Privacy Policy
Last updated: 2026-04-12
1. Data controller
Kevin Laville, Othantyr, 59 rue de Ponthieu, Bureau 326, 75008 Paris, France. SIREN: 798 354 874.
Contact: bonjour@othantyr.com
2. Data collected and purposes
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone (contact form) | Respond to your inquiries | Legitimate interest |
| Email (newsletter) | Sending communications | Consent |
| Order data (identity, billing) | Contract performance, accounting | Contract + Legal obligation |
| Payment data | Payment processing (via Stripe) | Contract |
| IP address, pages visited, browser | Statistiques d'audience (Google Analytics 4) | Consent |
| IP address, security logs | Website protection (Wordfence) | Legitimate interest |
Credit card data never passes through our servers. It is processed exclusively by Stripe (PCI-DSS certified).
3. Data processors and recipients
| Processor | Role | Location |
|---|---|---|
| Infomaniak | Web hosting | Switzerland (EU adequacy) |
| Stripe | Secure payment | USA / EU (SCCs + DPF) |
| Brevo | Emailing, newsletter | France |
| Google (GA4) | Audience measurement | USA (SCCs + DPF) |
| Axeptio | Cookie consent management | France |
| Wordfence | Website security | USA (SCCs) |
Your data is never sold or transferred to third parties for commercial purposes.
4. Transfers outside the European Union
Some processors (Stripe, Google, Wordfence) are based in the United States. These transfers are governed by Standard Contractual Clauses (SCCs) adopted by the European Commission and, where applicable, the EU-US Data Privacy Framework.
Main hosting (Infomaniak) is in Switzerland, a country benefiting from an adequacy decision of the European Commission.
Analytics cookies (Google Analytics) are only set after your consent.
5. Retention periods
| Data | Duration |
|---|---|
| Contact (prospects) | 3 years after last contact |
| Clients (contracts, invoices) | 10 years (accounting obligation) |
| Newsletter | Until unsubscription + 3 years |
| Browsing (analytics cookies) | 13 months |
| Security logs | 12 months |
6. Cookies
We use Axeptio to manage your consent. No non-essential cookies are set before your choice.
| Cookie | Issuer | Purpose | Consent required |
|---|---|---|---|
| Session | Othantyr | Website functionality | No |
| axeptio_* | Axeptio | Cookie preferences | No |
| _ga, _gid | Google Analytics | Analytics | Yes |
Vous pouvez modifier vos préférences à tout moment via le lien « Gérer mes cookies » en pied de page.
7. Data entrusted to AI agents
When you use our AI agents, Othantyr acts as a data processor under article 28 of the GDPR. Your data is processed solely on your instructions, hosted at Infomaniak in Switzerland, and deleted within 30 days after contract termination.
Third-party AI models (Claude, GPT, Mistral, Gemma, Nemotron) are used via API with data processing agreements (DPA) governing each transfer.
8. Data security
We implement appropriate technical and organizational measures: HTTPS/TLS encryption, web application firewall (Wordfence), ISO 27001 certified hosting (Infomaniak), encrypted backups, restricted access.
In the event of a data breach likely to pose a risk to your rights, we notify the CNIL within 72 hours and inform you as soon as possible.
9. Your rights
You have the following rights regarding your personal data:
- Access : obtain a copy of your data
- Rectification : correct inaccurate data
- Erasure : request deletion of your data
- Restriction : restrict processing
- Portability : receive your data in a standard format
- Objection : object to processing based on legitimate interest
- Withdrawal of consent : at any time, without affecting prior processing
To exercise your rights: bonjour@othantyr.com. Response within 30 days.
10. Complaints
If you believe your rights are not being respected, you may lodge a complaint with the CNIL:
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr
11. Changes
This policy may be updated to reflect legal developments or changes to our services. The date of the last update is indicated at the top of this document.