Privacy Policy

  • Data Protection & Privacy

    We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR).

    1. Who We Are (Data Controller)

    [Client Business Name] is the Data Controller responsible for personal data collected through this website. Contact: [contact@client-domain.com], [Client Registered Address, EU]. Technical hosting and form processing services are provided by our EU hosting processor, Webcee Platform.

    2. Information We Collect

    When you submit our contact form, we collect your name, email address, message content, submission timestamp, a privacy-preserving cryptographic hash of your IP address (salted and non-reversible), and an automated bot-verification pass token. We do not use tracking cookies, advertising trackers, or third-party analytics scripts on this website.

    3. Purpose & Legal Basis for Processing

    We process your personal data under the legal basis of Legitimate Interests (GDPR Art. 6(1)(f)): to read, manage, and respond to your direct inquiries and requests for services, and to maintain website security and availability by preventing automated spam and malicious abuse.

    4. Data Storage, Sovereignty & Sub-processors

    All personal data is processed and stored strictly within the European Union (EU) on sovereign infrastructure: Webcee Platform / Scaleway SAS (Paris, France) for secure container execution, encrypted database storage and transactional email routing, and Bunny.net (Slovenia, EU) for edge delivery, DDoS mitigation and firewall protection. We do not transfer your personal data outside the EU / EEA or share it with third-party advertisers.

    5. Data Retention

    Contact form submissions are securely retained in our database for 12 months from submission to facilitate business communication. Submissions older than 12 months are permanently deleted by an automated daily purge job.

    6. Your Data Subject Rights

    Under the GDPR, you have the right of access, rectification, erasure and to object to processing based on legitimate interests. To exercise these rights, please email us at [contact@client-domain.com] with the subject line "Data Subject Request". We will respond within 30 days. You also have the right to lodge a complaint with your local EU Data Protection Authority.