Updated: May 24, 2026

Privacy policy

How AubryMedia collects, uses and protects your personal data on aubrymedia.com — under the GDPR and the French Data Protection Act.

This policy describes how AUBRYMEDIA (hereinafter "we" or "the studio") collects, uses and protects the personal data of visitors to aubrymedia.com (hereinafter "the site"), in accordance with the General Data Protection Regulation (GDPR — EU 2016/679) and the French Data Protection Act of 6 January 1978 as amended.

1. Data controller

  • AUBRYMEDIA — SASU with share capital of €1,111
  • Registered office: 280 Avenue de Verdun, 06700 Saint-Laurent-du-Var, France
  • SIREN: 888 405 180
  • Email: hello@aubrymedia.com

Given our size and the absence of large-scale processing of sensitive data, we have not appointed a Data Protection Officer (DPO). Any request relating to your personal data can be sent to hello@aubrymedia.com.

2. Data collected and purposes

2.1 Booking a call via Cal.com

When you book a slot via the "Book a call" button, you are redirected to Cal.com. The data collected (name, email, chosen slot, optional message) is processed by Cal.com as a processor and transmitted to us to prepare and hold the meeting.

  • Legal basis: pre-contractual steps taken at your request (Art. 6.1.b GDPR).
  • Retention: 3 years from the last contact for commercial prospecting purposes (CNIL recommendation).

2.2 Email exchanges

When you write to hello@aubrymedia.com, we process your email and its content to reply to you.

  • Legal basis: legitimate interest (Art. 6.1.f GDPR) — responding to inquiries addressed to us.
  • Retention: 3 years from the last exchange.

2.3 Audience measurement (Google Analytics)

We use Google Analytics 4 to measure site traffic, understand how it is used, and improve it. This tool drops cookies on your device and collects data such as your IP address (anonymised), device type, browser, pages visited and visit duration.

  • Legal basis: your consent (Art. 6.1.a GDPR), collected via the cookie banner.
  • Retention: 14 months maximum.
  • Processor: Google Ireland Limited (EU office) with transfer to the United States (Google LLC).

2.4 Advertising tracking (Meta Pixel)

We may use the Meta Pixel (Facebook/Instagram) to measure the effectiveness of our advertising campaigns on Meta platforms and build retargeting audiences.

  • Legal basis: your consent (Art. 6.1.a GDPR), collected via the cookie banner.
  • Retention: 13 months maximum.
  • Processor: Meta Platforms Ireland Limited (EU office) with transfer to the United States (Meta Platforms Inc.).

3. Cookies

The site uses two cookie categories:

| Category | Purpose | Consent | Max retention | |---|---|---|---| | Strictly necessary | Language preference, storing cookie consent | Not required | 12 months | | Audience measurement (Google Analytics) | Traffic statistics | Required | 14 months | | Advertising (Meta Pixel) | Campaign effectiveness, retargeting | Required | 13 months |

You can change your preferences at any time via the "Manage cookies" link at the bottom of the page, or by clearing cookies from your browser.

4. Data recipients

Your data is never sold. It is accessible to authorised personnel within AUBRYMEDIA and to our technical processors acting on our instructions:

  • Vercel Inc. (site hosting) — United States
  • Cal.com Inc. (appointment booking) — United States
  • Google Ireland Limited (audience measurement, if consented) — Ireland, US transfers
  • Meta Platforms Ireland Limited (advertising, if consented) — Ireland, US transfers

5. Transfers outside the EU

Some processors (Vercel, Cal.com, Google, Meta) host or process data in the United States. These transfers are governed by:

  • the EU-US Data Privacy Framework (DPF) (adequacy decision of 10 July 2023), for certified processors;
  • the European Commission's Standard Contractual Clauses, otherwise.

6. Your rights

Under articles 15 to 22 of the GDPR, you have the following rights over your data at any time:

  • Right of access — obtain a copy of your data.
  • Right to rectification — correct inaccurate data.
  • Right to erasure — request the deletion of your data.
  • Right to restriction of processing.
  • Right to object — for processing based on our legitimate interest.
  • Right to data portability.
  • Right to withdraw consent at any time, for processing based on it.
  • Right to set post-mortem directives regarding your data.

To exercise any of these rights, write to hello@aubrymedia.com. We respond within one month maximum.

If, after contacting us, you consider that your rights are not respected, you can lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr/en/plaintes.

7. Security

We implement appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, alteration or destruction: hosting on secured infrastructure, HTTPS (TLS) encryption, access control, logging, regular updates.

8. Changes

This policy may be updated to reflect technical, legal or organisational developments. The last update date is shown at the top of the document.

Privacy policy | AubryMedia