Privacy Policy

Data Controller

Grégory Mastorgio

1 rue Robert Delord

19100 Brive-la-Gaillarde

France

Email address for any question or request regarding personal data: i@mystik.work

Information Submitted Through the Contact Form

The website's contact form prepares a message in your own email application, addressed to i@mystik.work. The information you enter is not stored in a database and is not sent to any third-party form service: it is only included in the message you send yourself.

The information included in that message is limited to the fields actually present in the form:

• name;
• company or organisation;
• email address;
• country concerned;
• nature of the opportunity;
• expected type of intervention;
• duration or contract type;
• description of the opportunity;
• additional information;
• language of the form used.

No other data is requested or transmitted by the form. Your message also contains the technical information added by your own email service (sending address, headers, date of dispatch).

Required and Optional Fields

Required fields are marked with an asterisk together with an accessible indication: name, email address and description of the opportunity. They are necessary to understand, process and respond to the request.

All other fields are optional. No information that is not genuinely necessary is made mandatory.

Technical Data

The website uses no audience measurement tool, no advertising script and no profiling tool.

As with any website accessible online, the hosting and publishing infrastructure used (Lovable Cloud) may process, in its technical logs, connection data such as the IP address, the date and time of the request, the requested address, the browser type and the device type. This processing falls under the host's configuration and serves the operation, availability and security of the website, in particular the prevention of abuse.

Grégory Mastorgio does not use these logs to track individual visitors.

Purposes of Processing

The information submitted may be used solely to:

• receive and understand the request;
• respond to its author;
• follow up on the exchange;
• assess a proposal for an assignment, a position, an intervention, a partnership or a project;
• ensure the technical security of the form;
• prevent abusive use and automated submissions.

The data is not used to automatically subscribe visitors to a newsletter or mailing list. It is neither sold nor rented to third parties.

Legal Bases

Depending on the nature of the request, processing relies on:

• the legitimate interest of Grégory Mastorgio in receiving messages voluntarily sent to him, responding to them and ensuring the security of the website;
• the performance of pre-contractual measures where the request concerns a possible assignment, collaboration, service or professional relationship;
• consent only for specific processing that would genuinely rely on it.

Recipients

The information is primarily intended for Grégory Mastorgio, who is the sole recipient of the messages.

No form provider, no database and no third-party email sending service is used by the website to transmit the messages. Technical providers may nevertheless be involved, by category:

• website hosting and publishing: Lovable Cloud, operated by Lovable Labs Incorporated (United States);
• message transmission: your own email provider, freely chosen by you;
• hosting of the receiving mailbox: the email provider associated with the mystik.work domain;
• security, availability and abuse prevention: the technical mechanisms of the hosting infrastructure.

Retention Period

Messages received are kept only in the mailbox associated with the address i@mystik.work. The website keeps no copy in a database.

Requests that do not lead to a professional relationship are kept for the time necessary to process them, and then for a maximum of twelve months after the last exchange.

Information necessary for a contractual or professional relationship, for a dispute or to comply with a legal obligation may be kept for the legally required period.

Technical logs are kept for the period strictly necessary for the security and operation of the website, according to the actual configuration of the providers concerned.

Deletion of messages is not automated: it is carried out through a periodic manual review of the mailbox.

Your Rights

Under the conditions provided by the applicable regulation, you have:

• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to object;
• the right to data portability;
• the right to withdraw your consent where processing relies on it.

These rights may be exercised by writing to i@mystik.work. Proof of identity may be requested only where it is necessary to verify the identity of the person making the request.

Complaint to the CNIL

Anyone who considers that their rights are not being respected may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés — CNIL:

International Data Transfers

The website's hosting and publishing infrastructure is operated by Lovable Labs Incorporated, a company established in the United States. Certain technical data related to browsing the website may therefore be processed or accessed from a country located outside the European Economic Area.

Likewise, if your email provider or that of the receiving mailbox is established outside the European Economic Area, the content of your message may be processed there.

Any such transfer must rely on an appropriate legal mechanism, such as an adequacy decision or standard contractual clauses, depending on the provider concerned.

Security

Reasonable technical and organisational measures are implemented to limit unauthorized access, data loss, improper modification, unauthorized disclosure and automated submissions. The website is served exclusively over HTTPS and the form contains no secret key or credential.

No absolute security can, however, be guaranteed on the internet.

Automated Decision-Making

No decision producing legal effects is made automatically on the basis of the information submitted through the form. No profiling is carried out.

Cookies and Other Tracking Technologies

The website currently uses no non-essential tracking technology requiring prior consent: no audience measurement tool, no advertising tracker, no profiling tracker and no third-party embedded content setting trackers.

Only technical mechanisms strictly necessary for the operation, display or security of the website may be used by the hosting infrastructure. This is why no consent banner is displayed.

Changes to This Policy

This policy may be updated if the website, the form, the technical providers or the applicable obligations change.

The last updated date shown at the top of the page identifies the applicable version.

Contact

For any question regarding personal data: i@mystik.work