Privacy notice

What we do with the details you send through the contact form, and how we count visits. In short: we use your details to reply and to filter spam, keep them for 12 months and never sell them.

Who is responsible

Onesse Studio is run by [legal entity: name, registration number, address], the controller of your personal data. For anything about your data, write to [email].

What we collect

  • From the contact form: your name, company (optional), email and message.
  • On every page request: your IP address and browser details, which Cloudflare processes to deliver and protect the site.
  • For the spam check on the form: your IP address and browser signals, processed by Cloudflare Turnstile. Cloudflare also uses these signals, collected when the form comes into view, to improve its bot detection under its Turnstile privacy policy.
  • Visits: Cloudflare Web Analytics counts page views without cookies and without identifying you.

You don’t have to use the form. Without an email address we can’t reply.

Why, and on what legal basis

  • To reply to your enquiry and prepare a possible project: steps you asked for before a contract (GDPR Art. 6(1)(b)).
  • To keep the form free of spam and abuse: our legitimate interest (Art. 6(1)(f)).
  • To deliver the site quickly and safely (hosting, CDN) and to count visits (Cloudflare Web Analytics): our legitimate interest (Art. 6(1)(f)).

We don’t use your details for marketing, profiling or automated decisions, and we never sell them.

Who processes it for us

  • Cloudflare, Inc. (USA): hosting, the form handler, the spam check (Turnstile), email delivery and visit counting.
  • Telegram (Telegram FZ-LLC, UAE): a copy of your enquiry arrives in our private Telegram chat, so we can reply quickly.
  • Our email provider stores the enquiry email.

Transfers outside the EEA

  • Cloudflare (USA): certified under the EU–US Data Privacy Framework.
  • Our team reads your enquiry in Ukraine, and a copy is kept in Telegram’s cloud. [legal basis for transfers: pending legal review]

How long we keep it

  • Enquiries: 12 months after our last message, then we delete them. If we start working together, the contract sets the terms.
  • Technical logs of the form handler at Cloudflare, without the text of your enquiry: up to 3 days.

Your rights

You can ask us for a copy of your data and to correct or delete it. You can also restrict or object to its use, or get it in a portable format (GDPR Art. 15–⁠21). Where we rely on consent, you can withdraw it at any time; this doesn’t affect what happened before. Write to [email]; we reply within one month.

Complaints

You can complain to a data protection authority, in particular in the EU country where you live or work. In the Netherlands that is the Autoriteit Persoonsgegevens, in France the CNIL. You can also write to us first at [email]; you don’t have to.

Cookies and analytics

  • Cloudflare Web Analytics uses no cookies or local storage and counts visits without identifying you.
  • The spam check (Turnstile) loads only with the contact form, to tell people from bots.
  • There are no other analytics or advertising cookies.