Last updated: 15 September 2025

1) Who we are (Joint Controllers)

This website (sapulsandris.site) is operated on behalf of two entities that act as joint controllers for the processing described here:

• VERIDAN, EURL (RCS Paris 980 990 451) — 61 Rue de Lyon, 75012 Paris, France.
• SAPULS ANDRIS, Sole Trader (SIREN 932 324 858) — 31 Rue Turenne, 33000 Bordeaux, France.

Contact (privacy): andrsspuls@inbox.eu

Depending on the engagement, invoices may be issued by either entity. For data protection matters, you can contact us at the email above; we coordinate responses jointly.

2) What data we collect

We collect only what is necessary to run a brochure website and respond to you.

• Contact form / email: name, email address, subject, message, and any files you choose to attach.
• Technical logs (server/host): IP address, date/time, requested URL, HTTP status, user-agent, referrer (used for security, troubleshooting and abuse prevention).

We do not intentionally collect special categories of data (e.g., health, religion) via the website.

3) Why we process your data (Purposes & legal bases)

Responding to enquiries and pre-contract steps (e.g., preparing a quote):

• Legal bases: legitimate interests (Art. 6(1)(f) GDPR) and/or contract/pre-contract (Art. 6(1)(b)).
• Website security, fraud and abuse prevention, troubleshooting (via server logs):
• Legal basis: legitimate interests (Art. 6(1)(f)).
• Compliance with legal obligations (e.g., record-keeping where applicable):
• Legal basis: legal obligation (Art. 6(1)(c)).

We do not use your data for automated decision-making or profiling.

4) Cookies and tracking

We do not use analytics or marketing cookies.

Only strictly necessary, short-lived technical cookies may be set by the hosting platform to deliver the site and maintain security; these are not used for tracking you across sites.

5) Who receives your data (Recipients & roles)

Hosting provider / infrastructure (processor): Namecheap, Inc., 4600 E Washington St, Suite 300, Phoenix, AZ 85034, USA — providing web hosting and security logs processing under our instructions.

• Email & productivity tools (processors): email and file storage services we use to receive and respond to your messages.
• Website maintenance partners (processors): trusted contractors who assist with site operations under confidentiality and data-processing terms.

We do not sell your personal data.

6) International transfers

Our hosting and some service providers may be located outside the EEA/UK. Where a transfer of personal data occurs to a country without an adequacy decision, we implement appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) (and UK IDTA/UK Addendum where relevant), plus technical and organisational measures proportionate to the risks. You can request more information by emailing andrsspuls@inbox.eu.

7) How long we keep your data (Retention)

Contact enquiries: up to 24 months after our last interaction (to manage follow-ups and potential projects).

• Technical/server logs: up to 12 months (security and troubleshooting).
• Records needed to comply with law: as required by applicable legislation (e.g., accounting).

We delete or anonymise data after the applicable period.

8) Your rights

Subject to conditions and exceptions under GDPR, you have the right to access, rectify, erase, restrict processing, object to processing, and data portability.

Where processing is based on consent (not generally used here), you may withdraw consent at any time without affecting prior processing.

To exercise your rights, email andrsspuls@inbox.eu. We may ask for reasonable information to verify your identity.

You also have the right to lodge a complaint with your supervisory authority. In France: CNIL (cnil.fr).

9) Security

We apply proportionate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls, least-privilege principles, and security hardening of hosting services.

10) Children

This site is not directed to children. We do not knowingly collect personal data from individuals under the age of 15 (France). If you believe a child has provided data, please contact us to delete it.

11) Third-party links

Our site may link to third-party websites. We are not responsible for their privacy practices. Please review their policies.

12) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page and will show the “Last updated” date.

13) How to contact us

For any privacy questions or to exercise your rights, contact: andrsspuls@inbox.eu

Postal addresses (for written requests):

• VERIDAN - 61 Rue de Lyon, 75012 Paris, France
• SAPULS ANDRIS - 31 Rue Turenne, 33000 Bordeaux, France

Annex — Identity of the entities

• VERIDAN, EURL - RCS Paris 980 990 451 - SIREN 980 990 451 - 61 Rue de Lyon, 75012 Paris, France.
• SAPULS ANDRIS, Sole Trader - SIREN 932 324 858 - SIRET 932 324 858 00012 - 31 Rue Turenne, 33000 Bordeaux, France.