Privacy policy
Last updated: 15 October 2026
This policy explains what personal data is collected on mariagutierrez.fr, why, on what legal basis, how long it is kept and what your rights are, under the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).
1. Who is responsible for your data
The data controller is Maria Gutierrez, costume designer and illustrator, based in Paris, France.
- Postal address: 1 Rue Rubens, 75013 Paris, France
- Email: hello@mariagutierrez.fr
- SIRET number: 89487970900018
2. What data is collected and why
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to messages sent through the contact form | Name, email address, phone number, the content of your message | Legitimate interest in answering enquiries (Art. 6(1)(f) GDPR), or steps taken at your request before a contract, such as a commission (Art. 6(1)(b)) |
| Protecting the contact form against spam (Google reCAPTCHA v3) | IP address, browser and device information, interaction data, collected by Google | Legitimate interest in keeping the form secure (Art. 6(1)(f)) |
| Visit statistics (Google Analytics 4 via Google Tag Manager), only if you accept analytics cookies | Pages viewed, visit duration, approximate location, device and browser type, how you reached the site, random identifiers stored in cookies | Your consent (Art. 6(1)(a) GDPR and Art. 82 of the French Data Protection Act) |
| Running and securing the website (hosting) | IP address, date and time of access, pages requested, browser information, in server logs | Legitimate interest in operating a secure website (Art. 6(1)(f)) |
All contact form fields except the phone number are needed to answer you.
No decision is made about you by automated means, and your data is never sold.
3. Who receives your data
Your messages are read only by Maria Gutierrez. Some service providers process data on her behalf:
- Website hosting: OVH Hosting Limited, Ireland
- Email delivery of contact form messages: mariagutierrez.fr and Gmail
- Google Ireland Limited, for reCAPTCHA, and, only with your consent, for Google Tag Manager and Google Analytics
4. Transfers outside the European Union
Google may process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission considers to provide an adequate level of protection, and also uses the European Commission’s Standard Contractual Clauses. The website is hosted in Ireland, within the European Union. Gmail is also provided by Google and covered by the same safeguards.
5. How long data is kept
- Contact form messages: for as long as needed to handle your enquiry and any follow-up, then deleted 3 years after the last contact. Messages are only sent by email and are not stored in the website database.
- Google Analytics data: 2 months.
- Cookies: see the cookie policy. Your cookie choice is kept for 6 months.
- Server logs: 13 months.
6. Your rights
You have the right to access, correct and delete your data, to restrict or object to its processing, and to data portability. Where processing is based on consent, you can withdraw it at any time, without affecting what was done before; for cookies, use the Cookie settings link at the bottom of every page. Under French law you can also give instructions about what happens to your data after your death.
To exercise your rights, email hello@mariagutierrez.fr. You will receive an answer within one month. Proof of identity may be requested if there is a reasonable doubt about who is making the request.
If you think your rights have not been respected, you can lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
7. Security
The site is served over an encrypted connection (HTTPS), and access to the website administration and to the mailbox receiving messages is restricted to Maria Gutierrez.
8. Changes to this policy
This policy may be updated, for example if a new service is added to the website. The date at the top shows the latest version.