Guillaume Duvernay

Privacy

Short version: reading this site collects nothing about you, and the only personal data I ever hold is what you type into the workshop form yourself.

Who is responsible

I am the data controller for this site. My name and email are on the legal notice page. Legal notice.

When you just read the site

There's no analytics, no tracking pixel and no advertising cookie on this site. It sets no cookies at all. Cloudflare, which serves the pages, processes your IP address for the few moments it takes to answer the request and to keep the site up. That's a legitimate interest under Art. 6(1)(f) GDPR: a web server that doesn't see the address it's answering cannot answer.

When you register interest in a workshop

You give me your email address and, if you want to, a note about what you'd like covered. I also record when you submitted it and the two-letter country code Cloudflare derives from your connection. I never see your IP address itself.

I use it for one thing: to email you about that workshop, with the dates and the price when they exist.

The legal basis is your consent, Art. 6(1)(a) GDPR. You give it by submitting the form, and you can take it back at any time by replying to any email I send you or writing to the address on the legal notice page. Taking it back doesn't make what happened before it unlawful.

I keep your address until you ask me to delete it, or until the workshop has run and you didn't come, whichever is first. I don't add it to any other list and I don't sell it or share it with anyone for their own purposes.

Who else sees it

Three services handle a submission on my behalf. Each of them is bound to process it only on my instructions.

All three are based in, or transfer data to, the United States. Those transfers rely on the European Commission’s standard contractual clauses.

Your rights

Under the GDPR you can ask me for a copy of what I hold about you, ask me to correct it, ask me to delete it, ask me to restrict what I do with it, ask for it in a portable format, and object to it being processed. One email is enough and there is nothing to pay.

You can also complain to a supervisory authority. Mine is: Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Changes

If I start doing something else with the data, this page changes before that happens, not after.

Last updated 2026-09-16