Privacy policy

Data controller

The data controller for personal data collected via this website is Aïcha Imène DAHOUMANE, acting in a personal capacity (professional portfolio, no commercial activity). Contact: ai.dahoumane@proton.me

Audience measurement

This site uses no audience measurement or visitor tracking tool: no browsing statistics are collected. Site performance is checked only in the lab, during development (Lighthouse CI), without any visitor data.

Cookies

No marketing or tracking cookies are set. The language preference is stored in the URL (e.g. /en/, /fr/) and not in a cookie. A functional 'track' cookie (1-year lifetime) and a matching browser local-storage entry only remember which profile is displayed (Salesforce or IT Ops); they contain no personal data. Vercel may set technical cookies for infrastructure purposes (CDN, DDoS protection). Booking happens on the Proton Calendar booking page, opened in a new tab: no third-party script is loaded on this site, and Proton's privacy policy applies on its page.

Contact form data

When you submit the contact form, the data you enter — name, email, topic, message — is forwarded by email via Formhook (an EU-hosted email delivery service) to handle your request. The site keeps no copy of this data on its servers. Your IP address is used only transiently to rate-limit abusive submissions (anti-spam) and is not stored with your message. The testimonial form, reachable only by invitation, works the same way: name, role, company, collaboration context, message and optional photo link are forwarded by email via Formhook, with no copy kept on the site.

Retention: the site stores neither contact messages nor testimonials. Once forwarded by email, your message is retained in the mailbox under normal email practice; you may request its deletion at any time by contacting me.

Data processors

Data collected through this website is processed by the following sub-processors: Formhook (email delivery of the contact and testimonial forms — EU-hosted), Vercel (hosting and CDN — United States), Upstash (anti-spam rate limiting, pseudonymised per-IP counter — ephemeral data; site uptime history and incident dashboard, no visitor data). These providers act as data processors within the meaning of Article 28 of the GDPR.

Legal bases for processing

• Contact form: legitimate interest in answering the requests sent to me (Article 6(1)(f) GDPR); when the exchange concerns recruitment, steps taken at your request prior to entering into a contract (Article 6(1)(b)).
• Testimonial form: your consent (Article 6(1)(a)), which you may withdraw at any time; the testimonial is then removed from the site.
• Rate limiting (pseudonymised IP address, kept for a few minutes) and hosting technical logs: legitimate interest in securing the site and preventing abuse (Article 6(1)(f)).
• Functional "track" cookie: it only remembers the profile you chose to display; being strictly necessary for the service you request, it is exempt from consent (Article 82 of the French Data Protection Act).

Transfers outside the European Union

The hosting provider Vercel Inc. is established in the United States: technical connection data (IP address, requests) may be processed there. This transfer is covered by the EU–U.S. Data Privacy Framework, under which Vercel is certified (European Commission adequacy decision of 10 July 2023), and additionally by the European Commission's standard contractual clauses included in Vercel's data processing agreement (DPA). Form messages are routed by Formhook, hosted in the European Union.

Data breach notification

In the event of a data breach likely to result in a risk to your rights and freedoms, you will be notified as soon as possible. In accordance with Article 33 of the GDPR, the relevant supervisory authority will be notified within 72 hours. You also have the right to lodge a complaint with your national data protection authority (in France: CNIL — www.cnil.fr).

Your rights

In accordance with applicable data protection regulations (GDPR), you have the right to access, rectify, request deletion of, and obtain portability of your personal data, as well as the right to object.

To exercise your rights: ai.dahoumane@proton.me