Privacy policy

Data controller

EI Dina Jeansoule, dinamarcellin@gmail.com. For any question about your data, please write to this address.

What this website does not do

• No cookies other than those strictly necessary for it to work. No consent banner is therefore displayed.
• No audience measurement: no Google Analytics, no advertising pixel, no third-party tracker.
• No third-party services loaded in your pages: fonts are hosted on the website itself, and no request is sent to an external server while you browse.
• No resale or commercial transfer of your data.

Data collected

Contact form

• Full name, email address, service concerned, message.
• Purpose: to respond to your request.
• Recipients: the practitioner, who receives your message by email, and the website’s technical provider, in copy, to make sure no request gets lost. The message is passed on to them in full: do not include any information about your health in it; the booking request has a dedicated field for this, with your consent.
• Legal basis: your consent, given by submitting the form (Art. 6(1)(a) GDPR).
• Retention: 12 months after the last exchange, then deletion.

Booking request

• Preferred session, location and time slot, full name, email address, phone number, and any details you choose to add.
• Purpose: to arrange the appointment and contact you to confirm it.
• Recipients: the practitioner, who receives your request by email, and the website’s technical provider, in copy, with the exception of information relating to your health, described below.
• Legal basis: the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
• Retention: 3 years after the last appointment, for the purpose of following up the relationship.

Information relating to your health

The free-text field of the booking request allows you to mention, if you wish, a pregnancy, a current treatment or a sensitive area. This information constitutes health data within the meaning of Article 9 of the GDPR.

• It is optional. You can book without writing anything in it and discuss it in person at the start of the session.
• Legal basis: your explicit consent, collected through a separate tick box (Art. 9(2)(a) GDPR).
• Sole purpose: to adapt the session and ensure your safety. It is used for nothing else.
• Sole recipient: the practitioner. It is not passed on to any third party: it is removed from the copy of your request sent to the website’s technical provider.
• Retention: for the duration of the care relationship, then deleted on simple request from you.

Processors

The website is hosted by Vercel Inc.. The server’s technical logs (IP address, date of the request) are used solely for security and troubleshooting purposes, and are kept for a limited period.

The delivery of emails sent from the forms is entrusted to Resend (Resend, Inc.), which acts on the website’s instructions and does not use this data for its own purposes.

An anti-spam mechanism temporarily keeps, in the server’s memory, the number of submissions per IP address over a ten-minute window. None of this information is stored permanently.

Your rights

You have the right of access, rectification, erasure, restriction and objection, as well as the right to withdraw your consent at any time. To exercise these rights, write to dinamarcellin@gmail.com. You will receive a reply within one month.

If you are not satisfied with the reply, you can lodge a complaint with the CNIL, the French data protection authority: cnil.fr/fr/plaintes.

Transfers outside the European Union

The website runs on its host’s servers located in the European Union, in Paris: this is where the data entered in the forms is processed. The pages themselves, which contain no personal data, are delivered by the host’s global network from the point closest to each visitor.

Two transfers to the United States remain possible. The first relates to sending the form emails, entrusted to Resend, Inc., which processes these messages in the United States. The second relates to the host itself: as Vercel Inc. is an American company, its teams may access the data from the United States, for example for technical support. These transfers are governed by the standard contractual clauses adopted by the European Commission (Decision 2021/914), provided for in the data processing agreement of each of the two providers; Resend also participates in the EU-U.S. Data Privacy Framework.

No other transfer takes place at present; should this change (for example with the introduction of an online calendar), this policy would be updated before it goes live.

Changes

Any change to this policy will be published on this page, together with the date of the update.