Privacy Policy

*Last updated: May 2026*

Introduction

Nicolas Catovic places a high importance on the privacy and protection of personal data of clients and visitors. This privacy policy explains how data is collected, processed, and protected when using nicolascatovic.fr and its associated services.

This policy complies with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act.

Data controller

Nicolas Catovic

Address: 29 Avenue Jean Médecin, 06000 Nice, France

Email: contact@nicolascatovic.fr

Data collected

The following personal data may be collected on this site:

Through the contact form

- Name and surname

- Email address

- Phone number (optional)

- Project type and intended date

- Message content

Through site navigation

- IP address

- Connection data (date, time, duration of visit)

- Browser type and operating system

- Pages visited and navigation path

As part of a service engagement

- Postal and banking details (for invoicing)

- Information related to the service (date, location, type)

- Photographs taken during the service

Purposes of processing

The data collected is used exclusively to:

- Respond to inquiries and provide quotes

- Deliver photographic services

- Manage invoicing and payments

- Comply with legal and accounting obligations

- Improve site functionality through anonymized statistical analysis

Legal basis for processing

Personal data processing is based on:

- **Consent** — for the contact form and non-essential cookies

- **Contract performance** — for service delivery

- **Legal obligation** — for accounting record retention

- **Legitimate interest** — for anonymized site usage statistics

Data retention

| Type of data | Retention period |

|---|---|

| Contact form inquiries | 3 years after last exchange |

| Client data (invoicing) | 10 years (accounting requirement) |

| Photographs from services | 5 years (unless deletion requested) |

| Navigation data and cookies | 13 months maximum |

Data recipients

The data collected is intended exclusively for Nicolas Catovic. It is never sold, rented, or transmitted to third parties for commercial purposes.

Some data may be shared with technical subcontractors (hosting, payment processor, accountant) strictly within the scope of their mission and in compliance with GDPR. These subcontractors include:

- **Pixieset Inc.** — site hosting and client galleries

- **Stripe** — online payment processing

- **Accounting partner** — solely for accounting obligations

Data transfers outside the European Union

Some services used (notably Pixieset hosting based in Canada) may involve data transfers outside the European Union. These transfers are governed by standard contractual clauses approved by the European Commission, ensuring an adequate level of protection.

Your rights

In accordance with GDPR, every individual has the following rights regarding their personal data:

- **Right of access** — obtain a copy of your data

- **Right to rectification** — correct inaccurate data

- **Right to erasure** — request deletion of your data

- **Right to restriction** — limit processing

- **Right to data portability** — receive your data in a structured format

- **Right to object** — oppose processing

- **Right to withdraw consent** at any time

These rights can be exercised by simple email to contact@nicolascatovic.fr, with proof of identity if necessary.

Filing a complaint with the CNIL

In case of disagreement regarding data processing, anyone can file a complaint with the French Data Protection Authority (CNIL):

CNIL — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

Phone: +33 1 53 73 22 22

Website: www.cnil.fr

Data security

Nicolas Catovic implements all appropriate technical and organizational measures to protect personal data against loss, unauthorized access, disclosure, alteration, or destruction. Sensitive data (payment) is processed exclusively through certified providers (Stripe, PCI-DSS compliant).