Privacy Policy

1. Introduction

Virgile GOUALA, as data controller, attaches great importance to the protection of your personal data.

This privacy policy informs you of how your personal data is collected, used and protected in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data controller:

• Virgile GOUALA
• Auto-entrepreneur (sole trader, France)
• SIRET: 824 925 465 00034
• Email: virgile@goua.la

2. Data collected

We only collect data that is strictly necessary for providing our services.

2.1. Automatically collected data

When you browse the website:

• Language preference: A technical cookie stores your browser language to improve your experience.
• Duration: Session duration
• Purpose: Displaying the site in the appropriate language
• Legal basis: Legitimate interest (improving user experience)

Important note: This website does not currently use any analytics or statistics tool. No behavioural data is collected during your browsing.

2.2. Data collected via Calendly

If you book a call via my Calendly link:

• Data collected: First name, last name, email address, phone number (optional), purpose of the call
• Purpose: Organising and confirming appointments
• Legal basis: Pre-contractual measures (appointment booking)
• Retention: 3 years from last contact for prospects; duration of commercial relationship + 5 years for clients

Important: Calendly is an external service. Data entered is subject to Calendly's privacy policy. Calendly is GDPR-compliant and has implemented standard contractual clauses (SCCs) for data transfers outside the EU.

2.3. Data collected by email

If you contact me directly by email:

• Data collected: First name, last name, email address, message content
• Purpose: Responding to your enquiries
• Legal basis: Consent (you voluntarily send me an email)
• Retention: 3 years from last exchange

3. Use of data

Your personal data is used exclusively for the following purposes:

• Appointment management: Organising and confirming discovery calls or "Unblock" sessions
• Communication: Responding to your enquiries and following up on our exchanges
• Service delivery: Providing Notion audit, training or support services
• Legal obligations: Invoicing, accounting (10-year retention)

We do not sell, rent or share your data with third parties for commercial purposes.

4. Data recipients

Your personal data is accessible only by:

4.1. Internal recipients

• Virgile GOUALA: Client relationship management, service delivery

4.2. Sub-processors and external partners

The following third-party services may have access to your data in the course of their functions:

These sub-processors are bound by strict contractual data protection obligations and may only use your data for the defined purposes.

5. Transfers outside the European Union

Calendly: Data may be transferred to the United States. Calendly complies with GDPR requirements through Standard Contractual Clauses (SCCs) approved by the European Commission.

For more information: Calendly Privacy Policy

6. Retention periods

Your data is retained for the following periods:

After these periods, your data is permanently deleted or anonymised.

7. Data security

We implement all appropriate technical and organisational measures to protect your personal data against:

• Accidental loss
• Unauthorised use
• Unauthorised access
• Disclosure
• Alteration or destruction

Security measures:

• HTTPS connection (SSL/TLS) for encrypted communications
• Secure hosting at OVH (ISO 27001 certified)
• Restricted data access (Virgile GOUALA only)
• Regular backups
• Strong, encrypted passwords

8. Your rights (GDPR)

In accordance with the GDPR and the French Data Protection Act, you have the following rights over your personal data:

8.1. Right of access (Art. 15 GDPR)

You may request a copy of all personal data we hold about you.

8.2. Right of rectification (Art. 16 GDPR)

You may request correction of inaccurate or incomplete data.

8.3. Right to erasure / "Right to be forgotten" (Art. 17 GDPR)

You may request deletion of your data in the following cases:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw your consent
• The data has been unlawfully processed

Exceptions: This right does not apply if we must retain your data to comply with legal obligations (e.g. invoicing, accounting).

8.4. Right to restriction of processing (Art. 18 GDPR)

You may request restriction of processing of your data in certain cases (e.g. challenging the accuracy of data).

8.5. Right to data portability (Art. 20 GDPR)

You may receive your data in a structured, commonly used, machine-readable format and transmit it to another data controller.

8.6. Right to object (Art. 21 GDPR)

You may object to the processing of your data on grounds relating to your particular situation.

8.7. Right to withdraw consent

Where processing is based on your consent, you may withdraw it at any time.

8.8. Right to lodge a complaint

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the CNIL (French Data Protection Authority):

• Website: www.cnil.fr
• Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
• Phone: +33 1 53 73 22 22

9. Exercising your rights

To exercise any of your rights, you can contact us:

• By email: virgile@goua.la
• Subject line: "Exercising my GDPR rights"

Information to include in your request:

• First and last name
• Email address used in our correspondence
• Nature of the request (access, rectification, deletion, etc.)
• Copy of a proof of identity (to verify your identity)

Response time: We undertake to respond to your request within a maximum of 1 month from receipt. This period may be extended by 2 months in cases of complexity, in which case you will be notified.

10. Policy changes

We reserve the right to modify this privacy policy at any time, in particular to comply with regulatory changes or changes to our services.

In the event of a substantial change, we will inform you by email or via a notification on the website.

We invite you to consult this page regularly to take note of any changes.

11. Contact

For any question regarding this privacy policy or the processing of your personal data, you can contact us:

• Data controller: Virgile GOUALA
• Email: virgile@goua.la
• Address: Champigny-sur-Marne, 94500, France