Privacy notice

Who handles your data

The data described on this page is held by me, Aurélien Veyrane, operating geo-paris.com as a sole independent auditor — not a company with departments, just one person reading the messages. Under the General Data Protection Regulation (GDPR) I am the controller of that data. Questions about privacy, or a request to exercise a right, go straight to hello@geo-paris.com.

What is collected

There is one way to reach me here: the contact form. It asks for three things and nothing else —

• A name, so a reply can address you properly.
• An email address, so the reply has somewhere to go.
• A free-text message, where you describe the situation — a hotel or restaurant you run, a page that reads oddly, a menu, a maps or booking listing, a bilingual page that the French and English versions disagree on.

That is the whole of it. There are no accounts to create, no login, no payment details entered on this site, and no profile built up behind the scenes. The message lands in an inbox and stays a message. For protection against automated form abuse, the submission time is recorded together with a salted SHA-256 hash of the sending IP; the IP itself in readable form, browser fingerprints, and device details are never stored.

What is not collected

It is worth being explicit about the things this site deliberately leaves out:

• No tracking cookies of any kind. Visitor counts come from a self-hosted, cookie-free, privacy-first analytics, served through a first-party proxy on this domain, so nothing is shared across other sites and no individual visitor is singled out.
• No advertising pixels, no remarketing tags, no marketing-automation trackers.
• No automated profiling and no automated decision that carries a legal effect on you.
• No selling, renting or sharing of personal data with commercial partners — there is simply no commercial machinery here for that to feed.

Why the law allows this

When you send the form, the handling of your name, email and message rests on Article 6(1)(b) of the GDPR — steps taken at your request before any agreement. The IP hash that protects the form against abuse rests instead on legitimate interest under Article 6(1)(f). Should payment-status data ever exist for a paid engagement, the contractual basis would cover it.

How long it is kept

• Form messages and the email thread that follows: kept while an engagement is live, then for 24 months afterward so the history of the exchange remains, and deleted after that. A message that leads to no engagement is kept 12 months and then deleted.
• IP hashes: kept 90 days — enough to recognise abusive patterns — and then deleted.
• Any payment records: if a paid engagement ever produces them, they are kept only as long as tax and accounting law requires, and deleted afterward.

Your rights

Over the data you send, the GDPR gives you the right to access it, correct it, erase it, move it elsewhere, restrict how it is handled, or object to that handling. One email to hello@geo-paris.com sets any of these in motion, and you will have an answer within a month. If you believe your data has been mishandled, you may also complain to the data-protection supervisory authority of the country where you live.

Where the data is held

The servers behind geo-paris.com sit in European Union (Germany). On the rare occasion that an additional processor (email provider) operates outside the European Union, the transfer relies on standard contractual clauses and on whatever further safeguards that party publishes.

Changes to this notice

If the way data is handled changes in any way that matters, this notice is updated to say so, and the "Updated" date at the top will move. A change of real substance stays flagged on the home page for 30 days so that anyone returning to the site notices it.