This page explains how your personal data is processed when you visit the website and contact Marta Walega-Durand.

Data controller

The data controller is Marta Walega-Durand, operating in France.
Postal address: 38 allee de l'angoulaire 18570 La Chapelle-Saint-Ursin, France.
E-mail: contact (at) luisance.fr

Processing is carried out in accordance with the GDPR (Regulation (EU) 2016/679) and the applicable French and Polish data protection laws.

What data is collected?

Data you provide voluntarily when contacting

• first name, last name, company name (if you choose to provide it),
• e-mail address, phone number (if you choose to provide it),
• message content (everything you write in the form or in an e-mail).

Technical data related to your visit

• IP address,
• information about your browser and operating system,
• date and time of visit,
• approximate location (country/city) inferred from the IP address – used only for aggregated statistics, without attempting to identify individual persons.

Data from optional browser geolocation (for future use)

If your browser displays a request to share your location and you consent, the site may use your approximate location solely to produce visit statistics or to display content adapted to your country/language. Without your browser’s consent, geolocation is not used.

Purposes of processing

Your data is processed for the following purposes:

• responding to your questions or requests,
• preparing and managing a potential collaboration,
• producing basic visit statistics (how many visitors, from which countries) in an aggregated form,
• ensuring the security of the website (e.g. analysing abuse or technical errors).

Legal basis

Data is processed on the following legal bases:

• Article 6(1)(a) GDPR – your consent, when you voluntarily provide data via the contact form or when you agree to additional features (e.g. geolocation, analytics cookies if they are activated),
• Article 6(1)(b) GDPR – when processing is necessary to take steps at your request prior to entering into a contract (for example, preparing an offer),
• Article 6(1)(f) GDPR – the legitimate interests of the controller, namely:
  • ensuring the security of the website,
  • creating basic visit statistics in aggregated form,
  • defending against potential claims.

If analytics tools using cookies are activated in the future, they will only operate after your prior consent via the cookie banner. In such a case, the legal basis will be Article 6(1)(a) GDPR.

Data retention periods

• contact e-mails and form submissions: up to 24 months after the last contact, unless a longer period is required by law (for example for accounting or legal claims),
• technical data (server logs, error information): for the period necessary to ensure the security and stability of the service, usually no longer than 6–12 months,
• aggregated statistical data (e.g. number of visits from a given country): may be kept for a longer period, but without the possibility of identifying specific individuals.

Data recipients

Your data:

• is not sold to third parties,
• may be entrusted to trusted service providers such as hosting providers, e-mail providers and analytics providers (if implemented).

All such entities process data only to the extent necessary to provide their services and on the basis of data processing agreements. Data may also be disclosed to public authorities where required by law.

Transfers outside the EU/EEA

As a rule, data is processed within the European Economic Area (EEA). If services from providers outside the EEA are used in the future, data may be transferred to a third country only on the basis of:

• an adequacy decision of the European Commission, or
• standard contractual clauses adopted by the European Commission,

with additional safeguards where necessary.

Your rights

Under the GDPR, you have the following rights:

• right of access to your data,
• right to rectification,
• right to erasure (“right to be forgotten”),
• right to restriction of processing,
• right to object to processing based on legitimate interests,
• right to data portability (in cases provided for by law),
• right to withdraw consent at any time (where processing is based on consent) – withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise these rights, please contact the e-mail address indicated on the contact page. In justified cases, proof of identity may be requested.

Right to lodge a complaint

If you believe that your data is being processed unlawfully, you have the right to lodge a complaint with a supervisory authority:

• in France: the French Data Protection Authority (CNIL),
• in Poland: the Polish Data Protection Authority (UODO).

You can always contact me first to try to resolve the issue amicably.