FR/EN
Data Protection — GDPR

Privacy
Policy.

How Strawberry Production collects, uses and protects your personal data, in strict compliance with the GDPR and French law.

Note: This English version is a courtesy translation. The French version is the only legally binding version. In case of any discrepancy in interpretation, the French version shall prevail.

01.

Data Controller Identity

The controller of the data collected on this site is:

Hamza El Jaouahiry
Sole proprietor (French micro-entreprise) — Strawberry Production
8 place Eugène Thomas, 93160 Noisy-le-Grand, France
SIRET: 105 253 314 00014
Email: Strawberryprod.contact@gmail.com

For any question regarding the processing of your personal data, you may contact the data controller by email at the address above.

02.

Commitment and Legal Framework

Strawberry Production is committed to protecting the privacy of visitors and clients of its website, in accordance with:

  • The General Data Protection Regulation (EU Regulation 2016/679, "GDPR")
  • French Law No. 78-17 of 6 January 1978, as amended, known as the "Data Protection Act"
  • Recommendations from the French Data Protection Authority (CNIL)
03.

Data Collected and Purposes

Strawberry Production only collects data strictly necessary for the purposes described below.

A. Contact Form

Data collected: name, email address, main goal (selection), free-form message.

Purpose: respond to your contact request and engage in potential commercial conversation.

Legal basis: consent (article 6.1.a of the GDPR), expressed by voluntary submission of the form.

Retention period: 3 years from last contact, in accordance with CNIL recommendations for B2B commercial prospecting.

B. Service Purchase

Data collected via Stripe: name, email, billing address, payment card data (never stored by us — only by Stripe).

Purpose: execute the contract (invoicing, service delivery, commercial follow-up).

Legal basis: contract performance (article 6.1.b of the GDPR).

Retention period: 10 years for invoices and accounting data, in accordance with article L.123-22 of the French Commercial Code.

C. Site Navigation

Minimal technical data: IP address, browser type, pages visited (via tools integrated with Vercel hosting).

Purpose: ensure the proper functioning of the site, prevent technical abuse.

Legal basis: legitimate interest (article 6.1.f of the GDPR).

Retention period: 13 months maximum for navigation logs.

04.

Subprocessors and Data Recipients

Strawberry Production uses third-party technical service providers (subprocessors under the GDPR), only to the extent necessary for the execution of the services offered:

Formspree (Formspree Inc., Boston, United States)

Contact form processing. Data transferred: name, email, message.

Framework for transfer outside the EU: European Commission Standard Contractual Clauses.

Stripe (Stripe Payments Europe Limited, Dublin, Ireland)

Online payment processing. Data transferred: identity, email, billing, payment card (processed and stored exclusively by Stripe, never by Strawberry Production).

Stripe is PCI-DSS Level 1 certified (the strictest banking security standard).

Vercel (Vercel Inc., Covina, United States)

Technical hosting of the site. Data processed: technical logs, visitor IP address.

Framework for transfer outside the EU: European Commission Standard Contractual Clauses.

Google (Google LLC, Mountain View, United States)

Professional email service (Gmail) used for receiving emails. Data processed: content of received emails.

Framework for transfer outside the EU: EU-US Data Privacy Framework (DPF).

The data is never sold, rented, exchanged or communicated to third parties for commercial or advertising purposes.

05.

Cookies and Trackers

The site only uses cookies strictly necessary for its operation (so-called "technical" cookies), which are exempt from prior consent under article 82 of the French Data Protection Act.

No advertising cookies, no non-anonymized third-party audience measurement cookies, and no third-party marketing trackers are placed on the visitor's browser.

You may at any time configure your browser to block or delete cookies, without significantly affecting your browsing experience.

06.

Your Rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

  • Right of access (article 15 GDPR): obtain confirmation that your data is being processed and receive a copy
  • Right to rectification (article 16 GDPR): correct inaccurate or incomplete data
  • Right to erasure (article 17 GDPR): request deletion of your data, subject to legal retention obligations
  • Right to restriction (article 18 GDPR): request suspension of the processing of your data
  • Right to portability (article 20 GDPR): receive your data in a structured and readable format
  • Right to object (article 21 GDPR): object to the processing of your data, in particular for prospecting purposes
  • Right to withdraw your consent at any time, when processing is based on it
  • Right to define directives relating to the retention, deletion and communication of your data after your death

To exercise any of these rights, write to Strawberryprod.contact@gmail.com, specifying the purpose of your request. A response will be provided within a maximum of one (1) month, in accordance with article 12.3 of the GDPR.

07.

Data Security

Strawberry Production implements appropriate technical and organizational measures to ensure the security of your data:

  • Systematic HTTPS encryption of communications with the site (TLS 1.3)
  • Enhanced authentication on tools used to process your data
  • Exclusive use of GDPR-compliant and security-certified subprocessors
  • Minimization: only strictly necessary data is collected and stored
08.

Transfers Outside the European Union

Some of our subprocessors (Formspree, Stripe via its US operations, Vercel, Google) may host or process data outside the European Union, particularly in the United States.

These transfers are framed by the following safeguards, in accordance with articles 44 to 50 of the GDPR:

  • Standard Contractual Clauses adopted by the European Commission
  • For transfers to the United States, adherence to the EU-US Data Privacy Framework (DPF) when the subprocessor is certified
09.

Complaint to the CNIL

If, after contacting us, you believe that your rights have not been respected, you have the right to lodge a complaint with the French Data Protection Authority (CNIL):

CNIL
3 place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Phone: +33 (0)1 53 73 22 22
Website: www.cnil.fr

10.

Policy Updates

Strawberry Production reserves the right to modify this privacy policy at any time, in particular to comply with any legislative, regulatory or technical evolution.

The date of the last update is indicated at the bottom of this page. In the event of substantial modification, visitors and clients will be informed by any appropriate means.

Last updated

May 30, 2026

Legal noticeTerms of saleBack to home