Privacy & cookie policy
This policy explains which personal data is collected on the website https://rivierawebstudio.com and in dealings with Riviera Web Studio, why, for how long, and what your rights are.
1. Who is responsible for your data?
The data controller is Abel Goupil, sole proprietorship (entrepreneur individuel, micro-entrepreneur regime), France, trading as “Riviera Web Studio”, SIRET (French business registration number) 839 289 063 00035, business address: 6 rue Nationale, 28140 Orgères-en-Beauce. For any question about your data: contact@rivierawebstudio.com.
2. Which data, and what for?
Contact form
When you use the contact form, you provide your name, your email address and your message. This data is sent by the Web3Forms service to the mailbox contact@rivierawebstudio.com, solely to reply to your request. Legal basis: pre-contractual steps taken at your request and the legitimate interest in replying to messages received (Article 6.1.b and 6.1.f of the GDPR).
Booking a call
Calls are booked through the Calendly service (https://calendly.com/abel-goupil-contact/30min), displayed on the site in an embedded frame (iframe). The information you enter there (name, email address, chosen time slot, any details) is collected by Calendly, which is responsible for its own processing and applies its own privacy policy. Riviera Web Studio receives this information in order to prepare and hold the call. Within its frame, Calendly may set the cookies needed for its own operation.
Email and telephone
If you write to contact@rivierawebstudio.com or call +33 7 67 17 45 99, the information you provide (identity, contact details, content of the exchange) is used to reply to you and, where relevant, to prepare a quote.
Clients
If you become a client, the data needed for the quote, the building of the website, invoicing and follow-up is processed: identity and business contact details, invoicing data, correspondence, content you send. Legal bases: performance of the contract (Article 6.1.b of the GDPR) and accounting and tax obligations (Article 6.1.c).
Technical data
To display and secure the site, the host (Cloudflare, Inc.) processes technical connection data, including your IP address. Legal basis: the legitimate interest in keeping the site running and secure (Article 6.1.f of the GDPR).
Your data is not sold, rented or used for automated decision-making or profiling.
3. How long is your data kept?
- Contact requests and exchanges that do not lead to a sale: no more than three (3) years after the last contact.
- Client data: for the duration of the contractual relationship, then five (5) years, the statutory limitation period.
- Invoices and accounting documents: ten (10) years.
- Cookie choices, if the banner is enabled: six (6) months, in your browser.
4. Who has access to your data?
Your data is intended for Abel Goupil. It is also processed, on his behalf or for the purposes of their own service, by the following technical providers, to the extent necessary:
- Web3Forms: delivery of contact form messages;
- Calendly: booking of calls;
- Cloudflare, Inc.: hosting of the site;
- the email and invoicing tool providers used for the business.
Lastly, it may be disclosed to the authorities where the law so requires.
5. Does your data leave the European Union?
Some of these providers are established outside the European Union, in particular in the United States, or may process data there. These transfers are covered by an adequacy decision of the European Commission (EU–US Data Privacy Framework, for companies certified under it) or, failing that, by the European Commission’s standard contractual clauses. You can ask for details at the address given above.
6. Cookies and trackers
Today: no trackers
On the date of this version, the site does not set any analytics or advertising tracker, and therefore does not display any consent banner. Your browsing is not followed by any analytics tool.
Fonts are hosted on the site itself: displaying them does not trigger any request to Google Fonts or to any other third-party service.
If measurement tools are enabled later
The site is designed so that it could, in the future, use the following tools: Google Tag Manager and Google Analytics (audience measurement), Microsoft Clarity (analysis of how pages are used), Meta Pixel and LinkedIn Insight Tag (measurement of advertising campaigns). None of them is active today.
If they were enabled, the following rules would apply:
- a consent banner would be displayed on your first visit;
- all these tools would be refused by default: none would be loaded before you agree, and refusing would be as easy as accepting;
- your choice would be kept for six (6) months in your browser (local storage, key “rws_consent_v1”), then requested again;
- you could change or withdraw your choice at any time, from a link on the site;
- this policy would be updated to state which tools are actually used.
7. How is your data protected?
The site is served exclusively over an encrypted connection (HTTPS). Access to messages and client data is limited to the data controller and protected by appropriate authentication.
8. What are your rights?
Under the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:
- the right to access your data and to obtain a copy of it;
- the right to have inaccurate or incomplete data rectified;
- the right to have your data erased;
- the right to restrict processing;
- the right to object to processing based on legitimate interest;
- the right to portability of the data you have provided;
- the right to withdraw your consent at any time, where processing is based on it;
- the right to set instructions on what happens to your data after your death.
9. How to exercise your rights
Write to contact@rivierawebstudio.com, or by post to the following address: Abel Goupil, Riviera Web Studio, 6 rue Nationale, 28140 Orgères-en-Beauce. You will receive a reply within one month. Proof of identity may be requested if there is reasonable doubt about your identity.
If, after getting in touch, you consider that your rights are not being respected, you can lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL): www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
10. Changes to this policy and language
This policy may be updated, in particular if new tools are used on rivierawebstudio.com. The date of the version in force appears at the top of the page.
This English translation is provided for information only: the French version is the only binding version and prevails in the event of any discrepancy.