Privacy Policy — Toan Sound

Last updated: 14 November 2026

1. Who is responsible

The data controller is Victor Duduyer, sole trader (EI), trading as Toan Sound, France. Contact for any privacy question: toansound.contact@gmail.com.
We apply the EU General Data Protection Regulation (GDPR) and the French Data Protection Act to all visitors, wherever they live.

2. What we collect, why, and on what legal basis

What	Why	Legal basis (GDPR art. 6)	How long
Contact form: name, email, type of project, message	To answer you and, for project requests, send a quote	Pre-contractual steps / legitimate interest	3 years after our last exchange
Emails you send us	To answer you and follow the project	Pre-contractual steps / contract	3 years after our last exchange; invoices 10 years (legal obligation)
Technical logs (IP address, browser) kept by our host	Security and operation of the site	Legitimate interest	Per our host's policy (Netlify does not publish a precise period)
Video playback: if you click play on a video, the video platform (YouTube (Google), TikTok or Instagram (Meta)) receives your IP address and technical data and may store cookies or similar identifiers	To show the video you asked to watch	Your action (click on play, after the notice shown on the site)	Per the platform's policy; nothing is loaded before you click

We do not sell your data. We do not use it for automated decisions. We have no audience statistics tool.

3. Who receives your data

Only Toan Sound and the service providers we use to run the site:

Netlify, Inc. (United States) hosts the site and stores the messages sent through the contact form (Netlify Forms); we also receive each message by email. Netlify states that it participates in the EU-US Data Privacy Framework and offers a data processing agreement.
Videos: YouTube (Google), loaded in privacy-enhanced mode (youtube-nocookie.com), TikTok and Instagram (Meta), each loaded only after you click play.

4. Transfers outside the EU

Netlify and the video platforms are located in, or may access data from, the United States. The transfer is covered by the EU-US Data Privacy Framework (for certified companies) or by the European Commission's Standard Contractual Clauses.

5. Cookies

Our website does not set any cookie and does not store anything in your browser (no local storage either). We use no advertising cookies, no social media pixels and no tracking across sites; for this reason we show no cookie banner.
The only exception is video: videos are loaded only if you click to watch them. Before that, nothing is sent to YouTube, TikTok or Instagram. After your click, the platform you chose may set its own cookies or similar identifiers; see its privacy policy. If you prefer not to, use the "Open on" link next to the video or do not play it.
If we add tools that use cookies later, a consent banner will let you accept or refuse them as easily.

6. Your rights

You can at any time: access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, withdraw your consent (this does not affect what was done before), and give instructions about your data after your death (French law).
To use these rights, email toansound.contact@gmail.com. We answer within one month. We may ask for proof of identity if we have a reasonable doubt.
If you think your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France) or with the data protection authority of your country.

7. Security

We use providers with secure connections (HTTPS), limit access to your data to what is needed, and keep it only as long as stated above.

8. Children

This site is not intended for children under 15.

There is no online shop or newsletter yet. Before they open, this policy will be updated to describe the data they use (orders, email address), the providers involved and the retention periods.

10. Changes

We may update this policy. The date at the top shows the latest version.