{"id":3,"date":"2026-07-30T14:53:42","date_gmt":"2026-07-30T14:53:42","guid":{"rendered":"http:\/\/consult-gherio.fr\/?page_id=3"},"modified":"2026-08-04T04:40:11","modified_gmt":"2026-08-04T04:40:11","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/consult-gherio.fr\/index.php\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"3\" class=\"elementor elementor-3\">\n\t\t\t\t<div class=\"elementor-element elementor-element-185146aa e-flex e-con-boxed e-con e-parent\" data-id=\"185146aa\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4126fdda elementor-widget elementor-widget-text-editor\" data-id=\"4126fdda\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"UTF-8\">\n  <title>Privacy Policy \u2013 consult-gherio.fr<\/title>\n<\/head>\n<body style=\"font-family: sans-serif; max-width: 800px; margin: auto; padding: 2rem; color: #1a1a1a;\">\n\n  <h1>Privacy Policy<\/h1>\n  <p><strong>Last updated:<\/strong> August 4, 2026<\/p>\n  <p>This policy explains how Consult-Gherio collects, uses, and protects your personal data in compliance with the <strong>EU General Data Protection Regulation (GDPR)<\/strong> and the <strong>EU AI Act (2024)<\/strong>.<\/p>\n\n  <h2>1. Data Controller<\/h2>\n  <p>\n    <strong>Consult-Gherio<\/strong><br>\n    Website: <a href=\"https:\/\/www.consult-gherio.fr\">consult-gherio.fr<\/a><br>\n    Contact: <a href=\"mailto:achraf@consult-gherio.fr\">achraf@consult-gherio.fr<\/a>\n  <\/p>\n\n  <h2>2. Data We Collect<\/h2>\n  <ul>\n    <li><strong>Email address<\/strong> \u2014 via newsletter subscription form<\/li>\n    <li><strong>Contact data<\/strong> \u2014 name, email, message (contact form)<\/li>\n    <li><strong>Usage data<\/strong> \u2014 pages visited, time on site (analytics cookies)<\/li>\n    <li><strong>Technical data<\/strong> \u2014 IP address, browser type, device type (collected automatically by our hosting infrastructure)<\/li>\n    <li><strong>Location data (coarse)<\/strong> \u2014 city\/region level, inferred from your IP address for analytics purposes. You may request this not be processed by contacting us.<\/li>\n  <\/ul>\n\n  <h2>3. Legal Basis (GDPR Art. 6)<\/h2>\n  <ul>\n    <li><strong>Consent (Art. 6.1.a)<\/strong> \u2014 newsletter subscriptions, non-essential cookies<\/li>\n    <li><strong>Contract performance (Art. 6.1.b)<\/strong> \u2014 consulting service delivery<\/li>\n    <li><strong>Legitimate interest (Art. 6.1.f)<\/strong> \u2014 website security, fraud prevention, analytics<\/li>\n    <li><strong>Legal obligation (Art. 6.1.c)<\/strong> \u2014 compliance with French and EU law<\/li>\n  <\/ul>\n\n  <h2>4. AI Systems &#038; EU AI Act Compliance<\/h2>\n  <p>This website uses AI-assisted tools (e.g., automated newsletter generation using large language models). These systems are classified as <strong>limited-risk<\/strong> under the EU AI Act (2024).<\/p>\n  <ul>\n    <li>AI-generated content is clearly identified as such where applicable.<\/li>\n    <li>No automated decisions with legal or significant personal effects are applied to users.<\/li>\n    <li>Personal data used in AI processes is minimized and pseudonymized where possible.<\/li>\n    <li>AI tools used include: Anthropic Claude (newsletter synthesis), Microsoft Outlook (email delivery), Google Workspace (subscriber management).<\/li>\n  <\/ul>\n\n  <h2>5. Hosting &#038; Infrastructure<\/h2>\n  <p>This website is hosted by <strong>OVHcloud<\/strong>, with servers located in <strong>France (Europe)<\/strong>, ensuring data residency within the EU. [[4](https:\/\/www.ovhcloud.com\/en\/datacenter\/europe\/france\/)]<\/p>\n  <ul>\n    <li>OVHcloud complies with GDPR as a data processor under a Data Processing Agreement (DPA).<\/li>\n    <li>Data center location: France (Roubaix \/ Gravelines \/ Strasbourg regions) [[4](https:\/\/www.ovhcloud.com\/en\/datacenter\/europe\/france\/)]<\/li>\n    <li>OVHcloud&#8217;s own privacy policy: <a href=\"https:\/\/www.ovhcloud.com\/en\/personal-data-protection\/\" target=\"_blank\">ovhcloud.com\/en\/personal-data-protection\/<\/a><\/li>\n  <\/ul>\n\n  <h2>6. Third-Party Processors<\/h2>\n  <p>We share data with the following third parties, each bound by GDPR-compliant Data Processing Agreements or Standard Contractual Clauses (SCCs):<\/p>\n  <table style=\"width:100%; border-collapse: collapse; font-size: 14px;\">\n    <thead>\n      <tr style=\"background:#f3ede5;\">\n        <th style=\"text-align:left; padding:8px; border:1px solid #ddd;\">Processor<\/th>\n        <th style=\"text-align:left; padding:8px; border:1px solid #ddd;\">Purpose<\/th>\n        <th style=\"text-align:left; padding:8px; border:1px solid #ddd;\">Location<\/th>\n        <th style=\"text-align:left; padding:8px; border:1px solid #ddd;\">Safeguard<\/th>\n      <\/tr>\n    <\/thead>\n    <tbody>\n      <tr>\n        <td style=\"padding:8px; border:1px solid #ddd;\">OVHcloud<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">Website hosting<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">France (EU)<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">GDPR DPA<\/td>\n      <\/tr>\n      <tr>\n        <td style=\"padding:8px; border:1px solid #ddd;\">Google Workspace<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">Subscriber list (Google Sheets)<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">EU (configurable)<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">SCCs + DPA<\/td>\n      <\/tr>\n      <tr>\n        <td style=\"padding:8px; border:1px solid #ddd;\">Microsoft (Outlook\/365)<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">Email delivery<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">EU data centers<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">SCCs + DPA<\/td>\n      <\/tr>\n      <tr>\n        <td style=\"padding:8px; border:1px solid #ddd;\">Anthropic (Claude AI)<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">Newsletter content generation<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">USA<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">SCCs<\/td>\n      <\/tr>\n      <tr>\n        <td style=\"padding:8px; border:1px solid #ddd;\">Pipedream<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">Workflow automation<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">USA<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">SCCs<\/td>\n      <\/tr>\n      <tr>\n        <td style=\"padding:8px; border:1px solid #ddd;\">Calendly<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">Meeting scheduling<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">USA<\/td>\n        <td style=\"padding:8px; border:1px solid #ddd;\">SCCs<\/td>\n      <\/tr>\n    <\/tbody>\n  <\/table>\n  <p style=\"font-size:13px; margin-top:8px;\">We do <strong>not<\/strong> sell your personal data. We do <strong>not<\/strong> share your data with third parties beyond the processors listed above, except when required by law or a court order.<\/p>\n\n  <h2>7. Data Retention<\/h2>\n  <ul>\n    <li><strong>Newsletter subscribers:<\/strong> Until unsubscribe request, then deleted within 30 days<\/li>\n    <li><strong>Contact inquiries:<\/strong> 3 years from last contact<\/li>\n    <li><strong>Analytics\/cookies data:<\/strong> 13 months (CNIL standard)<\/li>\n    <li><strong>Server logs (OVH):<\/strong> Up to 12 months per OVHcloud standard practice [[4](https:\/\/www.ovhcloud.com\/en\/datacenter\/europe\/france\/)]<\/li>\n    <li><strong>Consulting engagement data:<\/strong> 5 years (legal accounting obligation)<\/li>\n  <\/ul>\n\n  <h2>8. Security Measures<\/h2>\n  <ul>\n    <li><strong>HTTPS encryption<\/strong> \u2014 all data in transit is encrypted via SSL\/TLS<\/li>\n    <li><strong>Access control<\/strong> \u2014 administrative access restricted to authorized personnel only<\/li>\n    <li><strong>Data minimization<\/strong> \u2014 we only collect what is strictly necessary<\/li>\n    <li><strong>Hosting security<\/strong> \u2014 OVHcloud provides physical and network security at French data centers [[4](https:\/\/www.ovhcloud.com\/en\/datacenter\/europe\/france\/)]<\/li>\n    <li><strong>Incident response<\/strong> \u2014 in the event of a data breach, affected individuals and the CNIL will be notified within 72 hours (GDPR Art. 33\u201334)<\/li>\n  <\/ul>\n\n  <h2>9. Cookies<\/h2>\n  <p>We use the following types of cookies:<\/p>\n  <ul>\n    <li><strong>Essential cookies<\/strong> \u2014 required for the site to function (no consent needed)<\/li>\n    <li><strong>Analytics cookies<\/strong> \u2014 measure site usage (require your consent)<\/li>\n  <\/ul>\n  <p>You can withdraw cookie consent at any time by clearing your browser cookies or using our cookie preference center (if available). Analytics data is retained for a maximum of 13 months per CNIL guidelines.<\/p>\n\n  <h2>10. Your Rights (GDPR Art. 15\u201322)<\/h2>\n  <p>You have the following rights regarding your personal data:<\/p>\n  <ul>\n    <li><strong>Right of access<\/strong> \u2014 request a copy of your data<\/li>\n    <li><strong>Right to rectification<\/strong> \u2014 correct inaccurate data<\/li>\n    <li><strong>Right to erasure (&#8220;right to be forgotten&#8221;)<\/strong><\/li>\n    <li><strong>Right to restriction of processing<\/strong><\/li>\n    <li><strong>Right to data portability<\/strong><\/li>\n    <li><strong>Right to object<\/strong> \u2014 including to AI-assisted processing<\/li>\n    <li><strong>Right to opt out of location inference<\/strong> \u2014 contact us to disable IP-based location processing<\/li>\n  <\/ul>\n  <p>To exercise any right, contact: <a href=\"mailto:contact@consult-gherio.fr\">contact@consult-gherio.fr<\/a>. We will respond within <strong>30 days<\/strong>.<\/p>\n\n  <h2>11. Children&#8217;s Data<\/h2>\n  <p>This website is not directed at children under 16. We do not knowingly collect data from minors. If you believe a child has submitted data to us, please contact us immediately for deletion (GDPR Art. 8).<\/p>\n\n  <h2>12. Policy Updates<\/h2>\n  <p>We may update this privacy policy periodically. When we do:<\/p>\n  <ul>\n    <li>The &#8220;Last updated&#8221; date at the top will be revised<\/li>\n    <li>Subscribers will be notified by email of material changes<\/li>\n    <li>Continued use of the site after notification constitutes acceptance<\/li>\n  <\/ul>\n\n  <h2>13. Supervisory Authority<\/h2>\n  <p>You have the right to lodge a complaint with the French data protection authority:<\/p>\n  <p>\n    <strong>CNIL<\/strong> \u2014 Commission Nationale de l&#8217;Informatique et des Libert\u00e9s<br>\n    Website: <a href=\"https:\/\/www.cnil.fr\" target=\"_blank\">www.cnil.fr<\/a><br>\n    Address: 3 Place de Fontenoy, TSA 80715 \u2013 75334 Paris Cedex 07\n  <\/p>\n\n<\/body>\n<\/html>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Privacy Policy \u2013 consult-gherio.fr Privacy Policy Last updated: August 4, 2026 This policy explains how Consult-Gherio collects, uses, and protects your personal data in compliance with the EU General Data Protection Regulation (GDPR) and the EU AI Act (2024). 1. Data Controller Consult-Gherio Website: consult-gherio.fr Contact: achraf@consult-gherio.fr 2. Data We Collect Email address \u2014 via [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/consult-gherio.fr\/index.php\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/consult-gherio.fr\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/consult-gherio.fr\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/consult-gherio.fr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/consult-gherio.fr\/index.php\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":3,"href":"https:\/\/consult-gherio.fr\/index.php\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":84,"href":"https:\/\/consult-gherio.fr\/index.php\/wp-json\/wp\/v2\/pages\/3\/revisions\/84"}],"wp:attachment":[{"href":"https:\/\/consult-gherio.fr\/index.php\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}