Privacy policy

Edgard Bonnet (Sole trader (micro-enterprise)). Contact: edgard@evrox.fr

Three forms collect data, and not the same data. Contact: name, email address, message. Application (/recrutement): name, email address, postal address, employment status sought, areas of interest, professional links and message. Vendor listing (/prestataires): company name, email address, service area, categories and links. Your IP address is also processed automatically, without being stored by us: for the form's anti-bot check, to limit the number of submissions (the counter is erased after 60 seconds), and by the services delivering the videos and pages to you. In case of a technical error, diagnostic data may be logged. No data is collected for advertising purposes, and no tracking cookie is set.

Your data is used solely for the purpose of the form you used: answering your request, reviewing your application, or processing your vendor listing. It is never reused across purposes — an application does not end up on a commercial mailing list. On top of that, keeping the site working and secure.

Contact form: pre-contractual measures / legitimate interest in answering your request (GDPR art. 6). Technical diagnostics: legitimate interest in keeping the site secure.

Contact form messages: as long as needed to handle your request, then up to 3 years after our last exchange. Applications: 2 years maximum after our last contact, in line with the French data protection authority (CNIL) recommendation on recruitment data — after that they are deleted, and you may request erasure at any time before then. Vendor listings: 3 years after our last exchange. Technical diagnostic data: a short period.

Your data is neither sold nor shared. It may be processed by our technical sub-processors, strictly for the purposes above: Cloudflare — Anti-bot verification on the forms (Turnstile): your IP address is sent to validate the token (USA / worldwide (standard contractual clauses)) Cloudinary — Video delivery: receives your IP address and user agent on each playback (USA (standard contractual clauses)) Resend — Sending the contact form emails (USA (standard contractual clauses)) Sanity — Content management (CMS) (EU / USA) Sentry — Technical monitoring of server errors (EU (Frankfurt region)) Upstash — Form submission rate limiting: your IP address is used as a counting key for 60 seconds, then erased (EU) Vercel — Website hosting, audience and performance measurement (Vercel Analytics and Speed Insights, cookieless) (USA (standard contractual clauses)) Transfers outside the European Union are covered by standard contractual clauses.

You have the right to access, correct, erase, restrict, object to and port your data. To exercise them: edgard@evrox.fr. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

The site is served over HTTPS and applies technical measures (security headers, form anti-spam protection) to protect your data.