Privacy policy

Last updated: 9 September 2026

This policy explains what personal data is collected on the website dugos.fr, why, for how long, who has access to it, and what your rights are. It is drawn up in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (“Informatique et Libertés”).

1. Data controller

The data controller is Laurent Gosselin (Dugos Photographie), 150 impasse du Plateau, 47430 Caumont-sur-Garonne, France.
For any question about your data, contact: laurent@dugos.fr.

Full details of the publisher: see the legal notice.

2. Data collected

Contact form

When you use the form on the Contact page, the following is collected:

• your name (required);
• your email address (required);
• the subject of your enquiry (optional);
• the content of your message (required);
• the date and time of sending, together with the IP address and browser type, recorded by the form's technical provider for security and anti-spam purposes.

No sensitive data is requested. Please do not include any in your message.

Connection logs

The website's host (GitHub, Inc.) keeps technical logs containing, among other things, visitors' IP addresses, in order to run the service and keep it secure.

3. Purposes and legal bases

1. Replying to your enquiry and discussing a possible photography project with you.
   Legal basis: the controller's legitimate interest in handling the requests sent to them (article 6.1.f GDPR); and, where the enquiry concerns a service, pre-contractual measures taken at your request (article 6.1.b).
2. Keeping the website secure and preventing abusive submissions (spam).
   Legal basis: legitimate interest (article 6.1.f).

Your data is not used for any other purpose. It is not subject to any automated marketing and is never resold.

4. Recipients and processors

The form data is intended for Laurent Gosselin only. The following act as technical service providers:

• Formspree, Inc. (United States) — receiving the form messages and forwarding them to the publisher's mailbox. Formspree acts as a processor, under its terms of service and its privacy policy, which include its GDPR-compliant data processing commitments.
• GitHub, Inc. (United States) — website hosting.

Data may also be disclosed where required by law (a request from an authorised judicial or administrative authority).

5. Transfers outside the European Union

As Formspree, Inc. and GitHub, Inc. are based in the United States, sending a message through the form and simply visiting the website involve a transfer of data to that country. These transfers are governed by the European Commission's standard contractual clauses and/or by these companies' participation in the EU–US Data Privacy Framework.

6. Retention periods

• Form messages: kept for 12 months from the last exchange, then deleted, if the enquiry does not lead to a service.
• If a service is provided: the relevant data is kept for the duration of the relationship, then archived for the length of the legal obligations (in particular accounting: up to 10 years).
• Technical logs: in line with the providers' retention policies (generally from a few days to 12 months).

7. Security

The website is served exclusively over HTTPS (encrypted connection). Access to the messages received is restricted to the publisher. The providers mentioned above apply their own technical and organisational security measures.

8. Your rights

Under the GDPR, you have the following rights over your data:

• the right of access and to obtain a copy;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to object to processing based on legitimate interest;
• the right to data portability for the data you have provided;
• the right to set directives on what happens to your data after your death.

To exercise these rights, write to laurent@dugos.fr. Proof of identity may be requested if there is reasonable doubt. You will receive a reply within one month.

9. Complaints to the CNIL

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority:
Commission Nationale de l'Informatique et des Libertés — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.

10. Cookies and trackers

The website uses no analytics, advertising or social-media cookies. No consent banner is therefore required.

Strictly necessary storage

A single item is stored in your browser (sessionStorage, key “preloaderShown”): it is used only to avoid replaying the intro animation when you move between pages. It is erased when you close the tab, contains no personal data and allows no tracking. As such it is exempt from consent.

Fonts

The website's fonts are hosted directly on dugos.fr: displaying them involves no request or transfer of data to a third-party service (Google Fonts or otherwise).

No third-party resources

All of the website's files (styles, scripts, animation library, fonts, images) are hosted on the site's own domain: browsing involves no request or transfer of data to a third-party service (Google Fonts, CDNs, etc.). The only possible external connections result from your deliberately clicking an outgoing link (Instagram, Facebook, Google Maps).

11. Changes

This policy may be updated at any time. The date of the last update is shown at the top of the page. We encourage you to check it regularly.