01 Preamble

TKSF (trading as "madly") places particular importance on protecting your personal data and privacy. This policy explains what data we collect, why, how long we keep it, and what your rights are.

It applies to the madly.agency website and all related services. It complies with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act of 6 January 1978 as amended.

02 Data controller

The data controller is:
TKSF (madly)
11 rue de la Voie Lactée, 69370 Saint-Didier-au-Mont-d'Or, France.
RCS Lyon no. 911 472 264
Email: contact@madly.agency

For clients and contacts in Spain, the data controller is LALAIN 3D STUDIO SL (NIF B87311916, Calle García Martín 9, 28224 Pozuelo de Alarcón, Madrid, Spain); the competent supervisory authority is then the Spanish AEPD (www.aepd.es).

03 Data we collect

We collect only the data strictly necessary for a professional exchange with you, via our contact form:

First name and last name — to address you personally
Company or brand — to understand the context of your request
Email — to reply to you
Phone (optional) — for faster exchange
Message — your brief, your need, your questions
Technical data (IP address, browser, language) — only for site security and proper page rendering

We do not collect any sensitive data within the meaning of Article 9 of the GDPR (origin, opinions, health, etc.).

04 Purposes of processing

Your data is processed to:

Respond to your contact or quote request
Establish and manage a business relationship (proposal, quote, invoicing)
Ensure the technical security of the website
Comply with our legal and accounting obligations

05 Legal basis

The processing of your data is based on:

Your express consent, given when submitting the form (GDPR article 6.1.a)
Pre-contractual measures taken at your request, or the performance of a contract (article 6.1.b)
Compliance with legal obligations (invoicing, accounting) to which madly is subject (article 6.1.c)

06 Retention period

Your data is kept:

3 years from your last contact if you do not become a client
10 years from the end of our collaboration for accounting and tax data (legal obligation)
Technical data (server logs): maximum 12 months

After these periods, your data is permanently deleted or anonymised.

07 Data recipients

Your data is accessible only by:

Authorised members of the madly team
Our technical service providers (OVH hosting in France, Web3Forms contact-form delivery service, Microsoft 365 email) — under a GDPR-compliant data processing agreement
The competent authorities in the event of a legal obligation

We never sell, rent, or transfer your data to third parties for commercial purposes.

08 Transfers outside the EU

The website is hosted in France by OVH. The contact form is delivered to our mailbox by the Web3Forms service, which may process this information outside the European Union; only the data entered in the form is concerned, and solely to pass it on to us.

09 Your rights

Under the GDPR, you have the following rights regarding your data at any time:

Right of access — know what data we hold about you
Right to rectification — correct inaccurate data
Right to erasure (right to be forgotten) — request deletion of your data
Right to restriction — restrict processing
Right to portability — retrieve your data in a reusable format
Right to object — object to processing
Right to withdraw consent at any time

To exercise these rights, please write to us at contact@madly.agency. We will respond within a maximum of one month.

If you feel that your rights are not respected, you may file a complaint with the CNIL (French Data Protection Authority) — www.cnil.fr.

10 Cookies

The madly.agency website exclusively uses strictly necessary technical cookies (language preference, sessions). No audience measurement, advertising, or tracking cookies are deposited. No consent banner is therefore required.

11 Security

We implement all appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, or disclosure: HTTPS connection, secure hosting, restricted access, regular backups.

12 Modifications

This policy may be modified at any time to reflect regulatory changes or changes in our practices. The version in force is always the one accessible at this address, with the update date shown at the top of the page.