Legal notice and privacy

Last updated: 31 October 2026

Legal notice

Publisher: Tino Vasse Brovelli, sole trader, entrepreneur individuel or EI, trading as VBROVELLIO
SIREN, French company number: 919 987 057
VAT: TVA non applicable, art. 293 B du CGI
Address: Laon
Email: tino.vassebrovelli@vbrovellio.fr
Phone: 0612823036
Publication director: Tino Vasse Brovelli
Hosting provider: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France · +33 9 72 10 10 07 · ovhcloud.com. The website and its data are hosted in France.

Intellectual property

The texts, visual identity, logo and code of this website belong to the publisher. Any reproduction, even partial, requires written permission. Photographs come from royalty-free image libraries or were created for the website; screen previews are illustrative and contain no real data.

Liability

Prices, timescales and features shown on this website are given for guidance only: only the written, signed quote binds both parties. The publisher strives to keep the website accurate and available, without being able to guarantee it at all times.

Links

This website may link to third-party websites whose content the publisher does not control. Linking to this website requires no permission, provided its content is not presented as someone else’s.

Services

The services presented are intended for professionals: companies, freelancers and associations. The signed quote sets their terms: scope, price, timetable, payment and code ownership. Governing law: French law.

Personal data

We collect the minimum needed to answer your request, we never sell or rent any data, and we use no advertising tools. For each use, this page describes what is collected, why, and how long it is kept. Retention periods are applied automatically: data is erased every night.

Data controller

Tino Vasse Brovelli, sole trader trading as VBROVELLIO. For any question about your data: tino.vassebrovelli@vbrovellio.fr.

Project diagnosis form: studying your project, offering you a video call, preparing a quote

Data: Description of your needs, current tool, number of users, budget, timetable, role in the decision, useful link, name, email, company, phone and attachments if you provide them, language, consent text and an encrypted fingerprint of your IP address: the address itself is not stored
Legal basis: Pre-contractual steps taken at your request
Retention: 3 years after our last exchange. If you ask for deletion: permanently erased within 30 days

Emails about your request, such as the acknowledgement, the meeting proposal or a follow-up, and, if you gave a number, equivalent text messages

Data: Email address or phone number, subject, date and delivery status
Legal basis: Pre-contractual steps; legitimate interest for the sending log
Retention: Sending log: 1 year

Newsletter, with a two-step sign-up: you confirm through a link sent by email

Data: Email and, if you provide them, first name, last name, company; language; proof of your consent: date, accepted text and IP address
Legal basis: Your consent, which you can withdraw at any time with the link in every newsletter
Retention: Until you unsubscribe. Unconfirmed sign-ups: erased after 30 days. After unsubscribing, only the email address is kept on a suppression list, so we never write to you again

Measuring interest in newsletters

Data: For each send: delivery, opens, clicks, unsubscribe, complaint
Legal basis: Legitimate interest: improving the content we send
Retention: 3 years

Client reviews published on the website

Data: Name, company, job title, review text, rating, date and proof of your consent
Legal basis: Your consent
Retention: Until you ask for removal

Website security and protection against abusive submissions

Data: IP address, to limit submissions to 5 per hour, kept for one hour; technical server logs with truncated IP address
Legal basis: Legitimate interest: protecting the website and its users
Retention: One hour for the submission limit; technical logs erased on a rolling basis within a few days

Forms are protected by Google reCAPTCHA, a Google Ireland Limited service, which analyses technical information such as your IP address, browser and interactions with the page to tell humans from bots. See Google’s privacy policy: policies.google.com/privacy.

Audience measurement

No audience measurement tool is used on this website.

Who can access your data

Your data is read only by the VBROVELLIO team. The technical providers below process it on our behalf and cannot use it for their own purposes:

OVHcloud: hosting of the website, data and backups, in France;
Mailjet, part of the Sinch group: sending emails, data hosted in the European Union;
Google Ireland Limited: reCAPTCHA spam protection and, if you accept it, audience measurement.

For a video call, the link you receive opens the chosen calendar or video-conferencing tool, which applies its own privacy policy.

Cookies and local storage

The website only uses what it needs to work. No advertising cookies.

Name	Purpose	Duration
Session cookie	Multi-step forms and protection against forged submissions, required	Until you close the browser
Browser local storage	Remembering that you closed the newsletter panel or the language suggestion, with no personal data and nothing sent	Until you clear it
_GRECAPTCHA	Google reCAPTCHA spam protection, required to submit forms	6 months

The administration area, reserved for the team, also uses a session cookie and a display preference cookie.

Your rights

At any time you can access your data, have it corrected or erased, restrict its use, object to its use, in particular for marketing, receive it in a readable format to pass on to another provider, withdraw your consent, and give instructions on what happens to it after your death.

Contact us: tino.vassebrovelli@vbrovellio.fr. We reply within one month at most. If you believe your rights are not respected, you can complain to the CNIL, the French data protection authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr.

Security

The website is served over HTTPS only, from servers located in France. The administration area is protected by password and two-factor authentication, access keys to third-party services are encrypted, and data is backed up daily, with backups kept for 14 days.