Personal dataLast updated · May 24, 2026

Privacy Policy

This page describes, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, how personal data submitted through this site is collected, processed and retained.

Data controller

Identity
François Chaussin, Sole Trader (Entrepreneur Individuel)
SIRET
908 997 216 00019
Contact
Via the contact form

1. Data collected

The only collection point on this site is the contact form at the bottom of the page. The following data is gathered there:

- Name (required)

- Email address (required)

- Phone number (optional)

- Message content (required)

No data is collected without your knowledge outside of this form: this site uses no Google Analytics, no audience measurement tool, no behavioural tracking script and no advertising cookie.

When you submit the form, the IP address of your request and your User-Agent may be logged by the technical subprocessors (see section 4) for anti-spam filtering and security logging purposes.

2. Purposes of processing

Data submitted via the form is used exclusively to:

- Reply to your contact, audit or quote request

- Discuss the qualification of your need and prepare a possible engagement

- Keep a record of our exchanges in case of a subsequent contractual relationship

Your data is never sold, exchanged, nor used for automated commercial prospecting to third parties.

4. Recipients & subprocessors

The only recipient of form data is the data controller, via the technical subprocessor in charge of its reception:

- Formspark, operated by Trampoline Software SRL (Belgian company). Data stored in Ireland (EU). Receives the form content and forwards it by email to the controller.

Static hosting of the site files is provided by Hetzner Online GmbH (Germany, EU), which never receives the form content (the form is posted directly to Formspark from your browser).

These subprocessors have their own privacy policies, which you may refer to.

5. Transfers outside the European Union

Form data is not transferred outside the European Union: Formspark is a Belgian company whose data is stored in Ireland, and the static hosting is located in Germany.

Sole exception: the interactive map in the contact section, provided by Mapbox (mapbox.com, United States), may transmit your IP address and User-Agent to Mapbox servers when you scroll the page down to it. This transmission is strictly limited to map rendering (tile downloads) and includes no form data.

6. Retention period

Data from the contact form is retained for three (3) years from our last exchange, in line with CNIL recommendations for B2B commercial prospecting.

Beyond that, it is deleted or anonymised. In case of a contractual relationship, the data strictly necessary for accounting and tax obligations is retained for the applicable legal duration (generally 10 years for accounting records).

7. Your rights

In accordance with articles 15 to 22 GDPR, you have the following rights over your data at any time:

- Right of access: obtain confirmation that your data is being processed and receive a copy

- Right to rectification: have inaccurate or incomplete data corrected

- Right to erasure ("right to be forgotten"): request the deletion of your data

- Right to restriction of processing

- Right to object to processing

- Right to data portability

- Right to withdraw your consent at any time, without affecting the lawfulness of previous processing

To exercise any of these rights, use the contact form and specify the nature of your request. A reply will be provided within one month at the latest.

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at www.cnil.fr.

8. Cookies & trackers

This site sets no audience measurement, advertising or behavioural tracking cookies. No consent banner is therefore required.

The only third-party element loaded is the interactive map in the contact section, which relies on the Mapbox service (mapbox.com). This map is only downloaded on demand, when it enters your viewport, and may set technical cookies strictly necessary for its operation (vector rendering, tile caching). If you never scroll to the contact section, Mapbox is never called.

The CMS administration interface (/admin/) uses the browser's local storage (localStorage) to memorise your GitHub authentication token. This interface is only used by the site administrator.

9. Security

The entire site is served over HTTPS (TLS encryption). The site is statically generated: no database is exposed publicly, and no application engine is executed server-side in response to visitor requests.

Access to the content editing interface is protected by GitHub authentication via Personal Access Token (PAT) and restricted to the sole site administrator.

10. Policy updates

This privacy policy may evolve to reflect changes in technical subprocessors, in applicable regulations, or in processing methods. The date of the last update is indicated at the top of this page.