What personal data we process, why, and the rights you have over it.
The data controller for this site is STUDIO-27, 16 Cr Albert 1er, 75008 Paris, France. Phone: +33682097904. Site: https://www.studio-27.co.
When you submit the contact form, we collect the name, email address and message you enter, plus the company name and phone number if you choose to provide them. Nothing on the form is optional-but-hidden: what you see is what we receive.
Separately, and only after you consent, Google Analytics 4 (GA4) collects approximate location (derived from IP address), device and browser type, pages viewed, referrer, and session duration.
Contact form data is used solely to answer your enquiry and, where it leads somewhere, to discuss working together. The legal basis is the steps taken at your request before entering a contract (GDPR Article 6(1)(b)). We do not add you to a mailing list.
Analytics data is used solely to understand site usage and improve the site. The legal basis is your opt-in consent (GDPR Article 6(1)(a)). We do not rely on legitimate interest for this processing, since it is non-essential to the site's function.
Three processors act on our behalf: Resend, Inc. delivers contact form submissions to our inbox, Vercel Inc. hosts this site, and Google LLC processes analytics data for GA4. We do not share your data with anyone else.
All three are established in the United States. Where data is transferred outside the EU, this relies on the EU-U.S. Data Privacy Framework and/or standard contractual clauses.
Contact form submissions are kept for up to 3 years from our last contact with you, in line with CNIL guidance on prospect data, and are deleted after that.
User-level and event data collected via GA4 is retained for up to 14 months (Google Analytics' default retention period), after which it is automatically deleted.
Under GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your data, and the right to data portability. You also have the right to lodge a complaint with the CNIL (cnil.fr), the French data protection authority.
To exercise your rights, contact nathaniel.benhamou@studio-27.co. STUDIO-27 has not appointed a Data Protection Officer, as this is not required under GDPR Article 37 given the limited scope of processing (web analytics only).
We do not sell personal data, and we do not carry out automated profiling or automated decision-making.