Privacy Notice

The data controller is Charles-Hossein ZENDEROUDI, sole trader, SIREN 527 795 314, VAT FR52 527795314, 35 rue Savier, 92240 Malakoff, France.

Contact: website@zenderoudi.com.

The Site collects the data you send through its forms: name, email address, message and, for an authentication request, the dimensions of the work and any photographs attached. The IP address and technical connection data are recorded when a form is sent, for security and fraud prevention purposes.

Depending on applicable law and your privacy choices, the Site uses Google Analytics and Vercel Web Analytics for audience measurement. Google Analytics uses cookies to measure visits, page views and technical information about your browser and device; Vercel Web Analytics measures page views without cookies. The same optional Analytics choice also enables Microsoft Clarity, which records technical and interaction data such as pages viewed, clicks, scrolling, browser and device information, performance data and the page content needed to produce heatmaps and reconstructed session replays. Text entered in form fields is masked by Clarity.

Form data are used solely to handle your request — authentication, reproduction, acquisition, loan or other correspondence — and to reply to you. Audience data are used to understand aggregate traffic, identify usability problems and improve the Site.

Form processing is based on article 6(1)(b) GDPR (pre-contractual steps at your request) and, where applicable, article 6(1)(f) (the publisher’s legitimate interest in answering requests and keeping a record of the exchange). In regions requiring prior consent, optional audience measurement and session recordings are based on your consent. Elsewhere, the publisher relies on its legitimate interest in understanding and improving the Site, subject to your right to object through “My Privacy Choices”. Refusing, withdrawing or objecting does not affect your access to the Site.

The data are intended for the publisher and Zenderoudi Archives. They are neither sold nor transferred to third parties for commercial purposes. Technical providers may process data only as needed to operate the Site, including Vercel for hosting and Web Analytics, Google for Google Analytics, Microsoft for Clarity, and the email provider for delivering messages.

The data are kept for as long as needed to handle the request, and then for the limitation period applicable to any dispute.

Photographs and documents sent with an authentication request are kept by Zenderoudi Archives, including where the work is not recognised as authentic, for the purposes of the archives, the fight against counterfeiting and the defence of rights.

Vercel resets after 24 hours the daily hash used to distinguish visitors. Microsoft Clarity retains ordinary playback data for 30 days and click, heatmap, labelled or favourited session data for up to 9 months.

You have a right of access, rectification, erasure, restriction, objection and portability in respect of data concerning you.

To exercise them: website@zenderoudi.com. You may also lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), www.cnil.fr.

For visitors in the EU/EEA, United Kingdom, Switzerland and United States, and when the visitor’s country cannot be determined, optional tracking is disabled until a choice is made. In other regions Analytics may be enabled by default. You can accept or reject all optional tracking through the Analytics setting for tools that help improve the Site: audience measurement (Google Analytics and Vercel Web Analytics) and session replays (Microsoft Clarity). Advertising storage and advertising personalisation are not enabled. Vercel Web Analytics is cookieless but remains subject to your Analytics choice.

You can change your choice, withdraw consent or object to optional tracking at any time using “My Privacy Choices” in the footer. Turning Analytics off stops future tracking; the page may reload to stop tools already running. Accessible first-party analytics cookies are removed when Analytics is refused. This does not delete information already received by a provider or cookies on a provider’s own domain.

When you make a choice, the Site stores it, its date and the consent-notice version in your browser’s local storage under “zenderoudi-consent” for up to 180 days (approximately six months), equally for acceptance and refusal. This record is used only to remember and apply your privacy choices. In regions requiring prior consent, optional tracking remains disabled if browser storage is unavailable.

This notice is governed by French law, as are the Terms of Use.