1. Data controller

Amina Ouadday, operating under the trade name Ouadday, is the data controller for personal data collected on this website. Contact: amina@ouadday.com.

2. Data collected

We only collect data that you provide voluntarily:

Via the contact form: name, email, message content, project type, indicative budget
Via our email address: any data contained in your messages
Strictly necessary technical cookies (see Cookie policy)

3. Purposes and legal basis

Responding to your request (quote, question) — legal basis: pre-contractual measures (art. 6.1.b GDPR)
Client relationship management — legal basis: legitimate interest (art. 6.1.f GDPR)
Legal obligations (invoicing, accounting) — legal basis: legal obligation (art. 6.1.c GDPR)

4. Data recipients

Your data is processed exclusively by Amina Ouadday. It may be transmitted to sub-processors strictly necessary for the operation of the site and the service:

Vercel Inc. (website hosting)
Google Workspace (professional email)
Possibly: Brevo or Resend (transactional emails), Stripe (payment if service provided)

No data is sold, exchanged or transmitted to third parties for commercial purposes.

5. Retention period

Non-converted leads: maximum 3 years from last contact
Clients: duration of the contractual relationship + 5 years (civil statute of limitations) or 10 years (accounting obligations)
Technical cookies: session duration

6. Your rights

In accordance with GDPR and the French Data Protection Act, you have the following rights:

Right of access: obtain a copy of the data concerning you
Right to rectification: correct inaccurate data
Right to erasure: request the deletion of your data
Right to data portability: retrieve your data in a structured format
Right to object: object to the processing
Right to restriction: restrict processing
Right to set post-mortem directives on your data

To exercise these rights, contact us at amina@ouadday.com. A response will be provided within 1 month.

7. Complaint to the CNIL

If you believe your rights are not being respected, you may lodge a complaint with the French Data Protection Authority (CNIL).

8. Security

We implement appropriate technical and organizational measures to ensure the security of your data: HTTPS encryption, restricted access, secure hosting, regular backups.

9. Transfers outside the EU

Some sub-processors (Vercel, Google) may process your data outside the European Union. These transfers are governed by the European Commission's standard contractual clauses or adequacy decisions, guaranteeing a level of protection equivalent to GDPR.

10. Changes

This policy may be modified at any time. The latest version in force is the one published on the website on the date of your visit.

Privacy policy