Data controller
The data controller within the meaning of the GDPR is:
- Fabien EphKa (Entrepreneur individuel)
- Saint-Ouen-sur-Seine (93400), France
- Email: fabien@ephka.fr
Data collected
When you contact me via email or WhatsApp, the following data may be collected:
- First name, last name
- Email address
- Phone number (if you choose to provide it)
- Content of your message and any documents attached
- Company name (if applicable)
No data is collected automatically by the site beyond the technical session cookie for language preference.
Purpose and legal basis
Your data is collected for the following purposes:
- Responding to your requests — legal basis: legitimate interest (Art. 6(1)(f) GDPR)
- Managing the commercial relationship (quotes, projects, invoices) — legal basis: performance of a contract (Art. 6(1)(b) GDPR)
- Language preference cookie — legal basis: legitimate interest (strictly necessary, not for tracking)
No data is used for advertising, tracking or profiling purposes.
Retention period
- Prospective contact data: 3 years from the last exchange, or until you request deletion.
- Client data (quotes, contracts, invoices): 10 years (accounting obligation).
- Language cookie: session (deleted when browser is closed).
Data recipients
Your data is processed only by Fabien EphKa. It is not sold or shared with third parties, with the exception of:
- Hostinger International Ltd. (hosting — your data is stored on their servers)
All processors are based in the European Union or have signed standard contractual clauses.
Cookies
This site uses two types of cookies:
- ephka_lang — stores your language preference (FR or EN). Session cookie, no personal data, no tracking.
- _ga, _ga_* — Google Analytics 4 cookies, set only after you have explicitly accepted. They measure audience anonymously (pages visited, session duration). No advertising, no cross-site tracking. Retention: 2 years.
Google Analytics uses Consent Mode v2: no tracking cookies are set until you click "Accept" in the banner at the bottom of the page. You can change your choice at any time by clearing your browser's localStorage data for ephka.fr.
For more information: Google Privacy Policy.
Your rights
Under the GDPR, you have the right to:
- Access the data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Object to processing based on legitimate interest
- Restrict processing in certain cases
- Portability of data you have provided
To exercise these rights, contact: fabien@ephka.fr
If you believe your rights are not being respected, you may lodge a complaint with the CNIL (France): www.cnil.fr.
Security
Appropriate technical measures are implemented to protect your personal data against unauthorised access, loss, alteration or disclosure:
- HTTPS on all pages (TLS encryption)
- No sensitive data stored in plain text
- HTTP security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, etc.)
Policy updates
This policy may be updated to reflect changes in the site or applicable regulations. The date of the last update is indicated at the top of this page.