[01 — introduction]
This website ("the Site") is operated by pipopstudio®. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
This privacy policy explains how personal data is collected, used, stored and protected when you visit this website.
[02 — data controller]
pipopstudio®
Paris, France
[email protected]
For any questions regarding this privacy policy or your personal data, you may contact me at the email address above.
[03 — data collected]
Information you provide voluntarily
If you contact me via the contact form or by email, I may collect your full name, email address, company name, message content, and any information you voluntarily provide.
Automatically collected information
When you browse the Site, certain data may be collected automatically: IP address, browser type and version, device type, pages visited, time and date of visit, and referring website. This data is collected via analytics tools.
[04 — purpose of processing]
Your personal data is collected for the following purposes: responding to enquiries, managing professional communications, scheduling meetings, improving website performance and user experience, and ensuring the security of the Site.
[05 — legal basis]
Under the GDPR, personal data is processed based on legitimate interest (responding to professional enquiries), consent (where required), and contractual necessity (if we enter into a working relationship).
[06 — data retention]
Personal data is retained only for as long as necessary:
Contact enquiries — up to 24 months
Client project data — duration of contract + legal retention period
Analytics data — according to the tool provider's retention settings
You may request deletion at any time (see Section 09).
[07 — cookies]
The site does not use cookies.
[08 — third-party services]
The Site may rely on third-party providers such as web hosting providers and email service providers. These providers may process data on my behalf and are expected to comply with applicable data protection laws.
I am not responsible for the privacy practices of external websites linked from this site.
[09 — your rights (gdpr)]
As a data subject under EU law, you have the right to access your personal data, rectify inaccurate data, request deletion ("right to be forgotten"), restrict processing, object to processing, data portability, and withdraw consent at any time.
To exercise your rights, contact: [email protected]
If you believe your rights have been violated, you may lodge a complaint with the French data protection authority:
Commission Nationale de l'Informatique et des Libertés (CNIL)
www.cnil.fr
[10 — data security]
Appropriate technical and organisational measures are implemented to protect your data against unauthorised access, alteration, disclosure or destruction.
However, no method of transmission over the Internet is completely secure.
[11 — international transfers]
If any service provider is located outside the European Economic Area (EEA), appropriate safeguards such as Standard Contractual Clauses are implemented to ensure GDPR compliance.
[12 — changes to this policy]
This Privacy Policy may be updated from time to time. The updated version will always be available on this page with a revised "Last updated" date.