Privacy policy

Taner OKUR, individual entrepreneur under French law (entrepreneur individuel, EI), trading as OLHYN. SIRET: 793 428 715 000 31. RCS Pontoise 793 428 715. Registered office: Villiers-le-Bel (95400), France.

Email: through our contact page.

As a business established in France, we are subject to the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), supervised by the French authority, the CNIL. The GDPR applies to all the personal data we process, including data about people in the United States, and gives you the rights described below. US state privacy laws, such as the California Consumer Privacy Act, apply to businesses that meet their own criteria; whatever your state, you can exercise the rights below with us.

• Cookie-free visit measurement (Cloudflare Web Analytics): number of visits and page views, page viewed, referring page, country, browser type and page load times, combined into anonymous statistics. No cookie or identifier is placed on your device, and your browsing is not tracked from one website to another: this measurement therefore does not require your consent.

• Audience measurement (Google Analytics through Google Tag Manager): pseudonymized browsing data (pages viewed, session length, device type, traffic source). Activated only after your explicit consent through the cookie banner.

• Behavior analysis (Microsoft Clarity through Google Tag Manager): pseudonymized session recordings and heatmaps to understand how the site is used (movements, clicks, scrolling). Activated only after your explicit consent through the cookie banner.

• Technical error monitoring (Sentry): when a technical error occurs, a report containing the error message, the page concerned and the browser type is sent to Sentry so that we can fix the problem. Your IP address is never sent, and no recording of your browsing is made.

• Push notifications: if you agree to receive notifications, a technical subscription identifier is stored with our host. No personal data (name, email) is linked to it.

• Booking (cal.eu): when you book a call, your name, email and any message are processed by the cal.eu booking tool, published by Cal.com, under its own privacy policy.

• Contact by email: the data you choose to send us by email (name, email address, content of the message) is processed to answer your request.

• Article comments: if you post a comment, your name and message are kept; the email is optional and never shown publicly. A non-reversible technical fingerprint of your IP address is calculated to limit abuse, together with an anti-bot check. Every comment is reviewed by hand before publication.

• Likes on articles: no personal data is collected, only a non-reversible technical fingerprint of your IP address, so that one visitor is not counted several times.

• Maps (Google Maps): some French-language pages showing a service area in France offer a Google Maps map. It loads only after you accept cookies in the banner, or if you click the button that shows the map. Google then receives your IP address and sets its own cookies in your browser. Until the map is shown, no request is sent to Google.

• Customer relationship management: when you contact us or become a client, your contact details and the history of our exchanges are kept in a customer relationship tool that we host ourselves, on a server located in France. It holds your business contact details, the follow-up of our exchanges, your quotes and invoices, and the emails we exchange, automatically linked to your record. This data does not come from your browsing: it is what you give us in the course of our business relationship.

• Audience measurement of our site builder: our free French-language site builder uses Cloudflare Web Analytics, which counts page views without cookies, without advertising identifiers and without cross-site tracking. No data there is linked to a person.

• Consent: audience measurement (Google Analytics and Microsoft Clarity cookies), map display (Google Maps), push notifications, posting a comment.

• Legitimate interests: website security, anonymous visit measurement (Cloudflare Web Analytics), technical error monitoring (Sentry), preventing abuse of comments and likes (IP fingerprint, anti-bot check), and managing the business relationship with our prospects and clients in our management tool.

• Performance of a contract: booking a call and answering contact requests.

This website uses the following cookies:

• Strictly necessary cookies: remembering your cookie choice. No consent required.

• Analytics cookies (Google Analytics, Microsoft Clarity): set only after your consent through the cookie banner. You can withdraw your consent at any time by deleting your cookies or using the banner.

• Google Maps cookies: set by Google only when a map is shown, that is after you accept cookies in the banner or click the map button. You can delete them at any time in your browser settings.

Technical error monitoring (Sentry) and visit measurement (Cloudflare Web Analytics) set no cookie and work independently of cookie consent. Apart from the cookies listed above, no other tracker is placed on your browser. The same consent choices apply to visitors from the United States as to all other visitors.

• Analytics data: 14 months (Google Analytics setting).

• Visit statistics (Cloudflare Web Analytics): kept by Cloudflare in aggregated, anonymous form, with no data that could identify a visitor.

• Behavioral analysis (Microsoft Clarity): session recordings kept for 30 days by Microsoft, except a random sample and recordings marked as favorites, kept for up to 9 months; heatmaps available for up to 9 months.

• Technical error reports (Sentry): 30 days, then deleted automatically.

• Push subscriptions: until you unsubscribe or the subscription expires technically.

• Booking data: kept by cal.eu (Cal.com, Inc.) under its policy, and by us for the duration of the business relationship, then 3 years for prospecting.

• Contact emails: for as long as needed to handle the request, then 3 years at most.

• Comments: published comments are kept as editorial content; rejected or unmoderated comments may be deleted during moderation.

• Likes: the IP fingerprint is kept as long as the like remains active, with no retention period separate from the content concerned.

• Business management data: for the duration of the business relationship, then 3 years from the last contact for a prospect. Accounting records follow their own legal retention periods.

• Emails linked to your record: kept under the same conditions as the record they relate to.

Some data is processed in the United States by the following providers:

• Cloudflare, Inc.: website hosting, anonymous visit measurement, storage of push subscriptions and comments in databases created in Europe, and anti-bot checks.

• Google LLC: audience measurement with Google Analytics and maps with Google Maps.

• Microsoft Corporation: behavior analysis with Microsoft Clarity.

• Cal.com, Inc., publisher of the cal.eu booking tool: management of bookings.

• Stripe Payments Europe, Limited (Ireland): online payment of a paid consultation booked through cal.eu, under Stripe's privacy policy. Stripe may transfer this data to Stripe, Inc. (United States), which participates in the EU-US Data Privacy Framework.

• Dropbox, Inc. (United States): archiving of the accounting records (quotes, invoices, receipts) of our clients and suppliers. Dropbox participates in the EU-US Data Privacy Framework.

• Infomaniak Network SA (Switzerland): hosting of our mailbox; the emails you send us are received and stored there. Switzerland benefits from an adequacy decision of the European Commission.

• SMTP2GO Ltd (New Zealand): delivery of the emails we send you from our customer relationship management tool (follow-up of your requests). The service does not keep the content of emails, apart from occasional anti-abuse checks. New Zealand benefits from an adequacy decision of the European Commission.

The companies above that are established in the United States take part in the EU-US Data Privacy Framework, and these transfers are covered by appropriate safeguards (Data Privacy Framework, standard contractual clauses). Our internal management tools are hosted by Oracle Corporation on a server in Paris: the business data they contain does not leave the European Union. Technical error reports (Sentry) are not transferred outside the European Union: our account is hosted in the European region (Frankfurt).

Under the GDPR and the French Data Protection Act, you have the following rights:

• Right of access: confirmation that we process data about you, and a copy of it.

• Right to rectification: having inaccurate or incomplete data corrected.

• Right to erasure: having your data deleted under the conditions set by law.

• Right to object: objecting to processing on grounds relating to your situation.

• Right to data portability: receiving your data in a structured, machine-readable format.

• Right to withdraw consent at any time (cookies, push notifications).

To exercise your rights or to make a complaint about how we use your data, write to us through our contact page: we answer within the time limit set by the applicable law. If you are not satisfied with our answer, you can complain to the CNIL (cnil.fr), the supervisory authority in France where we are established.

This privacy policy may change at any time. The date of the last update is shown at the top of this page.