Guillaume Duvernay

Privacy

Short version: I count visits anonymously, with no cookie and no third-party tracker, and the only personal data I ever hold is what you type into the workshop form yourself.

Who is responsible

I am the data controller for this site. My name and email are on the legal notice page. Legal notice.

When you just read the site

Cloudflare, which serves the pages, processes your IP address for the few moments it takes to answer the request and to keep the site up. That's a legitimate interest under Art. 6(1)(f) GDPR: a web server that doesn't see the address it's answering cannot answer. The same goes for counting visits, described below. There is no tracking pixel, no advertising cookie, and the typeface is served from this site, not from Google. The video on a page loads from YouTube (youtube-nocookie.com) only if you press play.

Cookies and your choice

I measure visits with Duv Analytics, my own tool, running on Cloudflare in the EU and reached through a subdomain of this site (a.gduv.club). No third party sees your visit. Before you choose anything, it stores nothing on your device and counts you anonymously: the page, where you came from, your country, the type of device, browser, language and screen size, and a daily code computed from your IP address and browser that changes every day and is deleted after 48 hours, so two days can't be linked and your IP address is never kept. If you accept analytics, a first-party cookie, duv_id, a random identifier readable only by my server, lets me recognise a returning visit; it lasts 13 months. I don't record sessions. The legal basis for the cookie is your consent, Art. 6(1)(a) GDPR and § 25 TDDDG. Your choice itself is kept in one cookie, __consent, for six months, and logged so that I can show it was made: a reference, the date, the categories, your country and a truncated, salted fingerprint of your browser, never your IP address. You can change or withdraw it at any time below; withdrawing reloads the page and my server stops using the cookie.

When you register interest in a workshop

You give me your email address and, if you want to, a note about what you'd like covered. I also record when you submitted it and the two-letter country code Cloudflare derives from your connection. I never see your IP address itself.

I use it for one thing: to email you about that workshop, with the dates and the price when they exist.

The legal basis is your consent, Art. 6(1)(a) GDPR. You give it by submitting the form, and you can take it back at any time by replying to any email I send you or writing to the address on the legal notice page. Taking it back doesn't make what happened before it unlawful.

I keep your address until you ask me to delete it, or until the workshop has run and you didn't come, whichever is first. I don't add it to any other list and I don't sell it or share it with anyone for their own purposes.

Who else sees it

Three services handle a submission on my behalf. Each of them is bound to process it only on my instructions.

All three are based in, or transfer data to, the United States. Those transfers rely on the European Commission’s standard contractual clauses.

Your rights

Under the GDPR you can ask me for a copy of what I hold about you, ask me to correct it, ask me to delete it, ask me to restrict what I do with it, ask for it in a portable format, and object to it being processed. One email is enough and there is nothing to pay.

You can also complain to a supervisory authority. Mine is: Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Changes

If I start doing something else with the data, this page changes before that happens, not after.

Last updated 2026-10-11