Privacy Policy
This privacy policy describes how YellowCraft Studio processes personal data collected via the website yellowcraft.studio, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the French Data Protection Act (Law n° 78-17 of 6th January 1978, as amended).
Data Controller
The data controller is Guillaume BROSSARD, acting as a sole proprietor.
Email: contact@yellowcraft.studio
Data Protection Officer
A data protection officer has been designated and may be contacted at the following address: rgpd@yellowcraft.studio
Processing purposes and legal basis
| Purpose | Legal basis | Retention period |
|---|---|---|
| Responding to contact requests | Performance of pre-contractual measures at the request of the data subject (Article 6(1)(b) GDPR) | 3 years from last contact |
| Managing the client relationship | Performance of the contract (Article 6(1)(b) GDPR) | Duration of contract + 5 years |
| Electronic commercial prospecting | Consent (Article 6(1)(a) GDPR) | Until withdrawal of consent or 3 years of inactivity |
| Accounting and tax obligations | Legal obligation (Article 6(1)(c) GDPR) | 10 years |
| Website audience measurement | Legitimate interest (Article 6(1)(f) GDPR) | 13 months |
Categories of data collected
The data collected may include, depending on interactions with the site: identity (first name, last name), contact details (email address, phone number), professional information (company), connection data (IP address, date and time of connection), browsing data (pages visited, visit duration).
Data recipients
Data is intended solely for YellowCraft's internal services responsible for managing enquiries and client relationships.
Data is not shared with any third party for commercial purposes.
Rights of data subjects
In accordance with Articles 15 to 22 of the GDPR, you have the following rights regarding your personal data:
- right of access: to obtain confirmation that data concerning you is being processed and to obtain a copy;
- right to rectification: to obtain the correction of inaccurate or incomplete data;
- right to erasure: to obtain the erasure of data in the cases provided for by Article 17 of the GDPR;
- right to restriction of processing in the cases provided for by Article 18 of the GDPR;
- right to data portability for processing based on consent or the performance of a contract;
- right to object: to object to processing for reasons relating to your particular situation, or unconditionally for processing for prospecting purposes;
- right not to be subject to a decision based solely on automated processing that produces legal effects or significantly affects you;
- right to withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of prior processing;
- right to define directives regarding the fate of your personal data after your death, pursuant to Article 85 of the French Data Protection Act of 6 January 1978.
These rights may be exercised by sending a request to rgpd@yellowcraft.studio, accompanied by proof of identity if there is reasonable doubt about the identity of the requester.
A response will be provided within one month of receipt of the request, extendable by two months in cases of complexity (Article 12(3) GDPR).
Right to lodge a complaint
You have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or via the website www.cnil.fr/en.
Cookies and trackers
Cookies strictly necessary for the operation of the site: exempt from consent under Article 82 of the French Data Protection Act:
- theme preference
- language preference
Audience measurement trackers: exempt from consent as they are configured in accordance with the CNIL requirements:
- used for a purpose strictly limited to measuring the audience of the yellowcraft.studio website (performance measurement, detection of navigation issues, optimization of technical performance or ergonomics, estimation of required server capacity, analysis of content viewed), exclusively for the publisher's own use
- used solely to produce anonymous statistical data
- have a lifetime limited to thirteen months, enabling relevant comparison of audiences over time, and are not automatically renewed on new visits
Policy updates
This policy may be updated to reflect changes in regulations or processing activities. Any material change will be communicated specifically.