# Privacy Policy
Effective Date: July 23, 2026
1. Introduction
Welcome to [Site Name] ("we," "our," "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website [Site URL], in compliance with the General Data Protection Regulation (GDPR) and the CNIL guidelines.2. Identity of the Data Controller
The Data Controller responsible for processing your personal data is: Pierre Samson pierresamson@brainsurfing.tech3. Data We Collect & Purpose
We collect and process the following categories of data:A. Analytics & Performance Data
- What we collect: [GRIDIRON_PLACEHOLDER: e.g., anonymized page views, device type, coarse geolocation]. We do not collect personally identifiable information (PII) such as your name or email unless explicitly provided.
- Purpose: To understand how our website is used and to improve the user experience.
- Tools used: Google Analytics 4 (GA4).
- Method: [GRIDIRON_PLACEHOLDER: e.g., first-party tracking via sgtm.domain.com with IP anonymization].
- Legal Basis: Your explicit consent (Article 6(1)(a) GDPR).
B. Technical & Essential Data
- What we collect: Server logs, IP addresses (temporarily for security).
- Purpose: To ensure the security, stability, and proper functioning of our website.
- Legal Basis: Legitimate interest (Article 6(1)(f) GDPR).
4. Cookies and Tracking Technologies
We use cookies to collect and store information.- Essential Cookies: Strictly necessary for the website to function. Cannot be disabled.
- Analytics & Advertising Cookies: Used only if you grant explicit consent via our consent banner.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy.- Consent Choices: Retained for a maximum of 6 months (180 days) per CNIL recommendations.
- Analytics Data: [GRIDIRON_PLACEHOLDER: e.g., Retained for 14 months before automatic deletion].
6. Your Rights Under GDPR
As a resident of the European Economic Area (EEA), you have the following rights regarding your data:- Right to Access: Request a copy of your data.
- Right to Rectification: Correct inaccurate data.
- Right to Erasure: Request deletion of your data ("Right to be forgotten").
- Right to Withdraw Consent: You may withdraw your consent for non-essential tracking at any time.