Privacy policy
Last updated: 10 November 2026.
This is the personal website of Pierre-Sacha Baglione. It is designed to collect as little data as possible: no advertising trackers, no audience measurement, and no cookie is placed on your device when you simply browse. This page describes, in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the French Data Protection Act of 6 January 1978 as amended, the few processing operations that remain.
Controller and publisher
Pierre-Sacha Baglione publishes this website and acts as data controller. He can be reached through the contact form.
Hosting: the website is hosted by the publisher himself, on a server located in France. Connections pass through the network of Cloudflare, Inc., which protects the website against attacks and may process visitors' IP addresses for that purpose, in accordance with its own privacy policy.
Data collected and purposes
Connection logs
On every visit, the server automatically records the IP address, date and time, requested page, response code and the browser's technical signature (user agent). This information is used solely to keep the website secure (attack detection, abuse limitation) and to diagnose failures.
- Legal basis: the publisher's legitimate interest in securing the website (Article 6(1)(f) GDPR).
- Retention: six months at most, then automatic deletion.
- Recipients: the publisher only; logs are never sold or shared with third parties.
Contact form
When you use the contact form, the data you enter (name, e-mail address, subject, message) and your IP address are stored on the website's server and forwarded by e-mail to the publisher so that your request can be handled and answered.
- Legal basis: your consent, given by submitting the form, and the publisher's legitimate interest in answering your request (Articles 6(1)(a) and 6(1)(f) GDPR).
- Retention: twelve months after your message, then automatic deletion.
- Recipients: the publisher only. The e-mail travels through the publisher's e-mail provider, bound by its own confidentiality commitments.
- Optional: you are under no obligation to use this form; without this information, however, the publisher will not be able to answer you.
Website administration
A strictly necessary session cookie is set only in the browser of the website administrator when logging in to the management interface. No cookie is placed on visitors' devices.
Cookies and trackers
This website uses no analytics, advertising or social-network cookies and embeds no third-party scripts. In line with the French data protection authority's guidelines, no consent banner is therefore required: there is nothing to accept or refuse.
Third-party content
Some pages feature videos hosted on YouTube. To protect your privacy, nothing is loaded from YouTube until you click the play button: the preview image is served by this website. The only exception is the ambient video on the home page (the "My erasmus in Finland" slide), which is loaded, without sound, as soon as the page is displayed. In every case, videos are loaded from the youtube-nocookie.com domain (privacy-enhanced mode); Google LLC may then process data, including your IP address, under its own privacy policy. Self-hosted videos, documents and files are served from servers owned by the publisher.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. To exercise these rights, use the contact form; you will receive an answer within one month.
If, after contacting us, you believe your rights are not respected, you may lodge a complaint with the French supervisory authority, the Commission nationale de l'informatique et des libertés (CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr), or with the supervisory authority of your country of residence.
Security
All exchanges with the website are encrypted (HTTPS). The website runs on an isolated, hardened infrastructure without third-party extensions, and its backups are encrypted. Access to the administration area is protected by two-factor authentication.
Transfers outside the European Union
Data processed by the website is hosted in the European Union. Only the loading of a YouTube video (at your request or, for the ambient video on the home page, as soon as the page is displayed) may lead to processing by Google LLC, governed by the standard contractual clauses adopted by the European Commission.
Minors
This website is not specifically aimed at minors and does not knowingly collect data about them.
Changes
This policy may be updated to reflect changes to the website or to regulations; the date of the last update appears at the top of this page.