Privacy policy

This policy describes how personal data of this site's visitors is collected, used and protected.

1. Data controller

The controller for the data collected on this site is ORNAWEB SAS.

Contact address: contact@ornaweb.com

Address: 58 rue de Monceau 75008 Paris France

ORNAWEB SAS acts as a processor, for the hosting, security and technical operation of the site.

2. Data collected

• The data you submit through the site's forms (name, email address, message…).
• Technical data: your IP address, browser type, pages visited and server logs. The IP address is kept in the clear for site security and moderation, then deleted after 12 months; it is masked when displayed in the site's administration.
• Traffic statistics, through Matomo self-hosted by ORNAWEB SAS, where your IP address is anonymised before being recorded.
• Files and images uploaded to the site, stored on AWS S3 in the European Union region.

• Your username, email address and sign-in credentials if you create an account on this site, along with the IP addresses you connect from.

3. Purposes of processing

• Handling requests sent through the forms.
• Operating, administering and securing the site.
• Measuring traffic through anonymised statistics.

• Give you access to your members area and to the features that require it.

4. Legal bases

• Performance of a contract or pre-contractual measures.
• Legitimate interest: site security, fraud prevention, non-intrusive statistics.
• Consent: newsletter, non-essential cookies, third-party services.

5. Audience measurement

This site uses Matomo, a privacy-friendly audience measurement tool, self-hosted by ORNAWEB SAS. In line with the French data protection authority's recommendations:

• No personal data is recorded: the IP address is anonymised and precise geolocation is disabled.
• Data is used for statistics only, with no advertising retargeting and no cross-site tracking.
• Browsing data is kept for six months at most.
• No data is passed on to third parties.

You can object to this anonymous collection using the control below:

6. Data recipients

• ORNAWEB SAS, for hosting and maintaining the site.
• AWS S3, in the European Union region, for file storage.
• Stripe and PayPal, for payment processing.
• Matomo, self-hosted by ORNAWEB SAS, for audience measurement.

7. Retention periods

• Messages sent through the forms: 36 months without activity.
• Server logs: 12 months.
• Matomo statistics: 6 months.

• Member account: 36 months without signing in. Emails warn you before the deadline, and simply signing in pushes it back.

8. Your rights

You have the right to access, rectify and erase your data, to restrict and object to processing, to data portability, and to withdraw your consent at any time. You may also lodge a complaint with your data protection authority.

To exercise these rights, write to contact@ornaweb.com.

You can also exercise them by post: 58 rue de Monceau 75008 Paris France.

9. Transfers outside the European Union

The platform's services — hosting, Matomo statistics self-hosted by ORNAWEB SAS, file storage — are located in the European Union and involve no transfer outside it. Such transfers may occur if the site publisher adds third-party services, for example an analytics tool or an external CRM.

10. Data security

• Hosting in France.
• Encrypted connections over SSL.
• Restricted and logged access to data.
• File storage on AWS S3, in the European Union region.
• Self-hosted audience measurement, with no third-party service.

11. Cookies

By default, this site only sets cookies that are strictly necessary for it to work, plus those of the audience measurement described above. Additional cookies may be set if the publisher adds external services.