how we handle your data.

who is responsible

coup de cœur is the data controller for the personal data described here. for anything to do with your data, including the requests set out below, write to data@coupdecoeur.studio. a person reads that address.

what we collect

there are only two ways this site collects anything about you.

what you send us

if you use the contact form, we receive the name, the email address and the brief you write. that is the whole of it. there is no hidden field, no scoring, no enrichment against a third party database.

what measurement records

if you agree to it, Google Analytics records how the site is used: pages viewed, roughly where in the world the request came from, the kind of device, and how you arrived. Google Ads records whether a visit followed an advertisement. both work through cookies and both are described in the cookie notice.

if you do not agree, neither runs. nothing about your visit is measured, and the site works exactly as it otherwise would.

why, and on what basis

• to answer you. we use what you send through the contact form to reply and, if it goes further, to scope the work. the basis is your request: taking steps at your request before entering into a contract, and our legitimate interest in responding to people who approach the studio.
• to understand the site. analytics and advertising measurement run only on your consent, which you give or refuse when you first arrive and can change at any time.

how long we keep it

enquiries are kept for two years from our last exchange, so that we can pick up a conversation that resumes. where an enquiry becomes a project, the records that belong to that project are kept for as long as Belgian law requires us to keep business records. analytics data is retained by Google on the period set in the property, which is fourteen months at most.

who else sees it

Google, as the provider of Analytics and Ads, processes measurement data on our instructions. our hosting provider necessarily handles requests to the site in order to serve it. nobody buys this data from us, because we do not sell it, and we do not share it with anyone else unless the law obliges us to.

data leaving Europe

Google may process data outside the European Economic Area, including in the United States. where that happens it relies on the European Commission's standard contractual clauses and, for transfers to the United States, on the EU-US Data Privacy Framework. if you would rather none of your data left the EEA, refuse the measurement cookies: the contact form itself does not send anything to Google.

what you can ask for

under the GDPR you have the right to:

• ask what we hold about you, and get a copy of it
• have it corrected if it is wrong
• have it deleted
• ask us to restrict what we do with it
• receive it in a portable form, or have it sent to someone else
• object to processing we base on legitimate interest
• withdraw consent for measurement, at any time, without giving a reason

write to data@coupdecoeur.studio and we will answer within one month. there is no charge.

if we get it wrong

tell us first and we will try to put it right. you also have the right to complain to the Belgian data protection authority, the Gegevensbeschermingsautoriteit, also called the Autorité de protection des données, at gegevensbeschermingsautoriteit.be. if you live in another EU country you may complain to your own authority instead.

changes

if this notice changes in a way that matters, the date at the top changes with it. we do not quietly rewrite it.