This is an English translation, provided for convenience. The French version is the authoritative text for all legal information on this site. Read the French version.
01
Data controller
The data controller is Naël Riou, sole trader operating under the name Waynholl, 13 rue de la Vallée Yart, 78640 Saint-Germain-de-la-Grange, France, SIRET 909 650 210 00018.
For any question about your data, write to ask [at] waynholl.com. The workshop is not required to appoint a data protection officer; requests are handled directly by the operator.
02
What we collect
The site creates no user account and does not track your browsing. Only two sources of data:
The contact form
Name or company name, email address, telephone number, type of request, vehicle and engine concerned, intended use, preferred timing, description of the project, and any photographs or documents you attach. All form fields are required except attachments. A specific date is required only when you select a specific deadline.
Server logs
Like any web server, the host technically records the IP address, the date and the page requested. These logs serve security and fault diagnosis only; they are not used for statistics or for commercial purposes.
03
Purposes, legal bases and retention
Purpose
Legal basis
Retention
Answering a project request
Your consent, given by ticking the box on the form
3 years after the last exchange
Preparing a quotation and following a job
Performance of the contract
Duration of the job, then archiving
Keeping invoices and accounting records
Legal obligation
10 years (French commercial code)
Site security and technical diagnosis
Legitimate interest
12 months maximum
No marketing is sent from the data in the form. You will receive neither a newsletter nor a sales follow-up.
04
Recipients and processors
Requests are handled by Waynholl. Cloudflare operates the website and contact endpoint, Brevo (Sendinblue) delivers the form email, and OVHcloud hosts the receiving mailbox. These technical providers process the data needed to provide their services.
Brevo receives the information entered in the form and any attachments to deliver your request to Waynholl. This is a transactional email, not a newsletter subscription. See Brevo’s privacy policy. Technical processing may involve providers outside the European Economic Area; the applicable safeguards are described in their data processing terms. We do not claim that all processing takes place exclusively in France.
If a part has to be entrusted to a partner for an operation the workshop does not carry out itself, only the strictly necessary technical information is passed on, never your contact details, unless you explicitly agree.
05
Cookies and consent
This site sets no advertising cookies and works with no ad network. To date, no audience measurement tool is installed: no Google Analytics, no social network pixel.
No consent banner is shown while audience measurement is disabled. The site works as follows:
Strictly necessary — always on
The language is determined by the page address: French pages and English pages have separate URLs. The site does not store a language preference in your browser.
Audience measurement — subject to your agreement
Anonymous traffic statistics. The category exists but is empty: no tool is loaded today. If one were, it would run only for visitors who accepted this category, and this page would be updated first.
Embedded content — subject to your agreement
The map on the Contact page comes from OpenStreetMap and loads only after a click from you. The map is loaded for the current page only; this choice is not saved in your browser. No request is sent to a third-party service before that action.
The same loading behavior applies to all visitors: no audience measurement tool is active, and the map loads only on request.
The Cookies link in the footer opens this information. Loading the map is optional: the address and driving directions remain available as plain links.
06
Security
The site is served over HTTPS. Requests received are kept in a mailbox protected by a password and two-factor authentication. The email addresses and telephone number shown on the site are not written in clear text in the code, to limit automated harvesting by advertising robots.
07
Your rights
Under Regulation (EU) 2016/679 and French Act no. 78-17 of 6 January 1978 as amended, you have the following rights over your data:
— Access: obtain a copy of the data we hold about you.
— Rectification: correct inaccurate information.
— Erasure: ask for deletion, except records the law requires us to keep.
— Restriction and objection: freeze a processing operation or object to it.
— Portability: receive your data in a machine-readable format.
— Withdrawal of consent: at any time, without justification.
To exercise these rights, write to ask [at] waynholl.com stating your request. We reply within one month. Proof of identity may be requested where there is reasonable doubt about the identity of the person asking.
If the reply does not satisfy you, you may refer the matter to the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr.
08
Your rights by country
The site is operated from France. The technical providers and possible international processing are described in section 04. You can contact Waynholl to exercise your rights regarding your request.
European Economic Area, United Kingdom, Switzerland
The rights listed in section 07 apply under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection. Supervisory authority: the CNIL in France, the Information Commissioner's Office in the United Kingdom, the Federal Data Protection and Information Commissioner in Switzerland.
Canada
Under PIPEDA, you may access the information we hold about you, ask for it to be corrected, and lodge a complaint with the Office of the Privacy Commissioner of Canada.
Brazil
Under the LGPD, you may obtain confirmation that processing exists, access, correction, anonymisation, portability or erasure of your data, and information about its sharing, and you may refer the matter to the Autoridade Nacional de Proteção de Dados.
California and other United States jurisdictions
Under the CCPA as amended by the CPRA, and the equivalent laws of Colorado, Connecticut, Utah, Virginia and Texas, you may know which categories of information are collected, request a copy, correction or deletion, opt out of their sale or sharing, and suffer no discrimination for exercising those rights. Useful specifics: we neither sell nor share your personal information, we run no targeted advertising, we collect no sensitive categories and we carry out no profiling. An authorised agent may act on your behalf; reasonable verification of your identity may be requested.
Rest of the world
Whatever your country, write to us: we handle every request to the standard described in section 07, regardless of where you live.
09
Minors, automated decisions, updates
The site is not aimed at minors and we do not knowingly collect data about anyone under the age of sixteen. Should such data reach us, it would be deleted on notification.
No automated decision, no profiling, no scoring: your requests are read and handled by a person.
This page may change with the site. Each version carries its update date, shown at the top and in the footer. A substantial change would be flagged by the consent banner.