Privacy policy

1. Introduction

Virgile GOUALA, as data controller, places great importance on protecting your personal data.

This privacy policy informs you of how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data controller:

• Virgile GOUALA
• Sole trader (auto-entrepreneur, France)
• SIRET: 824 925 465 00034
• Email: virgile@goua.la

2. Data collected

We only collect data strictly necessary to provide our services.

2.1. Data collected automatically

While browsing the site:

• Language preference: A technical cookie remembers your browser's language to improve your experience.
• Duration: Session duration
• Purpose: Displaying the site in the appropriate language
• Legal basis: Legitimate interest (improving the user experience)

Audience measurement: This site uses Google Analytics to understand how it's used (pages visited, navigation paths) and to improve it. These cookies are only set after your consent, following a defined tagging plan. See the Cookies page for details on the cookies set and managing your consent.

2.2. Data collected via Calendly

If you book a call via my Calendly link:

• Data collected: Last name, first name, email address, phone number (optional), purpose of the call
• Purpose: Organizing and confirming appointments
• Legal basis: Performance of pre-contractual measures (scheduling)
• Retention: 3 years from the last contact for prospects, duration of the business relationship + 5 years for clients

Important: Calendly is an external service. Data entered is subject to Calendly's privacy policy. Calendly is GDPR-compliant and has implemented Standard Contractual Clauses (SCCs) for data transfers outside the EU.

2.3. Data collected by email

If you contact me directly by email:

• Data collected: Last name, first name, email address, message content
• Purpose: Responding to your requests for information
• Legal basis: Consent (you voluntarily send me an email)
• Retention: 3 years from the last exchange

2.4. Data collected via the Notion diagnostic

If you take the site's free Notion diagnostic:

• Data collected: Your answers to the questionnaire (score, profile, maturity level per axis), and, if you choose to provide them, your first name, email address, and a free-text description of your issue. These last three fields are optional: the diagnostic works entirely without them.
• Purpose: Displaying your result and, if you left your email, letting you retrieve it or be contacted about it. Your email does not subscribe you to any newsletter.
• Recipient: Wrap, an internal tool developed and hosted by Virgile GOUALA (not a third-party service). Results are stored there for follow-up and improvement of the diagnostic tool.
• Legal basis: Consent (you voluntarily answer the questionnaire and choose whether or not to leave your details)
• Retention: 3 years from submission

3. Use of data

Your personal data is used exclusively for the following purposes:

• Appointment management: Organizing and confirming discovery calls or "Unblock" sessions
• Communication: Responding to your requests for information and following up on our exchanges
• Service delivery: Providing Notion audit, training, or consulting services
• Legal obligations: Invoicing, bookkeeping (10-year retention)

We do not sell, rent, or transfer your data to third parties for commercial purposes.

4. Data recipients

Your personal data is accessible only to:

4.1. Internal recipients

• Virgile GOUALA: Client relationship management, service delivery

4.2. External processors and partners

The following third-party services may have access to your data as part of their functions:

These processors are subject to strict contractual obligations regarding data protection and may only use your data for the purposes defined.

5. Transfers of data outside the European Union

Calendly: Data may be transferred to the United States. Calendly complies with GDPR requirements through Standard Contractual Clauses (SCCs) approved by the European Commission.

For more information: Calendly's privacy policy

6. Retention period

Your data is retained for the following periods:

At the end of these periods, your data is irreversibly deleted or anonymized.

7. Data security

We implement all appropriate technical and organizational measures to protect your personal data against:

• Accidental loss
• Unauthorized use
• Unauthorized access
• Disclosure
• Alteration or destruction

Security measures:

• HTTPS (SSL/TLS) connection to encrypt exchanges
• Secure hosting at OVH (ISO 27001 certified)
• Restricted data access (Virgile GOUALA only)
• Regular backups
• Strong, encrypted passwords

8. Your rights (GDPR)

In accordance with the GDPR and the French Data Protection Act, you have the following rights over your personal data:

8.1. Right of access (Art. 15 GDPR)

You can request a copy of all personal data we hold about you.

8.2. Right to rectification (Art. 16 GDPR)

You can request the correction of inaccurate or incomplete data.

8.3. Right to erasure / "right to be forgotten" (Art. 17 GDPR)

You can request the deletion of your data in the following cases:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw your consent
• The data has been processed unlawfully

Exceptions: This right does not apply if we must retain your data to comply with legal obligations (e.g. invoicing, bookkeeping).

8.4. Right to restriction of processing (Art. 18 GDPR)

You can request the restriction of processing of your data in certain cases (e.g. disputing the accuracy of the data).

8.5. Right to data portability (Art. 20 GDPR)

You can receive your data in a structured, commonly used, machine-readable format, and transmit it to another data controller.

8.6. Right to object (Art. 21 GDPR)

You can object to the processing of your data for reasons relating to your particular situation.

8.7. Right to withdraw your consent

Where processing is based on your consent, you can withdraw it at any time.

8.8. Right to lodge a complaint

If you believe the processing of your data violates the GDPR, you have the right to lodge a complaint with CNIL (the French data protection authority):

• Website: www.cnil.fr
• Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
• Phone: +33 1 53 73 22 22

9. Exercising your rights

To exercise any of your rights, you can contact us:

• By email: virgile@goua.la
• Subject line: "Exercising my GDPR rights"

Information to provide in your request:

• Full name
• Email address used in our exchanges
• Nature of the request (access, rectification, deletion, etc.)
• A copy of an ID document (to verify your identity)

Response time: We commit to responding to your request within a maximum of 1 month from receipt. This period may be extended by 2 months in complex cases, in which case you will be informed.

10. Changes to this policy

We reserve the right to modify this privacy policy at any time, in particular to comply with regulatory changes or changes to our services.

In the event of a substantial change, we will inform you by email or via a notification on the site.

We encourage you to check this page regularly for any updates.

11. Contact

For any question regarding this privacy policy or the processing of your personal data, you can contact us:

• Data controller: Virgile GOUALA
• Email: virgile@goua.la
• Address: Champigny-sur-Marne, 94500, France