Privacy Policy

1. Introduction

This privacy policy informs users of the website https://www.khaldevmedia.com (hereinafter "the Website") about the nature of the personal data collected, the purposes of its processing, and their rights, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act (Loi Informatique et Libertés) of 6 January 1978, as amended.

The Website is a professional showcase site presenting the services of its creator. It has no client area, online shop or registration. The only possible interactions with the Website are browsing its pages, customising the display, and using the contact form.

2. Data Controller

The controller responsible for the personal data collected through this Website is:

Khaled AL AUWAD
Sole trader (auto-entrepreneur)
SIRET : 901 127 654 00027
Address : 30 AVENUE MARECHAL FOCH, Bureau 3, 69006 Lyon, France
Email : contact@khaldevmedia.com
Phone : +33 6 98 57 53 55
(hereinafter referred to as "Data Controller")

3. Data Collected, Purposes and Legal Bases

3.1 IP Addresses — Security Logging

With every request made to the Website, your device's IP address is automatically collected and recorded in the server logs. This collection is inherent to the HTTP protocol and occurs without any action on your part.

Purpose :IT security, detection and prevention of unauthorised or abusive access, analysis of technical anomalies.

Legal basis :Article 6(1)(f) GDPR — Legitimate interest of the website operator in ensuring the security and proper functioning of its infrastructure.

Retention period :12 months from collection.

3.2 Technical Cookies — Navigation Preferences

The Website uses only strictly necessary technical cookies to ensure its proper functioning. These cookies remember your navigation preferences between sessions. No advertising, profiling or third-party tracking cookies are placed on your device.

Cookie name	Purpose	Max duration
`khaldevmedia-theme`	Stores your chosen display preference (light mode, dark mode, or system default)	12 months
`NEXT_LOCALE`	Stores your chosen language preference (French or English)	Session

Legal basis :Article 6(1)(f) GDPR — Legitimate interest in ensuring a consistent browsing experience.

In accordance with CNIL guidelines, strictly necessary cookies do not require prior consent.

You can change your preferences at any time using the theme and language selectors available on the Website, or by deleting these cookies from your browser settings.

3.3 Contact Form — Voluntarily Provided Data

When you use the contact form available on the Website, you voluntarily provide us with the following information:

First name (required)
Last name (required)
Company (optional)
Email address (required)
Phone number (optional)
Subject (required)
Message (required)

Your device's IP address is also recorded at the time of submission for security purposes and to prevent abuse (spam, fraudulent submissions).

Purpose :Processing your contact request, answering your questions, and following up on the pre-contractual or commercial relationship.

Legal basis :Article 6(1)(b) GDPR — Implementation of pre-contractual measures at your request; and Article 6(1)(f) GDPR — Legitimate interest in responding to enquiries addressed to us.

Retention period :3 years from the date of submission or the last exchange, unless a different retention period is required by law.

4. No Third-Party Trackers or External Analytics

The Website does not use any third-party audience analytics service (such as Google Analytics, Matomo Cloud, or equivalents), any advertising network, or any social media button or widget that could track your browsing beyond the Website.

The fonts used on the Website are downloaded and served directly from the Website's server at build time. No request is made to any third-party server (such as Google Fonts) during your visit.

The anti-bot verification mechanism integrated into the contact form (ALTCHA) is entirely self-hosted: the proof-of-work calculation takes place in your browser and verification is performed by our own servers. No data is transmitted to any external service.

5. Data Recipients

Your personal data is solely intended for the Data Controller and is not sold, transferred or rented to any third party for commercial purposes.

As the Website is operated on its own infrastructure, data is not hosted by an external cloud provider. Should the use of a technical sub-processor become necessary, they would be bound by the obligations imposed by the GDPR and contractually required to respect the confidentiality and security of your data.

6. Transfers Outside the European Union

Your personal data is hosted and processed exclusively within the European Union. No transfers of data to any third country are carried out.

7. Your Rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR): obtain confirmation that your data is being processed and receive a copy.
Right to rectification (Art. 16 GDPR): request the correction of inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR): request the deletion of your data, subject to applicable legal retention obligations.
Right to restriction of processing (Art. 18 GDPR): request the temporary suspension of processing in the cases provided for by the GDPR.
Right to data portability (Art. 20 GDPR): receive the data you have provided to us in a structured, machine-readable format.
Right to object (Art. 21 GDPR): object, on grounds relating to your particular situation, to processing based on legitimate interests.

To exercise any of these rights, please contact us at: contact@khaldevmedia.com

We undertake to acknowledge your request and respond within one (1) month, in accordance with Article 12 GDPR. This period may be extended by two additional months for complex or multiple requests, with prior notification.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against any unauthorised access, modification, disclosure, accidental loss or destruction. These measures include access logging, detection of abnormal behaviour, and strict control of access to stored data.

9. Complaint to the Supervisory Authority

If, after contacting us, you believe that your rights over your personal data are not being respected, you have the right to lodge a complaint with the competent supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy — TSA 80715
75334 PARIS CEDEX 07
Phone : +33 1 53 73 22 22
Website : www.cnil.fr

10. Language

This privacy policy is available in French and in English on this website. In the event of any contradiction or discrepancy between the two versions, the French version shall prevail.

11. Policy Updates

We reserve the right to amend this privacy policy at any time, in particular to adapt it to changes in our practices, the services offered, or applicable regulations. Any amendment will be published on this page with the date of update. We encourage you to review this page regularly.

Last updated: 18 July 2026