YOUR DATA · GDPR
Your data.
Your rights.
Understand how this website uses data and how you can stay in control of yours.
Who is responsible?
Ultreia.io, represented by Tony Chemit, is the controller for the processing described on this page.
For questions or rights requests, use the contact form and mention “Personal data”.
Your enquiries
The form collects your name, email address, message and the language used.
Your name, email and message are required: without them, the form cannot send your enquiry.
This information is used to reply to you and, where relevant, prepare a collaboration.
Requests for a quote or service rely on pre-contractual steps taken at your request (GDPR Article 6(1)(b)).
Other correspondence relies on our legitimate interest in responding to enquiries (Article 6(1)(f)).
Enquiries are intended for Tony Chemit. Hosting and email providers handle their technical delivery.
The form does not subscribe you to a mailing list. Please avoid including sensitive data.
How long is data kept?
If no project follows, correspondence is deleted from the mailbox six months after the last exchange.
If a project follows, relevant data joins the client file, subject to contractual and legal requirements.
The sending queue deletes a message after transmission; an undelivered message expires after seven days.
IP address hashes used to limit abuse are purged after 24 hours when subsequent requests are processed.
Preventing abuse
The form uses Cloudflare Turnstile to distinguish visitors from bots.
Cloudflare receives technical signals, including IP address, browser information and the website visited.
Our server sends it the verification token and IP address, without your message contents.
This protection relies on our legitimate interest in securing the site and limiting unwanted messages.
Cloudflare processes signals on our behalf and, as a separate controller, to improve its bot detection.
Processing may involve transfers outside the European Economic Area, including to the United States.
Cloudflare describes safeguards including the Data Privacy Framework and standard contractual clauses.
Its notices explain its own processing and how to exercise your rights with Cloudflare.
Technical logs
The server logs access and errors: IP address, date, requested page, browser and any transmitted referring page.
These logs support diagnostics and security, based on our legitimate interest.
Access is restricted to server administration. Rotation runs daily and retains 14 archives.
Days without activity produce no archive, so this rotation is not a fixed 14-day limit.
Cookies and preferences
The website includes neither advertising nor an audience tracking tool.
Your light/dark choice is saved in your browser’s local storage under the key “ultreia-theme”.
It stays on your device until you clear the website’s data in your browser.
Spam protection loads as you approach the form; Cloudflare’s notices describe how it works.
Your rights
You can request access, correction, erasure or restriction of the processing of your data.
You can object to processing based on legitimate interests, subject to the GDPR’s conditions.
Portability applies where GDPR conditions are met, including for relevant pre-contractual data.
We normally respond within one month. Any permitted extension is explained within that period.
You may also complain to the CNIL or your competent supervisory authority.