Privacy policy
- Publisher
- Jakub Curij — Entrepreneur individuel
- Legal form
- Entrepreneur individuel
- Registered office
- 12 rue Royale, 75008 Paris, France
- SIREN
- 109 047 886
- SIRET
- 109 047 886 00014
- APE code
- 6201Z — Programmation informatique
- Registration
- Registered with the French National Business Register (RNE)
- VAT
- TVA non applicable, article 293 B du CGI
- contact@jakubcurij.fr
- Telephone
- +33 6 71 88 99 47
1. Controller
The data controller is Jakub Curij — Entrepreneur individuel, whose full details appear at the top of this page. No data protection officer has been appointed, as this is not required given the activity and the volume of processing.
2. Processing carried out
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Quotation request | Name, company, email, telephone, description of the need, budget indicated | Pre-contractual steps at the data subject's request (Art. 6.1.b GDPR) | 3 years from last contact if the request does not proceed |
| Shop orders | Identity, billing address, email, order contents, currency, consents recorded at checkout | Performance of the contract (Art. 6.1.b) | 10 years for accounting records |
| Performance of the contract | Business contact details, correspondence, technical access | Performance of the contract (Art. 6.1.b) | Term of the contract, then 5 years |
| Technical credentials entrusted | Identifiers, API keys, access tokens | Performance of the contract (Art. 6.1.b) | Deleted at the end of the engagement |
| Accounting obligations | Quotations, invoices, billing details | Legal obligation (Art. 6.1.c) | 10 years (Art. L123-22 French Commercial Code) |
| Complaints | Identity, subject of the complaint, correspondence | Legal obligation and legitimate interest (Art. 6.1.c and 6.1.f) | 5 years from closure |
| Site security | IP address, server connection logs | Legitimate interest in securing the site (Art. 6.1.f) | Set by the hosting provider, 12 months at most |
3. Mandatory information
In the quotation form, fields marked with an asterisk are needed to answer the request; without them no reply can be given. Other fields are optional and only help refine the estimate. At checkout, billing details are required to issue a compliant invoice.
4. Contact form
Messages sent through the site form are forwarded by email to the contact address and are not stored in the site database. This is deliberate: it avoids building a prospect file with no defined retention period and no deletion routine. Messages are kept in the mailbox for the periods stated in section 2.
Shop orders, by contrast, are stored: an order is an accounting record and must be kept for ten years.
5. Recipients and processors
Data is processed by the publisher alone. It may be hosted or transmitted by the following processors within the meaning of Article 28 GDPR: the site's hosting provider, the domain's email provider, and the authorised payment services provider handling online payments. Accounting data may be shared with the accountant and, on request, with the tax authorities.
No card data is entered on this site or held by the publisher: online payments are processed entirely by the payment services provider.
No data is sold, rented or exchanged for marketing purposes.
6. Transfers outside the European Union
Data is hosted within the European Union and no transfer to a third country takes place. Should such a transfer become necessary, it would be covered by the appropriate safeguards under Chapter V GDPR and this policy would be amended beforehand.
7. Processing on behalf of clients
Where an engagement leads the publisher to process personal data belonging to a client, the publisher acts as a processor and the client remains the controller. A data processing agreement compliant with Article 28 GDPR is signed before any processing begins. Such data is never used for the publisher's own purposes.
8. Your rights
Under Articles 15 to 22 GDPR you have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to give directions concerning your data after your death.
These rights are exercised with the controller at the details shown at the top of this page. A reply is given within one month, extendable by two months for complex requests. Proof of identity may be requested where there is reasonable doubt.
If, having contacted us, you consider your rights are not respected, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr. A consumer resident in another Member State may also contact the supervisory authority of his or her own country.
9. Security
The site is served exclusively over HTTPS. Administrative access is authenticated and limited to what is strictly necessary. Credentials entrusted by clients are held in an encrypted secrets manager, separate from the site, and deleted at the end of each engagement.
In the event of a data breach likely to create a risk to your rights and freedoms, the CNIL is notified within 72 hours and you are informed in accordance with Article 34 GDPR.
10. No automated decision-making
No decision producing legal effects concerning you is taken solely on the basis of automated processing, and no profiling is carried out.