Legal

Privacy policy

1. Data controller

Valentin Nguyen-Van-Dau ("ssuke"), 2 rue Élisée Reclus, 91120 Palaiseau, France — suke.prod@gmail.com.

2. Data collected

  • Identification and contact data: first and last name or artist name, e-mail address, phone number, messaging or social media handles used to communicate.
  • Billing data: address, business details where applicable, history of orders and invoices. Card data is processed directly by the payment provider and is never stored by the controller.
  • Content supplied: audio, video, text, visual files and project information.
  • Website technical data: the website does not use non-essential cookies or any audience measurement tool requiring consent.
  • Processing orders, performing services, delivering files and invoicing: performance of the contract.
  • Keeping accounts and retaining invoices: legal obligation.
  • Answering contact requests and complaints: legitimate interest and pre-contractual measures.
  • Informing existing clients of new offers: legitimate interest, with the right to object at any time.
  • Citing a project as a reference: the controller's legitimate interest in showcasing its professional references, with a right to object at any time without giving reasons (see Terms, Article 13.2).

4. Recipients

Data is accessible only to the controller and to the processors necessary within the meaning of Article 28 GDPR: invoicing platform (Abby), payment provider (Stripe), file transfer service (SwissTransfer), messaging services used for first contact, correspondence and sending working versions (WhatsApp, Instagram), website host (Vercel), e-mail (Google). To these may be added, where applicable, any technical provider to whom the controller entrusts all or part of the performance of a service under Article 11.5 of the General Terms and Conditions of Sale; such provider is bound by a contract compliant with Article 28 GDPR and accesses only the files strictly necessary for its assignment. Some of these providers are located outside the European Union; transfers are governed by appropriate safeguards (standard contractual clauses, Data Privacy Framework). No data is sold or transferred to third parties for commercial purposes.

5. Retention periods

  • Source files, working audio files and deliverables: 3 weeks after delivery of the final files, then deleted.
  • Session files without audio content (technical mix parameters): 12 months after delivery of the final files, then deleted.
  • Invoices and accounting records: 10 years (legal obligation).
  • Client contact data: duration of the business relationship, then 3 years from the last contact.
  • Enquiries from prospects not followed by an order: 3 years.

6. Your rights

You have rights of access, rectification, erasure, restriction, objection and portability, as well as the right to set post-mortem instructions. To exercise them: suke.prod@gmail.com. A response is provided within one month. You may lodge a complaint with the CNIL (www.cnil.fr).

7. Security

Data is stored on equipment and services protected by password and authentication. Project files are deleted at the end of the stated retention period.

8. Changes

This policy may be updated; the version in force is the one published on the website.