Template document generated with Forge, drafted under French law. It is not legal advice: have it reviewed and adapted by a legal professional before publishing it, then remove this warning.
Privacy policy
Last updated: 13 October 2026
Who is responsible for your data
The controller of the data collected on [To complete: site name] is [To complete: data controller name], [To complete: address]. This policy explains which data is collected, why, how long it is kept and how to exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.
For any question about your data, write to [To complete: contact email address].
Data collected and purposes
Only the data needed for each purpose is collected. Required form fields are marked; without them, the request cannot be handled.
| Purpose | Legal basis | Data | Retention period |
|---|---|---|---|
| Answering messages sent through the contact form or by email | Legitimate interest in answering the requests received | Name, email address, phone number if given, message content | As long as needed to handle the request, then 3 years from the last contact |
| Keeping the site secure and preventing fraud | Legitimate interest in protecting the site and its users | IP address, connection logs, technical browser data | 1 year |
Recipients
Your data is only available to authorised staff of [To complete: data controller name]. It may be shared with service providers acting on its behalf, bound by contract and by confidentiality:
- [To complete: host name], website hosting
Your data is never sold or rented.
Transfers outside the European Union
Your data is hosted and processed within the European Union.
Your rights
You have the following rights over your data:
- access, rectification and erasure;
- restriction of processing and objection, including to direct marketing at any time;
- portability of the data you provided;
- withdrawal of your consent, without affecting processing already carried out;
- instructions on what happens to your data after your death.
To exercise them, write to [To complete: contact email address]. You will receive an answer within one month, which may be extended by two months for complex requests. Proof of identity may be requested where there is reasonable doubt.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr.
Security
Appropriate technical and organisational measures protect your data: encrypted connection (HTTPS), restricted access, regular backups and updates.
Cookies
The use of cookies and how to change your choices are described in the cookie policy.
Changes to this policy
This policy may be updated to reflect changes to the site or to the law. The date of the last update is shown at the top of the page.