Privacy policy

This policy explains which personal data is processed when you use this website or contact me, and what your rights are under the General Data Protection Regulation (GDPR, EU regulation 2016/679) and the French “Informatique et Libertés” law.

1. Data controller

Apolline Tardieu, trading as Tarseline Productions (full contact details in the legal notice). For any question about your personal data: tarselineproductions@gmail.com.

2. No cookies, no trackers

This website uses no cookies, no advertising trackers and no audience-measurement tools, and stores no information on your device. No consent banner is therefore needed. The fonts are hosted on the site itself (no call to Google Fonts).

3. Data processed, purposes and retention periods

  • Contact, quote or order requests. Data: name, e-mail address, subject and content of the message, possibly your answer to “How did you hear about Tarseline Productions?” and the name of the artwork concerned. Purpose: to answer your request and prepare a quote. Legal basis: pre-contractual steps taken at your request, or legitimate interest in answering enquiries (article 6.1.b and 6.1.f GDPR). Retention: as long as needed to handle the request, then 3 years at most after the last exchange if no order follows.
  • Orders and payments. Data: identity, delivery and billing addresses, e-mail, telephone number if given, order details. Purpose: to fulfil, deliver and invoice the order. Legal basis: performance of the contract (article 6.1.b) and statutory accounting obligations (article 6.1.c). Retention: for the duration of the contractual relationship, then 10 years for accounting records (article L123-22 of the French Commercial Code). Your banking details are entered only on the SumUp payment platform and are never sent to me.
  • Technical connection data (IP address, date and pages requested). It is recorded by the site's host to keep the site running and secure (legitimate interest, article 6.1.f) and kept by the host for the legal period of one year.

4. Contact form

The contact form sends nothing to a server of this website: it opens your e-mail software with a pre-filled message that you send yourself. The information therefore reaches me only through the e-mail you send, not through this website.

5. Recipients and third-party services

  • E-mail service. E-mails are received in a Gmail mailbox (Google). Google may process this data outside the European Union; such transfers are covered by the mechanisms provided for by the GDPR (adequacy decision or standard contractual clauses).
  • YouTube video (Animation page). The video is loaded only after you click the play button. It is then delivered by YouTube (Google) in “privacy-enhanced” mode (youtube-nocookie.com), which receives technical data (IP address, device). As long as you do not click, no data is sent to YouTube for this video. “Watch on YouTube” links open youtube.com in a new tab, under YouTube's own policy. However, thumbnails of some YouTube videos shown in Animation or the portfolio are displayed from YouTube's image servers (i.ytimg.com), to which your IP address is sent when the page opens.
  • SumUp payment. When you buy through a SumUp payment link, you leave this website. SumUp processes your payment data as an independent controller, under its own privacy policy.
  • Instagram and Facebook. These are simple outgoing links: no social-network plug-in is built into the site. Their privacy policies apply once you are on their sites.
  • Host. See the legal notice.

Your data is neither sold nor passed on to third parties for commercial purposes.

6. Your rights

You have the right to access, rectify, erase, restrict the processing of and object to the processing of your data and, where applicable, the right to data portability, as well as the right to give instructions about what happens to your data after your death. To exercise them, write to tarselineproductions@gmail.com; you will receive an answer within one month (proof of identity may be requested in case of reasonable doubt).

If, after contacting me, you believe your rights are not being respected, you may lodge a complaint with the CNIL (the French data protection authority): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.

7. Security

The website is designed to be served over HTTPS and does not rely on any third-party script or service to work. Messages received are kept in an authenticated mailbox.

8. Minors

This website is not aimed at children under 15; I do not knowingly collect their data.

9. Changes

This policy may be updated, for example if new services are added to the site. The date of the last update is shown at the bottom of the page.

Last updated: 25 October 2026