1. Data controller
The data controller is GB WEB STUDIO, self-employed (French "Micro-entrepreneur"), French business ID SIREN 992840009. Contact: contact@mowando.com.
2. Data collected and purposes
Newsletter (optional)
- Data: email address.
- Purpose: sending the monthly "Mowando Letter".
- Legal basis: consent (newsletter form opt-in).
- Duration: until unsubscribe (one-click in every email).
- Processor: Buttondown — US, covered by Standard Contractual Clauses (SCC).
Contact form
- Data: name, email, subject, message.
- Purpose: responding to your enquiry.
- Legal basis: legitimate interest.
- Duration: 12 months after last correspondence.
- Processor: Resend — US, covered by SCC.
Analytics (Google Analytics 4)
- Data: anonymised analytics cookies (`_ga`, `_ga_*`), truncated IP, navigation events (page views, searches, newsletter clicks).
- Purpose: anonymous audience measurement, content & UX improvement.
- Legal basis: legitimate interest, under Consent Mode v2 by default (no cookie banner at present — seeour cookies policy for opt-out options).
- Duration: 14 months (default GA4 retention).
- Processor: Google Ireland Ltd (EU) — data may be transferred to Google LLC (US) under Data Privacy Framework.
3. No commercial sharing
Mowando does not sell, rent or trade your data to third parties for commercial purposes. The only recipients are the technical processors listed above, strictly for the described purposes.
4. Your GDPR rights
Under GDPR (Regulation (EU) 2016/679), you have the right to:
- Access your data
- Rectification
- Erasure ("right to be forgotten")
- Restriction of processing
- Object to processing
- Data portability
- Withdraw consent at any time
To exercise your rights: write to contact@mowando.com. We respond within 30 days.
For unresolved complaints, you may file a claim with the French data protection authority (CNIL): cnil.fr/en/plaints.
5. Security
Data is transmitted over encrypted HTTPS. Emails are stored at the listed processors (Buttondown, Resend) who apply their own security measures (encryption at rest, access controls).
6. Data Protection Officer (DPO)
Given the size of the structure and absence of massive processing of special categories of data, Mowando is not required to appoint a DPO. The data controller acts as the contact point.