Who is responsible for your data
The data controller for this website is Owen Alexander Amaya Hernandez, trading as AMAYA HERNANDEZ OWEN ALEXANDER (Entrepreneur individuel (EI)). This policy explains what personal data is processed when you visit the site or contact me, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
- Business: AMAYA HERNANDEZ OWEN ALEXANDER, Entrepreneur individuel (EI)
- Owner and publication director: Owen Alexander Amaya Hernandez
- Registered office: 38 rue de Vaugirard, 75006 Paris, France
- SIREN: 130 732 159 SIRET: 130 732 159 00012
- Registration: Registered in the French National Business Register (RNE)
- Intra-EU VAT number: FR75130732159
- Activity (APE): 62.01Z, Computer programming
- Email: nouraparotg9@outlook.com Phone: +34 672 119 122
What data is processed
I only process data that is needed to run the site and answer you:
- Messages you send. When you email, call or use the contact form, I receive your name, email address or phone number and the content of your message. The contact form does not send data to a server: it opens your own email app with the message filled in.
- Technical logs. The hosting provider records standard server logs (IP address, date and time, page requested, browser type) to deliver the site and keep it secure.
- Your cookie choice. Your choice in the cookie banner is stored in your browser's local storage, not on a server.
- Client records. If we work together, I keep the details needed for quotes, contracts, invoices and accounting.
The site does not use advertising trackers, social media pixels or profiling.
Why the data is used and on what legal basis
- Answering your request and preparing a quote: steps taken at your request before a contract (GDPR art. 6(1)(b)).
- Carrying out a project: performance of a contract (art. 6(1)(b)).
- Invoices and accounting: legal obligation (art. 6(1)(c)).
- Security and server logs: legitimate interest in keeping the site available and safe (art. 6(1)(f)).
- Optional analytics, if ever enabled: your consent (art. 6(1)(a)), which you can withdraw at any time.
How long data is kept
- Messages that do not lead to a project: up to 3 years after the last contact.
- Client and contract data: for the duration of the relationship, then 5 years for legal claims.
- Invoices and accounting documents: 10 years, as required by French commercial law.
- Server logs: up to 12 months.
- Your cookie choice: 6 months, after which the banner asks again.
Who receives the data
Your data is never sold. It can be processed by service providers acting on my behalf, only for the purposes above:
- the website hosting provider;
- the email provider used for the business mailbox (Microsoft Outlook);
- Google Fonts, which delivers the typefaces used on this site and therefore receives your IP address when a page loads;
- accountants, banks and public authorities when required by law.
Some of these providers may process data outside the European Economic Area. In that case the transfer relies on an adequacy decision (such as the EU-US Data Privacy Framework) or on the European Commission's standard contractual clauses.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. You can withdraw consent at any time and give instructions about your data after your death. To exercise these rights, write to nouraparotg9@outlook.com or to the postal address above. I answer within one month.
If you think your rights are not respected, you can file a complaint with the French data protection authority, the CNIL (www.cnil.fr, 3 Place de Fontenoy, 75007 Paris).
Security
The site is served over HTTPS. Access to client data is limited to me and protected by strong passwords and two-factor authentication where available.
Changes to this policy
This policy may be updated when the site or the law changes. The date at the top shows the latest version.