Privacy policy
Last updated: 11/11/2026
This English version is provided for information purposes only. In the event of any discrepancy, the French version prevails.
Studio Arsy takes the protection of your data very seriously. This page explains what data is collected on this website, why, how long it is kept and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
Issraa Bourkiz, sole trader operating under the trade name “Studio Arsy”, 94400 Vitry-sur-Seine, France. Contact: [email protected].
Contact form
When you write to me through the contact form, I collect your name, your email address, the name of your brand (optional), the type of project and your message.
- Purpose: to answer your request and, where applicable, to prepare a quote.
- Legal basis: pre-contractual measures taken at your request (article 6.1.b of the GDPR).
- Retention period: 3 years from our last exchange, if no collaboration is started.
Newsletter
If you subscribe to the newsletter, I only collect your email address.
- Purpose: to send you the Studio Arsy newsletter.
- Legal basis: your consent (article 6.1.a of the GDPR), which you can withdraw at any time using the unsubscribe link included in every email.
- Retention period: until you unsubscribe.
Clients
As part of a collaboration, the data needed to manage the project and for invoicing is kept for the duration of the business relationship, then archived.
- Legal basis: performance of the contract and legal obligations.
- Accounting documents (signed quotes, invoices) are kept for 10 years, in accordance with article L123-22 of the French Commercial Code.
Recipients and processors
Your data is intended exclusively for Studio Arsy. It is never sold or transferred. It may be hosted or processed by technical service providers, solely for the needs of the service:
- Website hosting: Cloudflare, Inc. (Cloudflare Pages)
- Contact form delivery: Brevo (French company, data hosted in the European Union), via Cloudflare
- Newsletter: Brevo (French company, data hosted in the European Union)
If you contact me via WhatsApp, your exchanges are also subject to the WhatsApp (Meta) privacy policy. When a service provider is located outside the European Union, the transfer is covered by the safeguards provided for by the GDPR (standard contractual clauses of the European Commission or an adequacy decision).
Cookies
This website does not use any advertising cookies or audience measurement tools. No consent banner is therefore required. If an analytics tool were to be added, this policy would be updated and your consent would be requested where required by law.
Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability and the right to set instructions regarding what happens to your data after your death. When processing is based on your consent, you can withdraw it at any time.
To exercise these rights, write to [email protected]. You will receive a reply within one month.
If you believe your rights have not been respected, you can file a complaint with the CNIL, the French data protection authority (cnil.fr).
Security
Studio Arsy implements reasonable measures to protect your data (website served over HTTPS, limited access to tools, service providers chosen for their reliability).