Privacy policy

1. Data controller

The data controller is Christopher VALLOT, the publisher of this website. His professional contact details are provided in the legal notice. You can contact him at christopher.vallot@outlook.com or through the contact form.

2. Data processed

When you submit an enquiry, the form processes:

• Your name.
• Your company name, if you choose to provide it.
• Your email address.
• The selected type of enquiry.
• the contents of your message.

A hidden field and the time at which you started filling in the form are used only to detect automated submissions. They are discarded after the spam check. The IP address may be used as a temporary key for ten minutes to limit the number of submissions. It is not included in the email sent.

The form’s application code does not use the User-Agent and does not create a profile based on your browsing.

3. Purposes and legal bases

This data is used to:

• Receive, assess and respond to your enquiry.
• Discuss a potential assignment or collaboration.
• Prevent abusive submissions and protect the form.

Processing an enquiry about a potential future assignment is based on pre-contractual steps taken at your request. Other enquiries and spam prevention are based on the publisher’s legitimate interest in managing professional correspondence and keeping the website secure.

Information marked as required is needed to provide a useful response. Without it, the message cannot be sent. No automated decisions producing legal or similarly significant effects, and no automated prospecting, are carried out using this data.

4. Recipients and processors

Messages are intended for Christopher VALLOT. The request is processed by a function hosted by Netlify, and Resend then delivers the email to the address configured by the publisher. These providers may also process technical data strictly necessary to provide and secure their services.

Data is neither sold nor rented. It is disclosed to other third parties only when required by law or necessary to defend legal claims.

Netlify and Resend are providers based in the United States, and processing may take place outside the European Economic Area. Depending on the circumstances, these transfers are governed in particular by the EU-U.S. Data Privacy Framework and/or the European Commission’s standard contractual clauses. The applicable arrangements and safeguards are detailed in the data protection documents of Netlify (new tab) and Resend (new tab).

5. Retention periods

The application code does not store contact enquiries in a database or a file. After delivery, enquiries received by email may be kept for as long as needed to handle the correspondence and for no more than three years from the last contact initiated by the person concerned. They are then deleted unless longer retention is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

In its GDPR information, Resend currently states that email-related data is retained for 30 days on its Free, Pro and Scale plans, with a configurable period on its Enterprise plan. The period that applies therefore depends on the plan and account settings used. Any technical logs maintained by the providers follow their own retention periods and settings. Details are available on Resend’s GDPR page (new tab).

A rate-limiting key stops being active after ten minutes. Expired entries are cleared periodically or when the server process restarts.

6. Cookies and analytics

This website does not include analytics tools, advertising trackers or social media trackers. When you explicitly select a language, the “portfolio-locale” cookie stores your choice for one year. This setting is used only to restore your language preference. It is not used for analytics or advertising tracking.

If an analytics solution is added, its operation, the data involved and its retention period will be documented here. A consent mechanism will be introduced before setting any tracker that does not meet the applicable exemption conditions.

7. Your rights

Subject to the conditions provided by the applicable regulations, you may request access to your data, its rectification or erasure, restriction of processing, or data portability. You may also object to processing based on legitimate interests.

To exercise a right, write to christopher.vallot@outlook.com or use the contact form and specify your request. Proof of identity may be requested only if there is reasonable doubt about your identity.

If, after contacting the publisher, you believe your rights are not being respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL) (new tab).

8. Security

Reasonable measures for validation, submission limits and access protection are implemented. As no online service can guarantee absolute security, please avoid including sensitive or confidential data in the free-text message.

9. Changes to this policy

This policy may be updated if the website’s features, providers or applicable obligations change. The date at the top of the page identifies the current version.