

The processing of your data through the form is based on your explicit consent (art. 6.1.a GDPR), materialised by the voluntary submission of the form after reading this policy.

For pre-contractual exchanges and the preparation of an engagement, the legal basis is the performance of pre-contractual measures taken at your request (art. 6.1.b GDPR).

The only recipient of form data is the data controller, via the technical subprocessor in charge of its reception:

- Formspark, operated by Trampoline Software SRL (Belgian company). Data stored in Ireland (EU). Receives the form content and forwards it by email to the controller.

Static hosting of the site files is provided by Hetzner Online GmbH (Germany, EU), which never receives the form content (the form is posted directly to Formspark from your browser).

These subprocessors have their own privacy policies, which you may refer to.

Form data is not transferred outside the European Union: Formspark is a Belgian company whose data is stored in Ireland, and the static hosting is located in Germany.

Sole exception: the interactive map in the contact section, provided by Mapbox (mapbox.com, United States), may transmit your IP address and User-Agent to Mapbox servers when you scroll the page down to it. This transmission is strictly limited to map rendering (tile downloads) and includes no form data.

Data from the contact form is retained for three (3) years from our last exchange, in line with CNIL recommendations for B2B commercial prospecting.

Beyond that, it is deleted or anonymised. In case of a contractual relationship, the data strictly necessary for accounting and tax obligations is retained for the applicable legal duration (generally 10 years for accounting records).

In accordance with articles 15 to 22 GDPR, you have the following rights over your data at any time:

- Right of access: obtain confirmation that your data is being processed and receive a copy

- Right to rectification: have inaccurate or incomplete data corrected

- Right to erasure ("right to be forgotten"): request the deletion of your data

- Right to restriction of processing

- Right to object to processing

- Right to data portability

- Right to withdraw your consent at any time, without affecting the lawfulness of previous processing

To exercise any of these rights, use the contact form and specify the nature of your request. A reply will be provided within one month at the latest.

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at www.cnil.fr.

This site sets no audience measurement, advertising or behavioural tracking cookies. No consent banner is therefore required.

The only third-party element loaded is the interactive map in the contact section, which relies on the Mapbox service (mapbox.com). This map is only downloaded on demand, when it enters your viewport, and may set technical cookies strictly necessary for its operation (vector rendering, tile caching). If you never scroll to the contact section, Mapbox is never called.

The CMS administration interface (/admin/) uses the browser's local storage (localStorage) to memorise your GitHub authentication token. This interface is only used by the site administrator.

The entire site is served over HTTPS (TLS encryption). The site is statically generated: no database is exposed publicly, and no application engine is executed server-side in response to visitor requests.

Access to the content editing interface is protected by GitHub authentication via Personal Access Token (PAT) and restricted to the sole site administrator.

This privacy policy may evolve to reflect changes in technical subprocessors, in applicable regulations, or in processing methods. The date of the last update is indicated at the top of this page.