Nicolas Maigre
Privacy
This site collects as little data as possible. It uses no advertising cookies, no third-party trackers and no analytics tool that follows you from one site to another.
The data controller is Nicolas Maigre, who can be reached through the contact form.
What is processed
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Anonymous visit statistics (page viewed, country, device type, referring site) | To know which pages are read. The tool, Umami, is hosted on the same server, sets no cookies and does not store your IP address. | Legitimate interests | 13 months |
| Messages sent through the contact form (name, email address, message) | To reply to you | Steps taken at your request prior to entering into a contract, or legitimate interests | 12 months after our last exchange |
| Personal link to the private area (name, organisation, welcome message) | To show you a version of the site tailored to our conversation | Legitimate interests: following up a professional contact | Deleted 3 months after the link expires or is revoked |
| Visits to the private area (date, country, browser and operating system family, page or document viewed). The IP address is never recorded. | To know whether the link has been opened, and to secure access | Legitimate interests: following up the contact, and security | 3 months |
| Server technical logs (IP address, date, page requested) | Site security: detecting and blocking abuse | Legitimate interests: site security | 30 days |
If you have received a personal link, I am notified by email the first time you open it, then at most once a day if someone tries to use it after it has expired or been revoked. These notifications are sorted and deleted every quarter. The emails I send contain no tracking pixels.
A message sent through the contact form is kept on the site's server until it is forwarded to my mailbox, then deleted no more than 8 days later. To limit abuse, messages sent from the same connection are counted for one hour, in memory only and without keeping the IP address.
This data is neither sold nor passed on to third parties, apart from the technical providers listed below. Only the site's publisher has access to it. Tools that help me organise my correspondence may see a contact's name and organisation, but never their personal link.
Encrypted server backups are kept for no more than 3 months.
Where the data is held
The server is located in Canada and operated by OVH. Canada is covered by an adequacy decision of the European Commission, which recognises a level of protection equivalent to that of the European Union. Traffic passes through Cloudflare, which acts as a technical intermediary to protect the site and make it load faster.
Two providers therefore process data on the site's behalf: Cloudflare (DNS, protection and delivery of the site) and OVHcloud (server hosting, and the mailbox that receives messages from the contact form).
Audience measurement
Audience measurement uses Umami, installed on the site's own server: no data is passed to a third party. Umami sets no cookies and does not store your IP address. It only uses it during the visit to work out your country, then discards it. Statistics are kept for 13 months.
Nothing is measured in the private area. If your browser sends the Do Not Track signal, your visit is not counted.
Cookies
The site sets only one cookie, and only if you open a personal link: __Host-espace, a session cookie that is strictly necessary to access the private area and is deleted when it expires. Cookies essential for authentication are exempt from consent (Article 82 of the French Data Protection Act, known as the loi Informatique et Libertés, and the CNIL guidelines of 17 September 2020), so no cookie banner is shown to you.
Your rights
You can ask to access, rectify or erase your data, or object to its processing, through the contact form. If you are not satisfied with the response, you can lodge a complaint with the CNIL, the French data protection authority.