Privacy policy

In short

• Audience measurement only with your consent: Google Analytics is only loaded if you click "Accept". Otherwise, no cookies. Never any advertising.
• A single form: the brief on the Contact page. It reaches me by email and is not stored in any database on the site.
• No resale, and no sharing of your data for commercial purposes.

Data controller

David Joao, sole trader (entrepreneur individuel), SIREN 852 431 980. Contact: contact@davidjoao.com.

Data collected

When you send the brief: your answers to the questions, your name, your email address and, if you provide them, your company and your role. Only the email address is required, so that I can reply to you.

To protect the form against abuse: the server computes a fingerprint of your IP address (a hash); the address itself is not stored. This fingerprint is used to limit the number of submissions within one hour, then it is deleted automatically.

Technical logs: like any host, Hostinger logs connections to the server (IP address, date, page requested) to keep the service secure and running properly, under its own retention policy.

If you accept audience measurement: Google Analytics 4, loaded by Google Tag Manager, records the pages viewed, the landing page and the source of the visit (search engine, link), the length of the visit, the type of device and browser, an approximate location (the city, inferred from the IP address, which Google Analytics does not keep) and a few actions: a click on the phone number or email address, starting and sending the brief. The content of your answers to the brief is never sent to Google.

Fonts and images are served from this website: without your consent to audience measurement, no request is sent to Google or any other third-party service during your visit.

Why, and on what legal basis

Replying to your request

Reviewing your brief, replying to you and, if you wish, preparing a proposal. Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).

Securing the form

Limiting automated submissions and abuse. Legal basis: legitimate interest in protecting the site (Article 6(1)(f) GDPR).

Measuring the audience

Knowing which pages are useful and where visitors come from, in order to improve the site. Legal basis: your consent (Article 6(1)(a) GDPR and Article 82 of the French Data Protection Act, loi Informatique et Libertés), which you can withdraw at any time.

Your data is never used for automated direct marketing or for profiling.

Who has access

Only me. The brief passes through the website's server and mail service, hosted by Hostinger International Limited (61 Lordou Vironos Street, 6023 Larnaca, Cyprus, European Union), which acts as a technical processor.

If you accept audience measurement, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) processes browsing data on my behalf. Some of it may be transferred to Google LLC in the United States, which is certified under the EU–US Data Privacy Framework.

How long

Brief and correspondence

Three years from our last exchange, then deleted. If we work together, the data needed for the project is kept for the duration of the relationship and of the legal obligations attached to it.

IP address fingerprint

One hour.

Visit statistics

Fourteen months in Google Analytics, then deleted.

Your cookie choice

Six months, in your browser. After that, the site asks you again.

Draft of the brief

Saved only in your browser (local storage), never on the server. It is erased as soon as the brief is sent, and you can erase it at any time by clearing the site's data in your browser.

Cookies

On your first visit, a banner offers you audience measurement. "Decline" is as easy as "Accept", and declining changes nothing about your visit. Until you accept, no cookie is set and Google Tag Manager is not loaded.

_ga

Google Analytics cookie, set only if you accept: tells visitors apart anonymously. Thirteen months at most.

_ga_<identifier>

Google Analytics cookie, set only if you accept: keeps the state of the current visit. Thirteen months at most.

dj-consent

Your browser's local storage, not a cookie: remembers your choice so you are not asked again on every page. Six months.

Draft of the brief

Your browser's local storage: only there so you don't lose what you have written.

To change your mind at any time, use the "Cookies" link at the bottom of every page. If you decline after accepting, the Google Analytics cookies are deleted.

Your rights

At any time, you can ask to access your data, have it corrected or erased, restrict its processing, object to it, or receive a copy of it (portability). Write to contact@davidjoao.com: I reply within one month at most.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority, at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at www.cnil.fr.