Privacy Policy
This notice explains how Konstantin Gessli, trading as Gessli Dev (“we”, “us”, “our”), handles personal data under the EU General Data Protection Regulation (GDPR) and French Law No. 78-17 of 6 January 1978 (Loi Informatique et Libertés), as supervised by the CNIL.
01. Scope
This notice applies to visitors to gessli-dev.com and to people who contact us by email or the enquiry form. Project data that a client controls once an engagement begins (their own users, their own customers) is handled under the confidentiality and data-protection terms of the project contract, not this notice.
02. Data controller
The data controller is Konstantin Gessli (SIREN 108 098 856), 8 Rue Edmond Valentin, Appartement 3, 75007 Paris, France. As a sole-trader practice, there is no separate Data Protection Officer; data matters are handled directly by Konstantin Gessli at konstantin@gessli-dev.com.
03. Personal data collected
Data you provide directly
Name, email address, company name, project description, and anything else you choose to include through the enquiry form or in correspondence, plus contract and billing details once a project is agreed.
Data collected automatically
Our hosting provider logs basic technical data — IP address, browser type, pages visited, and time of visit — for security and operational purposes. This Site does not run advertising or analytics scripts that build an individual profile of visitors.
04. Special category data
We do not ask for special category or criminal offence data. Any unsolicited submission containing such data is deleted unless retaining it is necessary to establish, exercise, or defend a legal claim.
05. Purposes and lawful bases
| Purpose | Lawful basis (Art. 6 GDPR) |
|---|---|
| Responding to an enquiry | Legitimate interest |
| Preparing and sending a quote | Legitimate interest |
| Performing a signed project contract | Contract |
| Invoicing and accounting records | Legal obligation |
| Website security and fraud prevention | Legitimate interest |
| Establishing or defending a legal claim | Legitimate interest / legal obligation |
Where legitimate interest is relied on, we have considered that the processing is proportionate to the purpose and does not override your rights — for example, replying to an enquiry you sent us.
06. Consent and marketing
Submitting the enquiry form includes a confirmation that you consent to being contacted about your enquiry. We do not run a mailing list and do not send unsolicited marketing. Any future marketing communications would follow applicable French and EU direct-marketing rules and allow an easy opt-out.
07. Recipients
Your data is accessed by Konstantin Gessli directly. Our hosting provider acts as a data processor for infrastructure purposes only. Enquiry-form data is not currently passed to a third-party form-handling service. Data may otherwise be disclosed to a professional adviser (accountant, legal counsel), a public authority where legally required, or a successor business in the event the practice is sold or restructured.
08. International transfers
Our hosting infrastructure operates within the European Union. Where any processor is located outside the EU/EEA, transfers rely on an adequacy decision or an appropriate safeguard such as the European Commission's Standard Contractual Clauses. Details are available on request at konstantin@gessli-dev.com.
09. Your rights
Under the GDPR, you have the right to be informed, and the rights of access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time where processing relies on it. You also have the right not to be subject to a decision based solely on automated processing that produces legal effects on you. To exercise any of these rights, contact konstantin@gessli-dev.com; we aim to respond within one month, extendable by two further months for complex requests.
10. Automated decision-making and profiling
We do not use automated decision-making or profiling in connection with this Site or our services.
11. Retention
| Data | Retention period |
|---|---|
| Enquiries that do not become a project | Up to 12 months after last contact |
| Client project records and correspondence | 6 years after contract end |
| Invoices and accounting records | 6 years, per French commercial record-keeping rules |
| Server access logs | Standard period set by the hosting provider |
12. Security
We use HTTPS encryption, access controls limited to the people who need them, and routine software updates to protect the data we hold. In the event of a personal data breach likely to pose a risk to your rights, we will notify the CNIL within the statutory timeframe and inform affected individuals where required.
13. Children
This Site is not directed at children and we do not knowingly collect personal data from children. Where a project involves a service aimed at children, the relevant protections are addressed in the project's own specification and contract.
14. Complaints
If you have a concern about how your data is handled, contact konstantin@gessli-dev.com first; we aim to acknowledge any complaint within 30 days. You also have the right to lodge a complaint directly with the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.
15. Cookies
This Site does not use advertising or analytics cookies. Only strictly necessary technical session data may be used where required for the Site to function, which under French and EU rules does not require consent.
16. Third-party links
This Site may link to third-party websites. We are not responsible for the privacy practices of sites we do not operate, and encourage you to review their own policies.
17. Changes
We may update this notice from time to time. Any change is reflected in the version number and date at the top of this page.
Contact
- konstantin@gessli-dev.com
- 8 Rue Edmond Valentin, Appartement 3, 75007 Paris, France