This policy describes the personal data collected by www.mail-studio.com, the purposes of its processing and the means available to you to control it. It is drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act. The French version of this page is the legally binding one.
Data controller
The data controller is Simon Janvier – Mail Studio (EURL Simon JANVIER – Mail-Studio), 54 rue Sadi Carnot, 49300 Cholet, France — company number 922 203 021.
Contact for any question relating to personal data: [email protected]. Given the size of the company and the nature of its processing activities, it is not required to appoint a data protection officer.
General principle
Reading Mail Studio requires no account and no personal data. Data is collected only when you take an explicit action: sending a message, subscribing to the letter. No data is ever sold or transferred to third parties for commercial purposes.
Processing activities
1. Contact form
| Item | Detail |
|---|---|
| Data collected | Surname, first name, email address, message content |
| Purpose | Handling and answering your enquiry |
| Legal basis | Legitimate interest of the controller (responding to an enquiry) — art. 6.1.f GDPR |
| Retention | 3 years from the last contact |
| Recipient | The publisher only. Messages transit through the host’s email service. |
2. Newsletter
| Item | Detail |
|---|---|
| Data collected | Email address, site language, subscription date, originating page |
| Purpose | Sending you the Mail Studio editorial letter |
| Legal basis | Consent — art. 6.1.a GDPR |
| Retention | Until you unsubscribe, then deletion within 30 days |
| Recipient | The site itself and, where applicable, the sending platform Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris — data hosted in the European Union) |
Every mailing includes a one-click unsubscribe link. You may also request removal by email.
3. Audience measurement
The site uses Google Analytics 4 to measure traffic (pages viewed, referral source, device type, approximate location data). The IP address is truncated by the service before storage. This data is used solely to guide editorial production.
- Legal basis: consent (placement of measurement cookies).
- Retention: 14 months on the Google Analytics side.
- Processor: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
4. Advertising
The site carries advertising through Google AdSense. Advertising networks may place cookies to limit ad repetition and measure performance. You may adjust these settings at any time from Google’s My Ad Center page.
- Legal basis: consent.
- Processor: Google Ireland Limited.
5. Security and availability
- Cloudflare (content delivery network and application firewall): IP address, request headers, technical cookie
__cf_bmfor bot detection. - Wordfence (WordPress application firewall): logging of IP addresses and unauthorised access attempts.
Legal basis: legitimate interest (information system security) — art. 6.1.f GDPR. Retention: 12 months maximum for security logs.
6. Comments
Comments are disabled on the site.
Cookies and trackers
| Cookie / storage | Origin | Purpose | Duration |
|---|---|---|---|
pll_language | Site | Remembering the chosen language | 1 year |
ms-theme (local storage) | Site | Remembering the light or dark theme | Until you clear it |
__cf_bm | Cloudflare | Distinguishing bots from visitors | 30 minutes |
_ga, _ga_* | Google Analytics | Audience measurement | 13 months |
| Advertising cookies | Google AdSense | Ad delivery and frequency capping | Varies by cookie |
| WordPress cookies | Site | Administration session (logged-in editors only) | Session |
Cookies strictly necessary for the operation and security of the site do not require your consent. Measurement and advertising cookies can be refused, blocked or deleted from your browser settings, or neutralised using the Google Analytics opt-out add-on.
Transfers outside the European Union
Google and Cloudflare may process certain data outside the European Union. Such transfers are governed by the European Commission’s standard contractual clauses and, for the United States, by the Data Privacy Framework to which these companies adhere.
Your rights
You have the following rights over data concerning you: access, rectification, erasure, restriction, objection and portability, as well as the right to give instructions regarding your data after your death.
To exercise them, write to [email protected] or use the contact form. A reply will be sent within one month. Proof of identity may be requested in the event of reasonable doubt.
If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
Data security
The site is served exclusively over HTTPS. Administrative access is protected by strong passwords, dedicated application passwords for programmatic access, and an application firewall. Backups are encrypted and stored off the production server.
Updates
This policy may change alongside the site and the tools it uses. The date of the last update appears below; substantial changes will be announced on the home page.
Last updated: 19 August 2026.