Privacy policy
Data controller
SARL Gessi Studio — 5 Boulevard du Cap, 06160 Antibes, France. SIRET : 808 844 138 00020. Data controller: SARL Gessi Studio. Website owner: Jacek Gubała. Personal data contact: info@gessistudio.fr.
Contact form data
The form collects your name, email address, town, enquiry subject and message, plus your telephone number if supplied. Fields marked with an asterisk are needed to handle your request. Please avoid sending sensitive data.
Purposes and legal bases
Information is used to answer your enquiry and, when you request a service, to take precontractual steps at your request (GDPR Article 6(1)(b)). General enquiries may be handled on the basis of the legitimate interest in responding to correspondents (Article 6(1)(f)). [Confirm the bases and purposes against actual processing.]
Recipients, hosting and transfers
Authorised gessistudio personnel and technical providers required for hosting and email may process this data. Planned hosting: mydevil.net, ADMIN.NET.PL S.C., Bitwy Pod Monte Cassino 5/198, 33-100 Tarnów, Poland. [Complete the email provider, other processors, processing locations and any transfers outside the EEA after verification.]
Retention
[Complete retention periods for unsuccessful enquiries, customer correspondence, technical logs and backups, together with applicable legal obligations.] Each period must be limited to what is necessary for its purpose.
Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction or portability, or object to certain processing. Contact: info@gessistudio.fr. You may also complain to the CNIL: https://www.cnil.fr/.
Cookies and external services
The necessary gessi_consent cookie stores your choices, their date and a random reference for 180 days. WordPress and Polylang may use cookies necessary for security, sign-in and the requested language. Google Analytics and Google Ads are not used. Optional categories are disabled. Any future optional service must be declared with its provider, purposes, cookies and durations, and blocked before your permission. The pll_language cookie may remember the requested language according to Polylang settings. WordPress sign-in and preference cookies apply only to the relevant functions described below. The circular cookie icon opens the panel; its accessible name is “Cookie settings”. The pll_language cookie may remember the requested language according to Polylang settings. WordPress sign-in and preference cookies apply only to the relevant functions described below. The circular cookie icon opens the panel; its accessible name is “Cookie settings”.
Policy update
Version dated 3 October 2026. The owner must confirm actual processing and complete the bracketed items, especially the email provider and retention for enquiries, logs and backups.
Form protection
When local protection is enabled, the form uses a honeypot field and limits repeated enquiries. The IP address and email address are converted into cryptographic fingerprints to associate counters with the same sender. These counters expire after 15 minutes and are deleted by scheduled automatic cleanup. This protection sends no data to an external CAPTCHA service.
Cookie choices and their log
You can accept, reject, customize or withdraw permission with equal ease using “Cookie settings” in the footer or the permanent button. Closing the panel, browsing or not responding does not grant permission. Choices, including rejection, are remembered for 180 days. A change to the policy or services requires a new choice. The log contains a random reference, choices, language, action, UTC time and a copy of the information presented. It stores no raw IP address or user agent. It is retained for 365 days to document expressed choices, then removed by scheduled daily cleanup, which depends on traffic or server cron. Abuse protection separately uses a temporary counter linked to a fingerprint of the IP address. For your rights or a copy of your history, contact info@gessistudio.fr with the reference displayed in the panel. [Confirm the legal basis, evidence retention and additional processing with the data controller.]
Who we are and website address
The SARL Gessi Studio website presents electrical and home automation services in France. Address of this installation: https://gessistudio.fr/. The controller and contact details are listed above. Contact form data is used to discuss your project; the theme does not reuse it for automated marketing.
Comments
The current website templates do not provide a comment form. If WordPress comments are opened, form data, the IP address and browser user agent may be recorded to prevent abuse. An email hash may be sent to Gravatar if avatars are enabled; after approval the avatar and comment are public. Gravatar’s privacy policy is available at https://automattic.com/privacy/. Before enabling these features, the owner must adapt this notice and retention periods.
Media
Visitors have no file upload form. Images are published by authorised users. A photograph containing EXIF GPS metadata may disclose its location to anyone downloading it; this information should be removed before publication. The lightbox enlarges local images without sending data to a third-party service.
Embedded content from other websites
Theme images, fonts, icons and logos are served locally. The theme adds no external video player, interactive map or social media widget. External content added later may transmit the IP address, use cookies and track interactions as if you visited the third-party website. The owner must declare the provider, processing and retention, and gate the embed using the applicable consent category before it loads.
WordPress accounts and sign-in cookies
Accounts are for people authorised to administer the website. WordPress stores profile information; users can view and edit their profile, except their username, and request deletion at info@gessistudio.fr. Administrators can access this information. On the sign-in page, wordpress_test_cookie temporarily checks whether cookies are supported. Sign-in cookies normally last two days, or two weeks with “Remember Me”; signing out removes them. wp-settings-* preferences normally last one year. wp-saving-post, set after editing a post, expires after one day. These cookies apply to people using those functions and are not used for advertising.
Technical logs and where data is sent
mydevil.net hosting in Poland may process technical logs including the IP address, timestamp, requested resource and browser information for security and operation. The theme does not send cookie choices to Google. The contact form sends your message to gessistudio’s mailbox. If an authorised user requests a password reset, WordPress includes the IP address in the reset email. [Confirm the email provider, recipients, retention for logs and backups, and any transfers outside the EEA.]
Retention for accounts and comments
WordPress account data is retained while the account is needed, then deleted or anonymised subject to applicable obligations. If comments are enabled, WordPress retains comments and metadata without automatic expiry by default; the owner must define an appropriate period. Erasure rights do not cover data that must be retained for legal, administrative or security obligations. Retention for commercial enquiries and email remains to be confirmed in the “Retention” section.
Data protection and automated decisions
The choice log and export are restricted to authorised administrators. On the HTTPS version of the website, communications are encrypted in transit. The theme creates no advertising profile and makes no automated commercial decision with legal effects on you. Spam protection may block repeated or apparently automated submissions; if you have difficulty, email info@gessistudio.fr directly. The owner must maintain access controls, software, backups and incident handling procedures.