Privacy policy

Controller and scope

José Martins Abracos Antonio, entrepreneur individuel / sole trader (EI), SIREN 882 670 870, SIRET 882 670 870 00030, is the designated controller for this landing. Business details come from the RNE certificate describing the position on 23/06/2026.

This policy covers only the static information website. It does not describe reader accounts, payments, subscriptions, referrals or reading progress in the future application.

Published business contact details
42 Rue du Béarnais 31000 Toulouse, France
+33659067108
contact@nebolys.com

Data and purposes

Delivering and protecting pages may require the IP address, requested URL, browser and request date/time. The basis is the legitimate interest in presenting and protecting the business, respecting visitors’ rights.

A voluntary message to contact@nebolys.com contains your address, message and any attachments. It is used to respond, relying on legitimate interest or requested pre-contractual steps, as applicable. Rights requests are handled under legal obligations. No message is sent automatically and contact does not imply marketing consent.

Recipients, DNS and email

The proprietor handles messages. Vercel Inc. is the hosting/CDN provider. Cloudflare provides authoritative ebooks DNS in DNS-only mode, with no Cloudflare HTTP proxy/CDN/WAF for these pages; DNS and email still involve their own technical processing.

The confirmed route is contact@nebolys.com → Cloudflare Email Routing → the operator’s personal Gmail account (Google). It processes addresses, messages, attachments and metadata needed for delivery. The private destination address is not disclosed. This is not Google Workspace and no Workspace DPA is claimed. Voluntary contact does not constitute marketing consent.

The Vercel DPA distinguishes Customer Data processed as a processor on Pro from personal Service-Generated Data and Contact Data processed as a controller. The Cloudflare DPA governs data processed on the customer’s behalf. Google processes data received in personal Gmail under its privacy policy, including its own operation and security purposes; it is not described as a Workspace processor.

Retention by purpose

Correspondence: the operator retains messages to handle the enquiry until closure, sorts them on closure and reviews remaining messages annually. Separate, justified archiving is limited to legal obligations or disputes. Annual review does not mean automatic deletion after 12 months. Deletion uses available service features and respects applicable service obligations; it does not promise immediate erasure of every Google/Cloudflare technical copy.

Technical data: the Vercel policy ties retention to service and improvement needs, security, legal/contractual obligations and defending rights. It provides for deletion or anonymisation once legitimate need ends; backups that cannot immediately be deleted remain protected. For Customer Data, the DPA provides for deletion within a commercially reasonable period after the contract ends, subject to legal retention. These criteria do not set a universal period for IP, CDN or security data.

The documented one-day Runtime Logs window on standard Pro does not represent retention of all technical data. This static site defines no Vercel Functions or application logging. For data covered by the Cloudflare DPA, completion of the service or contract leads to return or deletion, subject to legal obligations. Google applies criteria by category, purpose and account settings, with possible delays between active and backup deletion; no universal deletion on closing a message is promised here.

Processing outside the EEA

Providers and their service providers may process data outside the EEA, including in the United States; exclusively European hosting is not guaranteed. The Vercel DPA provides standard contractual clauses for covered transfers and refers to the Trust Center for subprocessors. The Cloudflare DPA provides standard clauses for restricted transfers and the Data Privacy Framework within its applicable scope. Google describes adequacy decisions, the Data Privacy Framework and standard clauses in its transfer mechanisms.

These documented safeguards depend on the scope of each service and transfer; they do not automatically certify the lawfulness of every processing activity. You may request information about recipients and safeguards at contact@nebolys.com.

Your rights

You may write to contact@nebolys.com to request access, correction, erasure, restriction, objection and, where the conditions apply, portability. Identify the relevant exchanges without routinely sending identity documents. Proportionate verification may be necessary. Requests are answered within the legal period, normally one month, with notice of any permitted extension and its reasons. You may lodge a complaint with the CNIL.

Cookies, resources and version

The landing files contain no forms, scripts, analytics, pixels or application storage. CSS and SVG are local; language is represented in the URL. The mailto link opens your email application without automatic sending.

This site does not use Vercel Analytics, Speed Insights or a public Toolbar. Version 2026-10-28; principal text in French, with Portuguese and English versions of equivalent scope.