Who we are
For the purposes of the General Data Protection Regulation (GDPR), the data controller is Sartori Giulia, an entreprise individuelle (sole proprietorship) registered in France under SIREN 100 199 371.
Registered address: 5 Rue Claude Perchot, 76800 Saint-Étienne-du-Rouvray, France. You can reach us at any time at hello@sartorigiulia.eu.
Data we collect
We only collect the data we need to answer you, deliver our services and run the business. This includes:
- Identity & contact data you provide — such as your name, email address, company and phone number.
- Project details & messages you share when requesting a quote or working with us.
- Invoicing & billing data needed to issue invoices and keep our accounts.
- Technical data — such as your IP address, device information and pages viewed — collected automatically via hosting logs and analytics.
We do not knowingly collect special-category (sensitive) personal data.
How we use your data
We process your personal data for the following purposes, each with its GDPR legal basis:
- Respond to enquiries & provide quotes — legitimate interest and pre-contractual steps taken at your request.
- Deliver contracted services & manage the project — performance of a contract.
- Invoicing & accounting — legal obligation under French commercial and tax law.
- Improve the site & keep it secure — legitimate interest.
- Analytics & optional marketing — your consent, which you can withdraw at any time.
Cookies
The site uses only the cookies needed to function, plus optional analytics you can accept or decline. For full details, see our Cookies Policy.
Sharing your data
We do not sell your personal data. We share it only with the processors that help us run the business — such as hosting, email, analytics and payment or banking providers — and always under a contract that requires them to protect it. We may also disclose data to public authorities where we are legally required to do so.
International transfers
Some of our providers may process data outside the European Union / European Economic Area. Where that happens, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses — to keep your data protected.
Data retention
We keep enquiry data only for as long as it remains relevant, then delete it. Contract and invoicing data are kept for the legal retention period — up to 10 years for accounting records under French law.
Your rights
Under the GDPR, you have the right to:
- access your personal data;
- have inaccurate data rectified;
- request erasure of your data;
- restrict processing;
- data portability;
- object to processing;
- withdraw your consent at any time, where processing is based on consent.
To exercise any of these rights, email us at hello@sartorigiulia.eu. You also have the right to lodge a complaint with the French supervisory authority, the CNIL, at www.cnil.fr.
Security
We apply reasonable technical and organisational measures to protect your data, including encryption in transit, access control and regular backups.
Children
Our services are not directed to children under the age of 16, and we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of the page always reflects the latest version.
Contact
For any question about this policy or your personal data, contact us at hello@sartorigiulia.eu or by post at 5 Rue Claude Perchot, 76800 Saint-Étienne-du-Rouvray, France.