Privacy policy

In short

• This website places no cookies, does not measure traffic and has no forms.
• Your data is used only to answer your requests, organise our exchanges and manage the business relationship. It is never sold or rented.
• Some of the tools I use process data outside the European Union, in particular in the United States. The list is below.
• You can ask at any time to access, correct or delete your data, or to stop receiving messages.

What data, why, and for how long

When you visit the website

• Data: IP address and technical connection information (page requested, browser type), used by the hosting provider only while sending you the pages.
• Why: to run the website and protect it against attacks.
• Legal basis: legitimate interest in running the website and keeping it secure.
• Retention: none. The hosting provider states that it keeps no personal data related to visits.

When you write to me or book an appointment

• Data: name, email address, company, job title, telephone number if you provide it, content of your messages; for an appointment, the information entered in the booking tool and the date of the appointment.
• Why: to answer your request, organise the appointment, prepare it using your answers to my preparation questions and follow up on our exchanges.
• Legal basis: steps taken at your request before entering into a contract (quote, appointment); for other requests, legitimate interest in answering you.
• Retention: 3 years after our last exchange. Booking data is automatically deleted from the booking tool 12 months after the appointment.

Outreach to professionals

• Data: name, job title, company, business email address and public professional profile information, for example on LinkedIn.
• Why: to present my training courses and services to professionals who may be interested in them for their business.
• Legal basis: legitimate interest in making my business known.
• Retention: 3 years after the last exchange.
• Your right to object: you can object at any time, without giving a reason, simply by replying to a message or writing to me. Every outreach message reminds you of this.

Clients

• Data: contact details of the people I work with, quotes, contracts, training agreements, invoices.
• Why: to deliver the service, invoice it, and meet my accounting and tax obligations.
• Legal basis: performance of the contract; legal obligations for invoicing and accounting.
• Retention: for the duration of the business relationship, then 5 years for documents useful in the event of a dispute; 10 years for invoices and accounting records (French Commercial Code, art. L123-22).

Training participants

• Training courses I organise directly: name, company, attendance sheets, assessments and certificates. This data is used to follow the training and to prove that it took place to the company, the funding bodies and the authorities that supervise vocational training (legal obligation). Retention: 5 years after the end of the training.
• Adjustments related to a disability: if a participant reports such a need, this information is used only to adapt the training, with their explicit consent, and is deleted at the end of the training.
• Training delivered on behalf of another training provider: that provider is responsible for the participants’ data, and its own privacy policy applies. In that case, I act on its behalf and on its instructions.

What is mandatory

You are never obliged to give me personal data. However, the information requested to draw up a quote, a contract or a training agreement is necessary to conclude and perform the service: without it, the service cannot take place. All other information is optional.

Who receives your data

No one but me has access to it, except the following services, and only for the purposes stated:

• statichost.eu (Sweden): website hosting. Data processed in the European Union.
• Fastmail (Australia): email. Data stored in the Netherlands, with a backup copy in the United States.
• meetergo (Germany): appointment booking and video calls. Data processed in the European Union.
• Google Calendar (Google): my calendar, where appointments are copied (name, email, date). Data processed in the European Union and the United States.
• Claude (Anthropic): AI assistant that helps me handle my emails and appointments. Data processed in the United States.
• Indy (France): accounting and client invoicing. According to its privacy policy, some data may be transferred outside the European Union.

statichost.eu, Fastmail and meetergo process your data on my behalf, under a contract governing data protection (GDPR, art. 28). Indy processes invoicing data on my instructions, as provided for in its terms and conditions. Google and Anthropic act under their own terms and their own privacy policies.

About the AI assistant. Claude may read your messages and your appointment details, for example to prepare a reply or send you the preparation questions. I use an individual plan: for people in the European Union, Anthropic Ireland, Limited is responsible for this data. I have turned off the use of my conversations to train its models. Whenever possible, I anonymise or pseudonymise data before giving it to the tool. If you do not want your messages to be handled with this tool, let me know: I will handle them without it.

Your data may also be disclosed to public authorities that request it in the course of their duties (tax authorities, vocational training supervisory authorities).

When you contact me via LinkedIn, LinkedIn also processes your data under its own privacy policy.

Where your data is stored

I give priority to services established in the European Union. When data is processed outside the European Union (Fastmail, Google, Anthropic, and sometimes Indy), these services state that the transfer is covered by the standard contractual clauses adopted by the European Commission or, for US companies that have signed up to it, by the EU–US Data Privacy Framework.

Your rights

You can ask to access your data, correct it, erase it, restrict its use or receive it in a reusable format. You can also object to its use based on legitimate interest, in particular for outreach, withdraw your consent at any time, and give instructions on what should happen to your data after your death.

To exercise these rights, write to the email address shown at the top of this page. I reply within one month. If I have reasonable doubts about your identity, I may ask you to prove it.

If you believe your rights have not been respected, you can lodge a complaint with the French data protection authority (Commission nationale de l’informatique et des libertés, CNIL): cnil.fr, or with the data protection authority of the EU country where you live or work.

Security

The website has no database and no login area. The accounts of the tools I use are protected by two-factor authentication, and only the data that is needed is collected. Old data is deleted regularly, according to the retention periods stated above.

No automated decision-making or profiling is carried out on the basis of your data.

Cookies

This website places no cookies: see the Cookies page.