Privacy policy
This page explains what data is collected on this website, why, how long it is kept and how to exercise your rights.
This page is a courtesy translation. In the event of any discrepancy, the French version prevails.
Data controller
DM-STRAT, represented by Mélanie Roulet.
Contact: melanieroulet@dm-strat.com
Data collected
Simply browsing the website collects no data about you, apart from the host’s technical logs (IP address, date, page requested), which are needed for the security and proper operation of the site.
With your consent, the website measures its traffic with Vercel Web Analytics, its host’s tool. The script is only loaded once you have accepted in the information banner; if you decline, no visit data is sent. This tool sets no cookies and reads no information from your device: each visit is counted using a temporary identifier derived from the request, deleted after 24 hours, which cannot recognise you from one day to the next or across websites. Only aggregated statistics are viewed: pages viewed, date, referring site, country or approximate city, device type, operating system and browser.
When you use the contact form, the following are collected: first name, last name, email address and, if you provide them, phone number, company, type of organisation, device class, needs, message and attached document. If you write directly by email, only the information you choose to send is received.
Purposes and legal bases
- Responding to your request and, where applicable, preparing a proposal: pre-contractual steps taken at your request (Article 6(1)(b) GDPR).
- Keeping the website secure and preventing abusive submissions (bot filtering, submission limits): legitimate interest (Article 6(1)(f) GDPR).
- Measuring website traffic anonymously in order to improve the site: your consent (Article 6(1)(a) GDPR), given in the banner and withdrawable at any time.
Recipients
Requests are intended solely for Mélanie Roulet (DM-STRAT). They pass through two technical service providers acting on her behalf: Vercel Inc. (website hosting and audience measurement) and Resend (delivery of emails sent from the form). Your data is neither sold nor transferred to third parties.
Transfers outside the European Union
Vercel and Resend are based in the United States. The corresponding data transfers are covered by the safeguards provided for by the GDPR, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
Retention periods
- Requests that did not lead to an engagement: 3 years from the last exchange.
- Requests that led to an engagement: for the duration of the relationship, then for the period required by legal and accounting obligations.
- Form submission-limit data: a few minutes, in memory, with no lasting record.
- Audience measurement temporary identifier: 24 hours. The statistics kept afterwards are aggregated and do not relate to any individual.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, write to melanieroulet@dm-strat.com. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).
Cookies and trackers
This website sets no cookies and uses no advertising or social media tools. It loads no third-party resources: fonts, images and the audience measurement script are served by the site itself.
Audience measurement works without cookies or reading information from your device, and only produces anonymous statistics. It is enabled only if you accept it, and your choice (“yes” or “no”) is the only item kept in your browser’s local storage.
Audience measurement: disabled.
The only item stored in your browser (local storage) is a technical preference saved when you close the information banner, so that it is not shown again. It is not used for any tracking and can be deleted at any time from your browser settings.
Security
The website is served exclusively over HTTPS. It applies a content security policy that only allows its own resources, and prevents it from being displayed inside other websites. The form checks where submissions come from, filters bots and limits the number of requests.
To report a security vulnerability, see the security.txt file or write to melanieroulet@dm-strat.com.
Updates
Last updated: 17 September 2026.