1. Data Controller

The website eastmed.fr is owned and operated by:

Olga Kroutolapova
Company: EastMed
Email: contact@eastmed.fr

Website development: Francetest

---

2. Hosting and Data Storage

Hosting provider: Amazon Web Services (AWS)
Location: Paris, France (Region eu-west-3)
Domain management: OVH

All data is stored and processed within the European Union, in compliance with the General Data Protection Regulation (GDPR).

---

3. Data We Collect and Why

3.1 Contact Form

When you contact us via the website form, we collect:

• Name
• Email address
• Subject
• Message content

Purpose: To respond to your inquiries or collaboration requests.
Legal basis: Your explicit consent when submitting the form.
Retention: Up to 3 years after receipt, then securely deleted.

Emails are transmitted through Mailgun (smtp.eu.mailgun.org) using TLS encryption.

---

3.2 Technical Logs

Our hosting servers automatically record certain information for security and maintenance purposes, including:

• IP address
• Browser type
• Visited pages
• Date and time of visit

Purpose: Website security, performance monitoring, and troubleshooting.
Retention: Up to 90 days.

---

4. Cookies

This website only uses essential cookies required for its operation.

• Session cookies: Ensure the proper functioning of WordPress and user authentication.
• No tracking or advertising cookies are used.

In accordance with the French Data Protection Act (Article 82), no consent is required for essential cookies.

---

5. Data Sharing

Your personal data is shared only with trusted service providers essential to the operation of this website:

Provider	Purpose	Location	Security
Mailgun	Email delivery	EU	TLS/SSL
Amazon Web Services (AWS)	Hosting	France	GDPR compliant

No personal data is transferred outside the European Union.
We do not sell, rent, or trade personal data under any circumstances.

---

6. Data Security

We take appropriate technical and organizational measures to protect your data:

• Secure HTTPS (SSL/TLS) encryption
• Regular CMS and plugin updates
• Strong passwords for admin access
• Firewall and backup systems
• Input validation and anti-spam controls

---

7. Your Rights (GDPR)

You have the following rights under the GDPR:

• Access – Request a copy of your personal data
• Rectification – Correct inaccurate data
• Erasure – Request deletion of your data (“right to be forgotten”)
• Restriction – Limit data processing under certain conditions
• Portability – Receive your data in a structured format
• Objection – Object to processing for legitimate reasons

To exercise your rights:
📧 contact@eastmed.fr
We will respond within one month.

If you believe your rights have not been respected, you can contact the CNIL (French Data Protection Authority):
www.cnil.fr