Privacy Policy

1. Data Controller

The data controller responsible for personal data collected on this website is:

• Mathis Poulet
• Website: mathispoulet.com
• Email: contact@mathispoulet.com

2. Data Collected and Purposes

This website only collects personal data when you use its contact forms. The following data may be collected:

• First and last name — to identify the sender
• Email address — to respond to your request
• Phone number — to contact you if needed
• Company name (optional) — context of the request
• Message — to process your request
• IP address — to prevent abuse (anti-spam, rate limiting)

This data is collected only when you voluntarily fill out a form (contact, receptive, circuit). It is used solely to respond to your requests and is not subject to any commercial or marketing processing without your prior consent.

3. Legal Basis for Processing

The processing of your data is based on your consent (Article 6.1.a GDPR), expressed by voluntarily submitting a form, as well as on legitimate interest (Article 6.1.f GDPR) for protecting the site against abuse (IP address).

4. Retention Period

Data submitted via forms is retained for as long as necessary to process your request, and for a maximum of 3 years from the last contact. IP addresses collected for anti-spam purposes are stored for a maximum of 10 minutes in memory, with no disk persistence.

5. Subprocessors and Data Transfers

Your data may pass through the following service providers, strictly for the purpose of providing their services:

• Brevo (formerly Sendinblue) — transactional email service. Headquartered in France. GDPR compliant. Brevo Privacy Policy
• Netlify — website hosting. Data hosted in the United States with adequate safeguards (DPA available). Netlify Privacy Policy

No personal data is sold, rented, or shared with third parties for commercial purposes.

6. Cookies and Trackers

This website does not use any tracking or analytics cookies (Google Analytics, advertising, etc.). No third-party cookies are placed on your device during your visit.

JavaScript scripts are used solely for the site's visual animations (transitions, display effects). These scripts are hosted on our own server and collect no data.

7. Your Rights

Under the General Data Protection Regulation (GDPR — EU Regulation 2016/679), you have the following rights:

• Right of access — obtain a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to restriction — limit the processing of your data
• Right to object — object to processing based on legitimate interest
• Right to data portability — receive your data in a structured format
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise these rights, contact us at: contact@mathispoulet.com. We commit to responding within one month.

If you believe your rights are not being respected, you may lodge a complaint with your national data protection authority. In France: CNIL — www.cnil.fr

8. Data Security

We implement appropriate technical measures to protect your data against unauthorized access, disclosure, or alteration. The site is served exclusively over HTTPS (TLS encryption). Forms include anti-spam protections (honeypot, IP-based rate limiting).

9. Policy Updates

This privacy policy may be updated to reflect legal changes or updates to the site. The date of the last update is shown at the top of this page. We encourage you to review it periodically.

10. Contact

For any questions regarding this policy or the management of your personal data, you can contact us at: contact@mathispoulet.com