Privacy Policy and GDPR Notice

Data controller

Nathan Donadey, individual entrepreneur, trading as Altair Studio, SIREN 923 230 320, SIRET 923 230 320 00023, 7 rue Assalit, 06000 Nice, France.

Contact for any privacy request: contact@altair-studio.com.

Data we collect

When you email us or book a call: your name, email address, and whatever you choose to include in your message or booking notes. Calls are booked through Cal.com, which only loads when you click to book.

Through site usage: aggregated audience metrics via Cloudflare Web Analytics (page views, country, device, referrer, page performance). No cookie or local storage is used and visitors are not fingerprinted.

We do not collect special category data (health, biometrics, political opinions, etc.).

Purposes

Respond to your inquiry, qualify your project, send a quote and pursue pre-contractual exchanges.

Measure audience and improve the site (aggregated, non-identifying).

Lawful basis

Pre-contractual measures taken at your request (GDPR art. 6.1.b) when you email us or book a call.

Legitimate interest in measuring our audience (GDPR art. 6.1.f), under conditions that fall within the CNIL audience-measurement exemption (deliberation 2020-091 / 2022-122).

Retention

Data from your emails and bookings: kept for the time needed to handle your request, then archived for 3 years from our last contact for commercial prospection, in line with the CNIL B2B reference framework.

Audience metrics: aggregated and retained no more than 13 months.

Recipients and processors

Internal: only the data controller has access.

Email processors: Cloudflare, Inc. (Email Routing) receives email sent to @altair-studio.com addresses and forwards it to a Google Gmail mailbox (Google Ireland Limited); outgoing email is sent through Resend (Plus Five Five, Inc.).

Scheduling: Cal.com, Inc. for call bookings. Its booking widget only loads when you click to book a call.

Hosting and analytics: Cloudflare, Inc. for hosting and Cloudflare Web Analytics.

International transfers

Cloudflare, Inc. is established in the United States and is certified under the EU-U.S. Data Privacy Framework.

Google and Resend may process data in the United States; these transfers are governed by the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise by Standard Contractual Clauses adopted by the European Commission.

Cal.com, Inc. is established in the United States and complies with the EU-U.S. Data Privacy Framework; it also uses Standard Contractual Clauses where appropriate. Its booking widget only loads when you click to book a call.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict processing, object, and request portability of your data, as well as the right to define guidelines on the fate of your data after death.

To exercise these rights, write to contact@altair-studio.com. We may ask for proof of identity in case of reasonable doubt.

If you believe your rights are not respected, you can lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07) or via cnil.fr.

Cookies and audience measurement

The site does not set advertising or third-party tracking cookies. We use Cloudflare Web Analytics, a cookieless audience-measurement tool that does not fingerprint visitors or allow individual tracking. See the cookie policy for details.