OMBREMIMS OMBREMIMS

Personal data

Privacy

This policy describes the processing related to the ombremims.com showcase site and to direct contacts with OMBREMIMS. In case of any discrepancy, the French version prevails.

Data controller

  • Controller: OMBREMIMS, a SASU with share capital of 1 euro.
  • Registered office: 6 Cour de la Comète, 95800 Cergy, France.
  • Privacy contact: atelier@ombremims.com.
  • Data protection officer: no DPO appointed to date.

Data processed

The static site offers no account, web form, online payment, newsletter, or customer area.

When you contact OMBREMIMS by email, phone, or from your own messaging software, the data processed may include your last name, first name, email, phone number, company, message, any attachments, project information, and history of exchanges.

Hosting the site may also produce strictly necessary technical browsing data, such as the IP address, timestamp, requested URL, user-agent, and security or availability logs.

Purposes and legal bases

  • Responding to your requests, preparing a quote, scoping an engagement, or discussing a project: pre-contractual measures or legitimate interest.
  • Performing and following up on an accepted service: performance of the contract.
  • Managing accounting, invoices, contractual evidence, and legal obligations: legal obligation.
  • Ensuring the security, availability, and diagnostics of the static site: legitimate interest.
  • Prospecting or newsletter: no feature is active to date; separate consent would be requested if one were added, wherever the law requires it.

Recipients and retention

The data is intended for OMBREMIMS and the necessary technical providers: Netlify hosting, LWS domain, the messaging used to reply, and production or invoicing tools when a service is contracted.

  • Contact requests and prospect exchanges: up to 3 years after the last meaningful contact, unless a deletion request is made earlier or evidence is required.
  • Client files, contracts, invoices, and accounting records: the applicable legal duration, in particular up to 10 years for accounting documents.
  • Technical hosting and security logs: a duration limited to the provider's security, availability, and diagnostics needs.

Some providers, in particular Netlify, may process data outside the European Union. OMBREMIMS favors data minimization on this static site and reviews the relevant contractual safeguards when the processing warrants it.

Your rights

You can request access to, rectification, erasure, objection to, restriction of, or portability of your data, under the conditions set by the GDPR.

To exercise your rights, write to atelier@ombremims.com. You can also lodge a complaint with the CNIL: cnil.fr/fr/plaintes.