Privacy Policy

Last updated: 1 January 2026 · MARIUSZ GRZEGORZ · Marseille, France · NAF 63.11Z

This Privacy Policy applies to all services provided by MARIUSZ GRZEGORZ, registered in France under NAF code 63.11Z · SIREN 105 359 467 (Traitement de données, hébergement et activités connexes), and is compliant with EU Regulation 2016/679 (RGPD / GDPR).

1. Data Controller

MARIUSZ GRZEGORZ, based at 27 Rue de la Reine Élisabeth, 13001 Marseille, France, is the data controller for personal data collected through this website and associated services.

2. Data We Collect

We collect the following categories of personal data:

Contact information (name, email address, company name) when submitted via contact forms
Technical data (IP address, browser type, page visits) via server logs
Communication data from email correspondence

3. Legal Basis for Processing

We process personal data under the following legal bases:

Consent (Article 6(1)(a) GDPR) — for contact form submissions
Legitimate interests (Article 6(1)(f) GDPR) — for security logging and fraud prevention
Contractual necessity (Article 6(1)(b) GDPR) — for service delivery

4. Data Retention

Contact form data is retained for a maximum of 36 months. Server logs are retained for 90 days. You may request deletion at any time.

5. Your Rights

Under the GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Request erasure ("right to be forgotten")
Object to processing
Data portability
Lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés)

6. Data Security

All data is stored exclusively on French-hosted infrastructure, encrypted at rest using AES-256-GCM, and transmitted over TLS 1.3. We maintain ISO 27001-aligned security controls and conduct regular penetration testing.

7. Cookies

This website uses only essential session cookies necessary for functionality. No tracking cookies, advertising cookies, or third-party analytics are used without explicit consent.

8. Third Parties

We do not sell, rent, or share personal data with third parties for marketing purposes. Data may be shared with infrastructure providers who are bound by equivalent GDPR obligations and Data Processing Agreements.

9. Contact

For privacy enquiries or to exercise your rights, contact us via the form on our website or by post to our registered address in Marseille, France.