Privacy.

Who processes your data?

Nicolas Rousselin, a sole trader operating as Tramevia, is the data controller for enquiries received. Address: 7 impasse du Docteur Pallet, 33910 Saint-Denis-de-Pile, France. For any questions: contact@tramevia.com.

Sending an enquiry

Your enquiry is prepared in your browser. Your contact details and text are transmitted only when you click “Send my enquiry”. A technical session is created when you interact with the form to protect submissions. Reviewing and copying do not transmit your enquiry. The email link remains available as an alternative contact method.

When you send your enquiry, Tramevia receives your name, email address, selected services, description and chosen timeline. Your name, address and a description of your needs are required to handle your enquiry; you can leave the timeline open. Do not include passwords, identity documents or sensitive data in this form.

Book a 20-minute call

On the booking page, you pick a slot, then give your name, your e-mail address and the topic of the call. These three details are needed to arrange the call; they are sent only when you click “Book this slot”. The name of your device’s time zone is attached to the booking so the confirmation can state your local time.

Two e-mails are then sent through Resend: one to contact@tramevia.com, the other to your address, each with a calendar file. This processing is based on the pre-contractual steps taken at your request. The website database keeps neither your name, nor your address, nor the topic: only the slot, its reference, a keyed hash of your e-mail address and of your IP address and the delivery state are stored, to prevent double bookings and limit abuse, then deleted thirty days after the slot. To change or cancel a booking, reply to the confirmation e-mail.

Why is data processed, and on what legal basis?

The information is used to reply, assess feasibility and prepare a possible quote. Processing is based on steps requested by the individual before entering into a contract. For a general enquiry or correspondence with a company representative, it is based on the legitimate interest of Tramevia in handling business enquiries.

The brief does not subscribe you to a newsletter or trigger any automatic marketing message.

Demonstrations and storage

Your manual FR/EN choice is remembered for the session in this tab, without geolocation or external transmission. Your browser language does not trigger any redirection.

The prototypes use fictional data. Your changes are held in memory while you browse and disappear when the page reloads. In the “Your website in 30 seconds” demonstration, the button that carries your configuration into the form places it in the tab’s session storage: it is cleared as soon as the form reads it, or when the tab closes, and is only transmitted if you send your enquiry. The website code does not install cookies or advertising trackers, and does not use persistent browser storage.

Files you choose to export stay on your device. They are not sent to the studio. Copying text uses the clipboard on your device.

Audience measurement

To know which pages are read and where visits come from, each page sends the website an anonymous signal: the page address, the website the visit came from (for example a search engine or a social network) and, where relevant, a click towards the contact form, the email address or the phone number. The server adds this signal to a daily counter. It stores no IP address, no identifier and no information about your browser, and cannot follow a visitor from one page to another. Successful form submissions are counted the same way.

No cookie is set and no third-party analytics service is used. If your browser sends the Global Privacy Control or “Do Not Track” signal, nothing is sent. The counters are kept for 25 months in a Cloudflare D1 database located in the European Union.

Recipients and service providers

The form is processed by Cloudflare, then sent through Resend to the Google Workspace inbox contact@tramevia.com. Enquiry content is not stored in a website database. To limit abuse and duplicates, the service stores keyed hashes of the IP address and enquiry, a reference, timestamp and submission status. This security processing is based on Tramevia’s legitimate interest in protecting the form.

Enquiries are read by Nicolas Rousselin. The business mailbox uses Google Workspace. Data is not resold. The website is hosted on Cloudflare Pages. Browsing requests include the IP address, requested URL, date and technical browser information. This data is processed to deliver and secure the website, based on the legitimate interest in providing an accessible and secure service. Tramevia does not create individual visitor tracking records. Cloudflare also processes certain network data for its own security and operational purposes, described in its privacy policy.

Google and Cloudflare may process data outside the European Economic Area. Their agreements provide transfer safeguards, including standard contractual clauses where applicable: Google agreement and Cloudflare agreement. You can request a copy of the relevant safeguards at contact@tramevia.com.

Email delivery

Resend delivers emails and may retain messages and their logs for 30 days under its free plan. Processing may take place outside the European Economic Area. Its data processing agreement includes standard contractual clauses for relevant transfers. Resend agreement.

Retention

Form references and technical hashes are used over a 24-hour window, then deleted on the next submission. Cloudflare technical backups may retain them for the service’s restoration period. Content received by email follows the retention periods below.

Simple enquiries that do not lead to further work are deleted no later than twelve months after the last exchange with the sender. A monthly review applies this period. Items that must be retained for a legal obligation or to establish or defend a legal claim are kept separately, with restricted access and a justified retention period.

If a service is agreed, relevant data is retained while it is delivered. Contracts and business correspondence are then archived for the applicable statutory period, generally five years; invoices and accounting records are retained for ten years from the end of the financial year. Certain electronic consumer contracts worth at least €120 must be retained for ten years from delivery or performance. These archives are not used for marketing.

For technical logs processed on behalf of its customer, the Cloudflare agreement provides for retention until the end of the agreement or until processing is no longer needed for the service, whichever comes first. For its own network processing, Cloudflare determines retention according to the purpose, nature of the data and its legal obligations. Tramevia does not configure additional exports or archives of these logs.

Your rights

Depending on the processing involved, you may request access to, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. Write to contact@tramevia.com. You may also lodge a complaint with the CNIL.