Privacy notice

Data controller

The controller for personal data collected on this site is:

• Pivoines Conseil, a French SAS, company number (SIREN) 941 611 014
• Registered office: 21 Avenue Pauline, 94000 Créteil, France
• Contact: [email protected]

What is collected

This site asks for no personal data beyond what you send voluntarily: through the contact form, through the sign-up form for the Frémissements newsletter, or by email. Two exceptions apply, both described below under "Hosting and technical logs": the host that serves you the page sees your IP address, and it inserts a cookie-less audience measurement into the page.

The contact form collects:

• your name
• your email address
• the subject of your request
• the content of your message

Signing up to the "Frémissements" newsletter

The newsletter is written in French. Signing up asks for your email address and nothing else. That address goes straight to Beehiiv, the platform that holds the list and sends the newsletter. This site does not keep it: it has no database, and no subscriber address is stored here or can be looked up here.

Signing up rests on your consent (Article 6(1)(a) of the GDPR), which you give by typing your address yourself. Every issue carries an unsubscribe link that takes effect immediately. Beehiiv keeps your address for as long as you stay subscribed, and deletes it once you unsubscribe.

A technical point that concerns you. The form sends you directly to Beehiiv, and your address travels in the page address (it appears after ?email=). In practice, it never reaches this site's servers, which is a static site with no processing and no database. It is, however, written into your browser history, like any page you visit. On a shared computer, deleting that history entry is enough to remove it.

What it is used for

These details are used only to:

• reply to your request for information
• send you a commercial proposal, if you ask for one
• keep track of our exchanges in a professional context

They are never used for unsolicited commercial approaches or for profiling, and are never passed on or sold to third parties. An address sent through the contact form is not added to the newsletter: the two are separate, and subscribing takes a distinct step on your part.

Legal basis

Processing rests on your consent (Article 6(1)(a) of the GDPR), given by sending the form voluntarily, and on Pivoines Conseil's legitimate interest in replying to requests addressed to it (Article 6(1)(f)).

How long it is kept

Your details are kept for 3 years from our last exchange, then deleted automatically. If a contract is signed, the data tied to the business relationship is kept for 10 years from the end of that relationship, as French accounting and tax rules require.

Who receives it

Your details are handled by Sébastien Müller, managing director of Pivoines Conseil, and no one else. They may be stored by the following technical providers:

• Cloudflare (hosting, security), United States, under standard contractual clauses
• Formspree (contact form processing), United States
• Beehiiv (newsletter list and delivery), United States
• Proton Mail (email), Switzerland, a country the European Commission recognises as offering adequate protection

Your rights

Under the GDPR, you may at any time exercise the following rights:

• Access: know what data we hold about you
• Rectification: have inaccurate data corrected
• Erasure: ask us to delete your data
• Restriction of processing
• Portability: receive your data in a structured format
• Objection to processing

To exercise them, write to [email protected]. We undertake to reply within one month.

You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr), or with the supervisory authority of the EU country where you live.

Hosting and technical logs

To serve you this page and to protect the site against attacks, Cloudflare, our host, processes your IP address and the technical details of your request (page requested, browser, time). This rests on Pivoines Conseil's legitimate interest in serving and securing the site (Article 6(1)(f) of the GDPR). Those logs are held by Cloudflare; this site is static and keeps no copy of them.

Cloudflare also inserts, into the pages it serves, an audience measurement script(Cloudflare Web Analytics, loaded from static.cloudflareinsights.com). It sets no cookie (checked on 8 September 2026) and, according to Cloudflare's documentation, does not identify visitors: it counts page views and produces aggregate statistics (country, browser, page). This site only ever sees those aggregates. Your browser may also report a failed connection to Cloudflare (a mechanism called Network Error Logging), with no cookie and only when something has failed.

Cookies and trackers

This site uses no tracking, audience or advertising cookie.

Cloudflare, our host, may set strictly technical cookies to protect against attacks (bot management) and to balance load. Such cookies are exempt from consent under Article 82 of the French Data Protection Act.

Security

The whole site is served over HTTPS, with a valid certificate issued by Google Trust Services through Cloudflare. Data is encrypted in transit.

Changes to this notice

This notice may be updated from time to time. The date of the last update appears at the top of this page.