Privacy Policy
1. Data controller
The processing of personal data carried out through this website is managed by:
FF Production — Entreprise individuelle
138 avenue Victor Hugo, 75016 Paris — France
E-mail : contact@ffproduction.fr
2. Data collected
When a user uses the contact form, FF Production may collect: name, email address, subject of the request and the content of the message. The technical provider of the form may also process certain technical data related to the submission, including the IP address, an approximate location derived from it, the browser used, the originating page and the referrer URL.
The form is not intended to receive sensitive data or special categories of data within the meaning of the GDPR, health data, data relating to criminal convictions or offences, biometric data, payment-card data or personal data concerning children. The form does not accept file attachments.
3. Purpose of processing
This information is used to receive, manage and respond to requests sent to FF Production, and to ensure the security and proper technical operation of the form. It is not used for automatically sending marketing communications or newsletters and is not sold to third parties.
4. Legal basis
The processing is based on FF Production's legitimate interest in receiving, managing and responding to enquiries voluntarily sent to it, and in ensuring the security of its contact form.
5. Required information
Fields marked as required are necessary to process the request. Without this information, FF Production may be unable to respond.
6. Technical operation of the form and processor
The contact form uses Formspark, operated by Trampoline Software SRL, Rue de Marsannay-la-Côte 16, 5032 Mazy, Belgium (company no. BE 0799.398.081). When a user submits the form, the data is transmitted to Formspark in order to collect, store and forward the request to FF Production. In this context, FF Production acts as data controller and Formspark as processor within the meaning of the GDPR.
Formspark states that the main submission data is stored within the European Economic Area, in Ireland and Germany. Processing is governed by its Data Processing Agreement (DPA) in accordance with Article 28 of the GDPR. For more information: Formspark GDPR information and Data Processing Agreement.
7. Recipients
The information is accessible to authorised persons within FF Production and to technical providers strictly necessary for the operation of the website, form and email services, including Formspark and its technical subprocessors as well as FF Production's hosting and email provider. The data is neither sold nor disclosed to third parties for advertising purposes.
8. Retention period
Where a request does not lead to a contractual relationship, FF Production retains the correspondence for a maximum of 12 months from the last exchange, unless a specific need or legal obligation justifies a different period. Where a contractual relationship exists, certain information may be retained for longer in order to comply with applicable legal obligations.
Formspark states that submission content is retained until deleted by the customer. After deletion, a submission may remain recoverable for 30 days. Certain technical data, including the IP address and the approximate location that may be derived from it, may be retained for up to 12 months. FF Production deletes submissions that are no longer necessary in accordance with the retention periods stated above.
9. Your rights
In accordance with applicable regulations, you may exercise, subject to the conditions provided by law, your rights of access, rectification, erasure, restriction of processing, objection and, where applicable, portability by writing to contact@ffproduction.fr. FF Production may request the information necessary to verify the identity of the requester where there is reasonable doubt. You may also lodge a complaint with the CNIL, the French data protection authority.
10. Data transfers outside the European Economic Area
Formspark states that the main data it processes for submissions is stored in Ireland and Germany, within the European Economic Area. Some of its technical subprocessors may nevertheless process limited data outside the European Economic Area. Formspark states that such transfers are safeguarded, as applicable, by an adequacy decision, the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. The current list of subprocessors and applicable safeguards is available on the Formspark subprocessors page.
11. Automated decision-making and profiling
FF Production does not carry out any automated decision-making or profiling based on data submitted through the contact form.
12. Cookies and trackers
The website currently uses no non-essential cookies or trackers requiring consent. If such tools are added in the future, this policy will be updated before they are used.
13. Security
FF Production implements reasonable measures intended to preserve the confidentiality and integrity of the information processed. Formspark states in particular that it encrypts data in transit and restricts access to production data to authorised persons.
14. Changes to this policy
FF Production may amend this policy to reflect changes to the website or applicable regulations. The version published on the website is the version currently in force.