Privacy policy
In short
I collect the minimum data needed to answer your enquiries, deliver my work and meet my obligations. I do not sell or rent your data. It is shared only with the technical providers I need, and you stay in control at all times.
Data controller
François Lidove (autónomo, Madrid), contact@francois-lidove.com. Full details are in the legal notice. Given the size of the business and the nature of the data involved, no data protection officer (DPO) is required by law.
What I collect, why, and on what legal basis
- Enquiries and quotes: name, email, phone, details of your project. Purpose: to reply and prepare a quote. Legal basis: taking steps at your request before entering into a contract.
- Client and project management: contact details, quotes, scripts, correspondence, approvals. Purpose: to deliver and track the work. Legal basis: performance of the contract, and legitimate interests.
- Invoicing and accounting: identity, address, tax and VAT numbers, invoices. Purpose: to invoice and meet tax obligations. Legal basis: legal obligation.
- Newsletter: email address. Purpose: to send you my news. Legal basis: consent, which you can withdraw at any time through the unsubscribe link.
- Audience measurement (Google Analytics 4): pseudonymised browsing data. Legal basis: consent, given through the cookie banner.
- YouTube videos: loaded only after you consent; Google and YouTube may then receive technical data. Legal basis: consent.
- Site security: technical logs (IP address, date, requests). Purpose: security and abuse prevention. Legal basis: legitimate interests.
How long I keep it
Enquiries that go no further: three years after our last exchange. Clients and projects: for the length of our relationship, then for as long as necessary to demonstrate the usage rights granted. Accounting records and invoices: the statutory periods, generally six years in Spain. Newsletter: until you unsubscribe. Audience measurement: for the retention period set in the tool.
Who receives it
Your data may be accessible to the providers I rely on: Cloudflare (hosting and security), Airtable (enquiry tracking), Brevo (email and newsletter), Google Analytics 4 (audience measurement, after consent) and YouTube (video, after consent). Depending on the service, these providers act as processors or, for processing they carry out on their own account, as separate controllers.
Transfers outside the European Union
Some providers (Cloudflare, Google, YouTube) may process data outside the European Economic Area, in particular in the United States. These transfers are covered either by an adequacy decision (the EU–US Data Privacy Framework) where the provider is certified under that framework, or by the European Commission's standard contractual clauses.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. To exercise any of these, write to me at contact@francois-lidove.com. You may also lodge a complaint with the supervisory authority, the AEPD (Agencia Española de Protección de Datos, www.aepd.es). No data collected through this site is subject to automated decision-making that produces legal effects concerning you.
This English version is provided for convenience. In the event of any discrepancy, the French version prevails.