Privacy notice

Who is responsible for your data

Mathieu Austruy is the data controller for the personal data processed through this website. See the legal notice for full identification and contact details.

  • Contact: contact@austruy.pro

What data is collected

The contact form on this site asks for:

  • your email address;
  • your message.

Both fields are mandatory: without them, we cannot process or reply to your request. No other personal data is intentionally collected through the form.

Why this data is collected

This data is collected for one purpose only: to receive your message and reply to it.

Legal basis

The legal basis depends on the purpose of your message:

  • General enquiries: processing is based on Mathieu Austruy’s legitimate interest (Article 6(1)(f) GDPR) in receiving and responding to messages voluntarily sent through the contact form.
  • Enquiries about professional services, a quote, or a potential engagement: processing is based on pre-contractual measures taken at your request (Article 6(1)(b) GDPR).

No consent is required or relied upon for this processing.

Who receives your data

Your message is read only by Mathieu Austruy. It is never sold, rented, or used for marketing purposes.

To host and technically process the form, the following processor is involved:

  • Netlify, Inc. (San Francisco, USA) — hosts this website and processes and stores form submissions (“Netlify Forms”). Netlify also relies internally on Akismet, a spam-detection service integrated into Netlify Forms, to automatically filter unwanted submissions before they reach us. Akismet operates solely as Netlify’s own sub-processor for this purpose; Mathieu Austruy has no direct relationship with Akismet.

This site does not use Google reCAPTCHA or any other Google service to protect the form. Spam is filtered by Netlify’s built-in protection and a hidden honeypot field.

Audience measurement involves other processors, described in the next section.

Audience measurement

This site measures its traffic with Umami, an open-source audience measurement tool, on an instance run by Mathieu Austruy himself (umami.austruy.pro). Its only purpose is to produce aggregate traffic statistics for this site (pages viewed, where visits come from, device types), on behalf of Mathieu Austruy alone. Umami sets no cookies and writes nothing to your browser: its script only reads the umami.disabled key from local storage, which is used to stop measuring visitors who have objected.

  • Data collected: on each page view, the script sends the site name, the page’s address and title (without any search parameters after a “?”), the referring page, your screen size and your browser language. Your IP address and your browser identifier (“user agent”) come with that request, as with any web request. From them, the server derives your country, region and city, with no finer location, and your browser, operating system and device type. The IP address is not stored.
  • Visitor identifier: to count unique visitors, the server computes an identifier from the site, your IP address and your user agent, combined with a secret value renewed every month. This identifier is pseudonymous, not anonymous: it does not contain your IP address in readable form, it changes every calendar month and it differs from one site to another. The data is not combined with other processing or passed on to third parties for their own purposes.
  • Legal basis: Mathieu Austruy’s legitimate interest in knowing how his site is used in order to improve it (Article 6(1)(f) GDPR).
  • Right to object: you can object to this measurement at any time, without giving a reason, with the button below: it saves the umami.disabled key in this browser’s local storage, and no more data is sent from it. The same button lets you undo that choice. You can also block the domain umami.austruy.pro with a content blocker. For any question, or to exercise your other rights, write to contact@austruy.pro.
  • Recipients: the statistics are viewed only by Mathieu Austruy. Two processors are involved: Vercel Inc. (USA), which runs the Umami application in its Paris data centre (European Union), and OVH SAS (France), which stores its data in its Gravelines data centre (France).
  • Retention: audience measurement data is periodically deleted once it is more than 25 months old.
  • Complaints: you can lodge a complaint with the CNIL (see “Your rights” below).

Cookies

Audience measurement sets no cookies (see above). This site sets a single cookie, nf_lang, only when you manually choose a language (English, French, or Italian) from the language switcher. It is strictly necessary and functional: it just remembers your language choice so it is not overridden on your next visit, and is not used for analytics, advertising, or tracking of any kind. Retention: up to 12 months. As a strictly necessary functional cookie, it does not require your consent under the ePrivacy rules.

How long your data is kept

Contact form submissions are kept for no longer than 24 months after the last relevant exchange, after which they are deleted, unless a longer retention is required by law (e.g. accounting obligations) or a professional relationship continues beyond that point. You can ask for earlier deletion at any time (see below).

Audience measurement data is periodically deleted once it is more than 25 months old.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, and object to the processing of your data, as well as a right to data portability. To exercise any of these rights, contact contact@austruy.pro.

You also have the right to lodge a complaint with the CNIL (the French data protection authority, as the controller is established in France), or with the supervisory authority of your own country of residence.

International data transfers

Netlify is based in the United States. Any transfer of your data there is covered by appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses and Netlify’s certification under the EU-U.S. Data Privacy Framework.

Vercel is also a US company. The audience measurement application runs in its Paris data centre and its data is stored in France by OVH.

Changes to this notice

This notice may be updated to reflect changes to the site or to applicable law. Only the version published on this page is authoritative.

Please click here to return to the main page.