Privacy policy

1. Data controller

Maxime Mermoux, EI
Trading under the name Mont-Site
Entreprise individuelle — micro-entreprise — SIRET 884 222 647 00015
309 chemin Louis Viallet, 74170 Saint-Gervais-les-Bains, France
Email: mont.site.74@gmail.com
Phone: 07 71 07 11 59

No data protection officer (DPO) has been appointed: our activity falls into none of the cases where appointment is mandatory under Article 37 of the GDPR. Your requests are handled directly by the data controller, at the details above.

2. Data collected

2.1 The contact form

This is the only collection we initiate, and it only happens if you send the form. The fields submitted are:

• First and last name — so we can reply to you by name (required)
• Company or association name — to place your business (optional)
• Email address — to send you our reply (required)
• Phone — if you would rather speak (optional)
• Project type — to direct our answer (required)
• Estimated budget — to cost your request (optional)
• Project description — the content of your message (required)
• IP address and time of submission — kept as evidence of your consent, and to limit automated submissions
• The context of your visit — the page you are writing to us from, the page you first arrived on, the site that pointed you to us (usually a search engine), how many pages you read, how long you spent filling in the form, and your browser's language and technical identification. These tell us which pages actually answer what our visitors are looking for. They are recorded only when you submit the form, never while you are simply reading the site

No sensitive data is collected (health, opinions, orientation and so on).

2.2 Server logs

Like any website, mont-site.fr runs on a server that keeps a technical log of the requests it receives: IP address, date and time, page requested, browser type. These logs are produced and kept by our host o2switch, for security and diagnostic purposes. We do not use them commercially and we do not cross-reference them with any other data.

2.3 The map on the French areas page

One page of this site embeds a map supplied by Google Maps: the French-language areas page, agence web en Haute-Savoie. When it loads, your browser connects directly to Google's servers, which then receive your IP address and may set their own cookies or read cookies already present, depending on your Google session. We have no access to that data and no control over it; it is governed by Google's privacy policy.

Three safeguards: the map is only loaded as you approach that section (lazy loading) — if you do not scroll down to it, no request is sent; it is absent from every other page, including the home page and the contact form; and the English pages of this site embed nothing at all — the equivalent English page carries a plain link to our Google listing, which sends nothing to Google unless you click it.

2.4 What we do not do

The site uses no analytics and no advertising trackers: no Google Analytics, no social media pixel, no font or script loaded from a third-party server. With the single exception of the map described above, every resource on this site is served from our own domain.

3. Purposes

• Replying to your request for a quote or for information
• Following up our exchanges if a commercial relationship begins
• Meeting our accounting and tax obligations
• Protecting the site and the form against automated submissions

Your data is never sold, rented or passed on to third parties for commercial or advertising purposes, under any circumstances.

4. Legal bases

• Your consent (Art. 6(1)(a)) — collected via the tick box on the form, which you are free not to tick. You may withdraw it at any time by writing to the address given in § 7.
• Pre-contractual measures and performance of the contract (Art. 6(1)(b)) — where your enquiry leads to a quote and then to work.
• Compliance with legal obligations (Art. 6(1)(c)) — retention of accounting records relating to invoiced work.
• Our legitimate interest (Art. 6(1)(f)) — site security and protection of the form against automated submissions, through the server logs and the anti-spam counter.

5. Recipients, hosting and transfers

Your data is seen only by the data controller. Technically it passes through three providers, and no others:

• o2switch — host of the site and of the database in which enquiries are archived. 222-224 boulevard Gustave Flaubert, 63000 Clermont-Ferrand, France. Data stored in France.
• Google LLC (Gmail) — the notification of each enquiry reaches us in a Gmail inbox, which is therefore hosted on Google's infrastructure. This processing involves a transfer outside the European Union, framed by Google LLC's participation in the EU–US Data Privacy Framework, recognised as adequate by the European Commission's decision of 10 July 2023.
• Google (Maps) — on the French areas page only, under the conditions described in § 2.3.

6. Retention periods

• Enquiry that goes no further: 3 years from the last exchange
• Commercial relationship established: the duration of the contract, then 3 years from the last exchange for commercial follow-up
• Accounting records (signed quotes, invoices): 10 years, as required by Article L123-22 of the French Commercial Code
• Anti-spam counter (a hash of the IP address): expires after one hour, then deleted by the server's automatic purge
• Server logs: kept by the host for a short period, set by them for security purposes

7. Your rights

You have the following rights at any time:

• Access — obtain a copy of your data
• Rectification — correct inaccurate data
• Erasure — ask for it to be deleted
• Objection — object to the processing
• Portability — receive it in a readable format
• Restriction — temporarily freeze the processing
• Withdrawal of consent — at any time, without giving a reason

To exercise these rights, write to mont.site.74@gmail.com. You will receive a reply within one month, a period that the complexity of the request may extend to three months — we would tell you if so.

If you disagree with how we have handled it, you may lodge a complaint with the French supervisory authority, the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

8. Cookies

This site sets no cookies: no analytics, no advertising, no session. You can browse it, fill in the form and send it to us without a single cookie being written by mont-site.fr — which is why you are not shown a consent banner.

One reservation, already flagged in § 2.3: the Google map on the French areas page is content served by Google, which may set its own cookies there. They belong to Google's domain, not ours, and can be managed from your Google account or your browser settings.

There is, however, a session memory — and it is not a cookie. As you browse, your own browser keeps track, for itself alone, of the page you arrived on, the site that pointed you to us, and how many pages you have read. None of it is sent anywhere unless you submit the form; those values then travel with it, as described in § 2.1. They disappear when you close the tab, can only be read by mont-site.fr, and cannot be used to follow you onto any other site.

9. Automated decisions

Your data is subject to no automated decision-making and no profiling. The form's anti-spam filters look only at how it was filled in — never at you, and never at the content of your message.

10. Security

The site is served entirely over HTTPS. Data submitted through the form travels encrypted, database credentials are stored outside the web root, and database queries are prepared statements (protection against SQL injection).

11. Changes to this policy

This policy may change if the processing described above changes — a new feature, a different provider. The date it was last updated appears at the top of the page; we suggest you check it each time you contact us.

12. Contact

Any question about this policy: mont.site.74@gmail.com or 07 71 07 11 59.