← Back

Privacy Policy

Last updated: May 2026

GDPR Compliant — EU

Your Privacy Matters

Devbrek (Benjamin Sanna) is committed to protecting your personal data and respecting your privacy rights. This policy explains how we collect, use, and protect your information in compliance with the General Data Protection Regulation (GDPR) and applicable French data protection laws.

1. Data Controller

Benjamin Sanna — DevbrekMontpellier, FranceEmail: contact@devbrek.fr

2. Data We Collect

We only collect the minimum data necessary to operate this website:

Contact Form:

  • —Name and email address
  • —Message content

Analytics:

  • —Visit date and count (aggregated, no personal data)

Emile AI Chat:

  • —Conversation content (processed in real-time, not stored permanently)

3. Legal Basis for Processing (GDPR)

We process your data based on:

  • —Consent — when you submit the contact form
  • —Contract — to respond to your service requests
  • —Legitimate Interest — to improve the website and prevent abuse

4. How We Use Your Data

  • —Respond to contact requests and project inquiries
  • —Send email notifications via Resend (Resend Inc., USA)
  • —Monitor website traffic (aggregated, anonymous)
  • —Improve website content and user experience

5. Data Sharing & Transfers

We do NOT sell your personal data. We share data only with the following service providers:

  • —Vercel Inc. (USA) — website hosting and deployment
  • —Neon Inc. (USA) — database hosting (contact messages, analytics)
  • —Resend Inc. (USA) — email notifications
  • —Mistral AI SAS (France) — AI processing for Emile chat

For providers located outside the EU, data transfers are covered by Standard Contractual Clauses (SCCs) or equivalent mechanisms.

6. Your GDPR Rights

Under GDPR, you have the right to:

  • —Access — request a copy of your personal data
  • —Rectification — correct inaccurate data
  • —Erasure — request deletion of your data (right to be forgotten)
  • —Portability — receive your data in a structured format
  • —Restriction — limit how we process your data
  • —Object — object to processing based on legitimate interests
  • —Withdraw Consent — at any time, without affecting prior processing

To exercise these rights, contact: contact@devbrek.fr. We will respond within 30 days (GDPR requirement).

7. Data Retention

  • —Contact messages: 12 months from receipt
  • —Analytics data: aggregated, retained indefinitely (no personal data)
  • —Emile conversations: processed in real-time, not stored permanently

You may request deletion of your data at any time by contacting us.

8. Data Security

We implement industry-standard security measures including HTTPS encryption, secure database access, and environment variable protection. Access to personal data is strictly limited to the data controller.

9. Cookies

This website uses only essential cookies for session management (admin authentication). We do not use third-party tracking cookies or advertising cookies. No cookie consent banner is required for essential cookies only.

10. EU-Specific Provisions

You have the right to lodge a complaint with your local Data Protection Authority:

11. Children's Privacy

This website is not intended for children under 16. We do not knowingly collect data from minors. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy periodically. Significant changes will be communicated via email or website notice. Continued use of the website after changes constitutes acceptance.

13. Contact

For any privacy-related questions or to exercise your rights: contact@devbrek.frResponse time: within 30 days (GDPR requirement)