Four processing activities, and nothing else.
The data controller is A.MORVAN, a SASU whose registered office is at 12 avenue Le Nôtre, 78170 La Celle-Saint-Cloud. The legal notice gives its full registration details.
Audience measurement
| What is recorded | The address of the page you view and of the page you came from. No cookie, no identifier, no profile. |
| Why | To know which pages are read, so we can improve them. |
| Legal basis | Legitimate interest, Article 6(1)(f) GDPR (RGPD). |
| Retention | 13 months. |
Booking a meeting
| What is recorded | Your name, your email address, the time slot you choose and whatever you write in the form, when you book a call. The calendar opens on calendly.com, in a new tab. |
| Why | To hold the meeting and reply to you. |
| Legal basis | Pre-contractual measures taken at your request, Article 6(1)(b). |
| Retention | 3 years after our last exchange. |
Direct correspondence
| What is recorded | What you send us when you write by email or via LinkedIn, and nothing more. |
| Why | To handle your request and keep track of the conversation. |
| Legal basis | Legitimate interest, Article 6(1)(f). |
| Retention | 3 years after our last exchange. |
Review access
| What is recorded | A token stored in your browser's local storage, only if you have received a review link. It opens the page annotation tool. |
| Why | To collect feedback from people invited to review a page. |
| Legal basis | Legitimate interest, Article 6(1)(f). |
| Retention | Until you clear this site's data in your browser. |
What this site does not do.
No advertising cookies. The site does not set a single one, and therefore does not ask for your consent to set any.
No social media pixels. Not Meta, not LinkedIn, not X. The links to our accounts are links, not trackers.
No profiling. Your visits are not linked to one another, to a person or to a segment.
No automated decision-making. Nothing that concerns you is decided by algorithmic processing.
No resale. Your data is never transferred, rented or traded.
No unsolicited messages. Writing to us to start a conversation does not sign you up to any mailing list.
Who receives what, and where.
Running a website requires service providers. Here are the four involved, what reaches them, and the country they operate from. Transfers outside the European Union are governed by the European Commission's standard contractual clauses or by the EU-U.S. Data Privacy Framework.
| Railway Corporation | Hosts the pages and the server's technical logs, including IP addresses, for as long as needed for operation and security. United States. |
| Cloudflare, Inc. | Delivers the pages and filters attacks. Processes the request's IP address for that purpose. United States. |
| Calendly LLC | Runs the booking calendar, opened in a new tab from the site's buttons. Its own policy then applies. United States. |
| Google Ireland Limited | Serves the site's fonts. Your IP address reaches it when the page loads. This service sets no cookies. Ireland, United States. |
Your rights, and how to exercise them
You have the right to access, rectify, erase, restrict, object to and port the data concerning you. You can also set instructions regarding what happens to your data after your death.
Requests can be sent to bonjour@designbrain.fr, or by post to the registered office given in the legal notice. We reply within 1 month. No proof of identity is requested by default: it is requested only if there is reasonable doubt about the requester's identity.
If you are not satisfied with our reply, you can refer the matter to the Commission nationale de l'informatique et des libertés (CNIL), the French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or file a complaint on cnil.fr.
Cookies and local storage
The site does not set any cookies. The audience measurement described above works without them, which exempts it from collecting your consent under Article 82 of the French loi Informatique et Libertés (Data Protection Act).
Two exceptions, both at your initiative. Calendly applies its own policy if you book a slot from its site. The review token is written to your browser's local storage if you open a review link; clearing this site's data removes it.
Security and confidentiality
Communications with the site are encrypted in transit. Access to contact data is limited to the people who need it to reply, and no service provider uses it for its own purposes.
Changes to this page
This policy evolves with the site. The date at the top shows the latest version; changes affecting your rights or the purposes of processing will be announced on the home page.