Privacy policy

Data controller

The data controller is: Discrave — Contact: nicolas@discrave.com — Data Protection Officer (DPO): not appointed at this time.

Data collected

Contact form: name, email address, organisation (optional), request type, message. This data is used solely to respond to your request.

Browsing: technical data (IP address, browser type, pages visited) for audience measurement and proper site operation, subject to your consent where required by law.

Purposes and legal basis

Data is processed to: respond to contact requests (legal basis: pre-contractual measures / consent), ensure site security and operation (legitimate interest), and, where applicable, produce visit statistics (consent). No automated decision-making or profiling is carried out.

Recipients and retention

Data is intended for the data controller and, where applicable, technical providers (hosting, email) strictly within the scope of their services. The site is hosted by Vercel. Contact form data is retained for 3 years from the last contact, then deleted or anonymised. Connection technical data is retained only as long as necessary for security and service operation.

Your rights (GDPR and French data protection law)

Under the GDPR and the French Data Protection Act of 6 January 1978 (as amended), you have the rights of access, rectification, erasure, portability, objection, restriction of processing, and withdrawal of consent where processing is based on consent.

To exercise these rights, contact us at nicolas@discrave.com. You may also lodge a complaint with the CNIL (French data protection authority): www.cnil.fr.

Cookies

The site may use cookies for technical operation, security and, where applicable, audience measurement. Strictly necessary cookies do not require your consent (Article 82 of the French Data Protection Act). Non-essential cookies (analytics, etc.) are only placed with your consent.

You can manage cookies through your browser settings. If a consent banner is shown, you can change your preferences at any time.

Audience measurement (analytics)

When audience measurement tools are used, collected data is limited to visit statistics and used to improve the service. These processes are subject to consent where required.

Transfers outside the European Union

Some technical providers may process data outside the European Union (including hosting). In such cases, appropriate safeguards are implemented in accordance with the GDPR (e.g. standard contractual clauses).

Security

Technical and organisational measures are implemented to protect your data against unauthorised access, loss or alteration, in line with best practice and GDPR obligations.

Changes

This policy may be updated to reflect changes in practice or regulation. The last updated date will be shown at the top of the page. We encourage you to review it regularly.

Applicable law and disputes

This policy is governed by French law. In case of dispute, French courts shall have exclusive jurisdiction. You may contact the CNIL at any time regarding the protection of your data.