Privacy policy

The Site collects personal data exclusively through the contact form: name, email address, phone number, and message content entered by the visitor.

This data is transmitted to our email-sending provider, Resend, which delivers the message by email to walid@walead.fr. It is not recorded in any database on the Site: only the delivery email received by Walead persists, subject to the retention practices of the destination mailbox. Apart from this form, no data is collected for tracking or prospecting purposes; only technical data (IP address, server logs), processed transiently for the operation and security of the Site, may contain personal data, as detailed below.

Data submitted via the contact form is processed solely to respond to visitor requests and, where applicable, to initiate pre-contractual discussions relating to a recruitment engagement.

The Site is also hosted by Vercel, which automatically generates standard technical logs necessary for the proper functioning, availability, and security of the Site.

In the future, and only after visitor consent collected via a dedicated banner, a visitor-tracking tool (lemlist) may be activated for commercial prospecting purposes. Cookie-free audience measurement, exempt from consent, may also be implemented. These purposes are not active at this time.

Processing of data from the contact form is based on the performance of pre-contractual measures taken at the request of the data subject, as well as on Walead's legitimate interest in responding to inquiries addressed to it.

Hosting of the Site and the generation of standard technical logs are based on Walead's legitimate interest in the proper functioning and security of the Site.

The forthcoming visitor tracking (lemlist) will rely exclusively on the visitor's free, specific, informed, and unambiguous consent, collected prior to placing any tracker via a consent banner; this consent may be withdrawn at any time, without affecting the lawfulness of processing already carried out.

The Site does not, at this time, use any tracking cookie, advertising tracker, or audience-measurement tool requiring consent.

A visitor-tracking tool (lemlist) for commercial prospecting purposes may be implemented at a later date. The consent-collection mechanism (banner) is already present on the Site, but remains dormant: it will only display, and the tracker will only activate, once this tool is actually configured and only after the visitor's explicit acceptance. Refusal or absence of consent will have no effect on access to the Site's features.

Cookie-free audience measurement may also be implemented; in accordance with CNIL recommendations, such a tool, if strictly limited to statistical purposes and unable to individually identify visitors, would be exempt from the requirement to obtain prior consent.

Messages submitted via the contact form are retained only in the form of the delivery email received at walid@walead.fr; no data is recorded in any database on the Site. The retention period for this email is that applicable to the destination mailbox, for the time necessary to process the request.

The Site's host, Vercel, generates standard technical logs (server and security logs) according to its own usual retention periods, necessary for the proper functioning and security of the infrastructure.

The Site implements standard security measures: encryption of exchanges (HTTPS), HTTP security headers (including a Content Security Policy, "CSP"), anti-bot protection (Vercel BotID) applied to the contact form, complemented by form-hygiene measures (a honeypot field, a submission-timing check, and strict validation of submitted fields). Anti-bot protection is based on Walead's legitimate interest in protecting the Site against fraudulent use and analysis of browser technical signals. Strictly necessary for the security of the Site and fraud prevention, it falls under the exemptions provided for strictly necessary trackers and does not, as such, require the collection of consent.

Walead plans to further strengthen this security over time through a dedicated web application firewall (providing, among other things, submission rate limiting) and the deployment of a database (Neon) for a future admin area and blog; these elements are not deployed at this time and will be the subject of an update to this policy.

In accordance with the GDPR, every data subject has the following rights over their personal data: the right of access, the right to rectification, the right to erasure, the right to object, the right to data portability, and the right to restriction of processing.

These rights may be exercised at any time by writing to walid@walead.fr, specifying the purpose of the request. A response will be provided within the legal period of one month from receipt of the request, which may be extended by a further two months in the case of a complex request or a high volume of requests.

In the event of difficulty or an unsatisfactory response, every data subject has the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or via www.cnil.fr.