Privacy | POL Studio

The short version

The site sets no cookies and loads no third-party script. Fonts and audience measurement are served from this domain.
The only data you actively provide is the contact form: it is used to reply to you, and nothing else.
No data is sold, rented or used for automated prospecting. No profiling, no automated decision-making.

Data controller

POL Studio, Entrepreneur individuel. For any question about your data: contact@polstudio.fr.

Processing activities

1. Answering a contact enquiry

Data: full name, email address, company (optional), type of enquiry (optional), message content.
Purpose: to read your enquiry, reply to it and, where relevant, prepare a proposal.
Legal basis: legitimate interest (article 6(1)(f) GDPR), responding to an enquiry you initiated. No consent checkbox is imposed: consent that conditions submission of the form would not be freely given, and therefore would not be valid.
Mandatory fields: fields marked with an asterisk are needed to handle the enquiry. Without them, no reply is possible.
Retention: 36 months from the last exchange, then deletion. If the enquiry leads to a contract, the data moves under accounting and contractual retention rules (10 years, article L. 123-22 of the French Commercial Code).

2. Server security and operation

Data: IP address, request date and time, requested page, response code, user agent, in the web server's technical logs.
Purpose: detecting abuse (bulk submissions, intrusion attempts) and diagnosing failures.
Legal basis: legitimate interest (article 6(1)(f)).
Retention: 12 months maximum, in line with the French data protection authority's recommendation on technical logs.

3. Audience measurement

Measurement is handled by Umami, installed on this site's own server. No data goes to a third party, and the script is served from this domain.

Data: pages viewed, referring page, country derived from the IP address, device type, browser and operating system, screen size. Usage events are added to that: how far down a page you read, which buttons you click, which questions you open in the FAQ, which answers you pick in the project sketch, and which contact form fields you reach. What you type into those fields is never sent to the measurement.
No cookie, no persistent identifier: two visits by the same person a day apart are not linked, and no tracking across sites is possible. The IP address is not retained: it only feeds a temporary fingerprint that changes every day.
Purpose: understanding which pages are useful and where reading stops, in order to improve the site.
Legal basis: legitimate interest (article 6(1)(f)). Consent is not required because the measurement meets the exemption conditions of article 82 of the French Data Protection Act: strictly limited to audience measurement, for the publisher only, with no cross-referencing and no transfer to third parties.
Retention: aggregated data, 25 months maximum.

Opting out

The button below turns measurement off for good in this browser. To do that it stores a local preference, and nothing else: it is the only thing this site keeps in your browser, and it is never sent to the server. Measurement also honours your browser's “Do Not Track” setting if you have enabled it.

Recipients

Your data is accessible only to the controller and to the technical providers needed to run the service. No other transfer takes place. No data leaves the European Union.

OVH SAS: hosting of the site and technical logs (France).
OVH SAS: delivery of emails sent from the form (France).

Audience measurement is not on this list: it runs on the same server as the site, so there is no additional processor.

Cookies

This site sets no cookies: no measurement, no advertising, no personalisation. No consent banner is therefore needed.

Your rights

Regarding data about you, you have a right of access, rectification, erasure, restriction and portability, and a right to object to processing based on legitimate interest. To exercise them, write to contact@polstudio.fr. You will receive a reply within one month, extendable by two months for complex requests, and you will be told if that happens.

If the response you receive does not satisfy you, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr. If you reside in another EU member state, you may also contact your local supervisory authority.

Security

Traffic to the site is encrypted (HTTPS) and access to received messages is restricted to the controller. The form uses no third-party CAPTCHA: protection against automated submissions is handled locally.