Privacy policy
This policy describes the data processed through charles-gauthier.com and in the course of services provided by Charles Gauthier. It complies with the GDPR (EU Regulation 2016/679) and the French Data Protection Act.
Data controller
| Identity | Charles Gauthier, sole trader |
| Address | 151 Allée du Thym, 13400 Aubagne, France |
| contact@charles-gauthier.com |
Data collected and purposes
| First and last name | Handling and following up your enquiry |
| Replying to your enquiry and discussing a project | |
| Phone | Getting in touch and calling you back |
| Message / project description | Understanding the need and preparing a quote |
| Acquisition source (UTM, gclid, referrer) | Measuring the effectiveness of marketing campaigns |
| Browsing data (pages viewed, events) | Internal analytics — no cookie and no IP-based identification |
| Technical data (server logs) | Security and abuse prevention |
Legal basis for processing
- Pre-contractual steps and performance of the contract (quote, services) — GDPR art. 6.1.b
- Legitimate interest (security, internal analytics) — GDPR art. 6.1.f
- Consent (cookies and third-party marketing tools) — GDPR art. 6.1.a
- Legal obligation (invoices kept for 10 years) — GDPR art. 6.1.c
Recipients and processors
| Hostinger | Website hosting — data centre in Paris, France |
| Fontshare (Indian Type Foundry) | Web font delivery — loaded from a CDN |
| Google LLC | Google Tag Manager, Google Analytics, Google Ads — United States (EU standard contractual clauses) — activated after consent |
| Meta Platforms Ireland | Meta Pixel / Meta Ads — Ireland (EU) — activated after consent |
No data is sold or passed to third parties for commercial purposes. Analytics and advertising tools only fire once you have given explicit consent through the cookie banner.
Retention periods
- Unconverted prospect: 3 years from the last contact
- Client: for the duration of the contractual relationship, then archived in line with applicable limitation periods
- Billing data: 10 years (statutory accounting obligation)
- Technical logs: 12 months
Security
The site is served over HTTPS. The contact form is protected against automated and fraudulent submissions. Access to the CRM is restricted and secured. These measures are intended to protect your data against unauthorised access.
Your rights
Under the GDPR you have the following rights, which you can exercise by email at contact@charles-gauthier.com:
- Right of access to your data
- Right to rectification
- Right to erasure (the “right to be forgotten”)
- Right to data portability
- Right to object to and to restrict processing
If you are not satisfied with the response, you may lodge a complaint with the CNIL, the French data protection authority.
This is a translation provided for convenience. In the event of any discrepancy, the French version of these terms prevails.