Privacy policy (EN)
Data controller: Clément Mathieu, clement.mathieu2@grenoble-em.com.
Data collected and purpose
- Contact form: name, email address and message, used only to reply to your request. Legal basis: your consent, given by sending the message (GDPR, Article 6(1)(a)). The message is sent by email to Clément Mathieu and is not stored in the site's database. It is kept in his mailbox for as long as the conversation requires, and no longer than 3 years after the last contact.
- Protection against abuse: a hashed fingerprint of your IP address is kept for one hour to limit the number of messages sent from the same connection. Legal basis: legitimate interest in protecting the site (Article 6(1)(f)).
- Site assistant: the bubble at the bottom of the page opens an automated assistant. It is not Clément Mathieu and it is not artificial intelligence: it picks its answers from a list of frequently asked questions written by Clément.
- Data: the messages you write, the conversation language and a random conversation ID that does not identify you. The assistant's replies are not stored; only a reference to the answer given is kept. If you choose to leave your email address so that Clément can reply, the address, your question and the latest messages of the conversation are emailed to him, usually within a few minutes. If the assistant has received many requests that day, sending is postponed to the next day.
- Purposes and legal bases: answering your questions, improving the list of answers and protecting the service against abuse (legitimate interest, GDPR Article 6(1)(f); you may object); passing your request on to Clément so that he can reply by email, if you ask for it (consent, Article 6(1)(a), which you may withdraw at any time).
- Hosting and recipients: messages are processed by software (n8n) installed on a server rented from Hostinger and located in Paris, France. The assistant's emails arrive in a Gmail mailbox (Google); Google may process this data in the United States under the EU–US Data Privacy Framework. Only Clément Mathieu reads these messages; they are never sold or used for advertising.
- Retention: in the assistant's tool, messages, conversations and contact requests, including the email address, are deleted after 90 days. Your address stays in the tool after the email has been sent, until that deadline. Technical error records are deleted after 7 days, and server backup copies within the following 5 weeks. The email Clément receives (address, question, latest messages) is not covered by these periods: it is kept for as long as the conversation requires, then no longer than 3 years after the last contact.
- Weekly summary: each week, Clément receives an email summary of the assistant, including the questions it could not answer, as they were written, so that he can extend the list. Please do not include personal data in your questions. This summary is kept for no longer than 3 years.
- Browser: the assistant sets no cookies. When you open the bubble, the chat library writes a conversation ID to your browser's local storage; the site deletes it straight away. Nothing is loaded or written until you open the bubble.
- Your rights: as described below. To locate a conversation, give its date and, if you provided one, the email address you used.
- Host server logs: Hostinger keeps connection logs for security purposes, under its own policy.
Cookies: a single cookie, pll_language, remembers your language (French or English) for one year. It is necessary for the site to work and is not used for tracking. No analytics or advertising tools are used. The site assistant sets no cookies (see "Site assistant" for local storage).
Recipients: your data is never sold or transferred for value. It is hosted by Hostinger (website and assistant server) and, for the assistant's emails, by Google (Gmail). Only Clément Mathieu reads it.
Your rights: access, rectification, erasure, objection and restriction, by writing to clement.mathieu2@grenoble-em.com. You may also lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.
Updated on October 15, 2026