[ Data controller ]
The data controller is Graphen Studio, represented by Quentin Hugoo. For any question or inquiry concerning your personal data: contact@graphenstudio.com. Complete administrative and legal details are available on the legal notice page.
[ Data collected ]
Graphen Studio enforces data minimization: only information strictly required for professional relations is collected.
- Discussions and project inquiries: name, email address, telephone number, organization, and project description provided via our form or email.
- Newsletter subscription: email address.
- Client area: authentication credentials strictly required for secure project tracking.
- Technical and security logs: IP address, browser characteristics, and connection logs processed automatically by our hosting provider for the exclusive purpose of infrastructure security and threat prevention.
- Audience analytics: aggregated, anonymous performance and navigation data via Cloudflare Web Analytics, without any individual profiling.
[ Purposes and legal bases ]
Processing serves incoming inquiry handling and estimate drafting (precontractual measures), execution of global design engagements (contract), newsletter distribution to subscribed recipients (consent), web infrastructure security (legitimate interest), and accounting record maintenance (legal obligations).
[ Recipients and subcontractors ]
Data is exclusively destined for Graphen Studio. It is never sold, rented, or transferred to third parties. To operate the website, we rely solely on essential technical providers: Cloudflare for secure hosting, network delivery, and cookieless audience metrics; Google Fonts for typography display; and jsDelivr for navigation performance scripts.
[ Retention periods ]
Commercial inquiry data is kept for the time required for processing, then archived for up to three years following the last contact in the absence of a contract. Accounting and contractual documents are retained for ten years in compliance with statutory requirements. Newsletter email addresses are retained until unsubscription.
[ Transfers outside the European Union ]
Appointed technical providers operate under European compliance frameworks for international data transfers, notably standard contractual clauses approved by the European Commission.
[ Absence of advertising cookies ]
The site uses zero advertising cookies, zero commercial tracking pixels, and zero third-party profiling tools. Cloudflare Web Analytics operates without placing any cookies on your device. Only technical cookies strictly essential to security infrastructure or client area session persistence may be generated temporarily; they dissolve upon closing the browser session.
[ Security ]
Graphen Studio implements rigorous technical and organizational measures to safeguard data against unauthorized access, loss, alteration, or disclosure.
[ Your rights ]
In accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws, you retain rights of access, rectification, erasure, restriction, objection, and data portability. You may exercise these rights at any time by contacting: contact@graphenstudio.com. If you consider that your rights are not being respected, you may file a complaint with the CNIL.
[ Updates ]
This policy may evolve alongside the website, offerings, or legal regulations. The latest update date is stated at the top of the page.
