Data Controller
The data controller responsible for processing your personal data is:
- Tom Durand-Gasselin
- Paris, France
- tom.durand-gasselin@outlook.com
Data Collected & Purposes
The following personal data is collected and processed on this site:
| Data | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Contact form (name, email, message) | Responding to inquiries | Legitimate interest | 3 years |
| Purchase email address | Order confirmation & delivery | Contract performance | 5 years |
| Payment data (via Stripe) | Payment processing | Contract performance | Stripe policy |
| IP address (server logs) | Security & abuse prevention | Legitimate interest | 90 days |
| Analytics cookies (opt-in) | Site performance metrics | Consent | Session |
Third-Party Transfers
Your data may be transferred to the following third-party processors:
- Stripe, Inc. (USA) — Payment processing. Data transferred to the USA under Standard Contractual Clauses (SCCs).
- Resend — Transactional email delivery.
All transfers outside the EEA are carried out under Standard Contractual Clauses approved by the European Commission, or equivalent safeguards.
Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access — obtain a copy of your data.
- Right of rectification — correct inaccurate data.
- Right of erasure — request deletion of your data.
- Right of portability — receive your data in a structured format.
- Right to object — oppose processing based on legitimate interest.
To exercise your rights, please contact: tom.durand-gasselin@outlook.com
You also have the right to lodge a complaint with the CNIL (French data protection authority) at cnil.fr
Contact
Data protection enquiries: tom.durand-gasselin@outlook.com