Privacy Policy

The data controller for www.henrilamy.fr is Henri Lamy, an individual artist operating independently. You can reach him at contacthenrilamy@gmail.com.

We collect only the data you voluntarily provide and the minimal technical data needed to operate and improve the site.

Inquiry form — when you submit a collect or contact enquiry, we receive your name, email address, and the message you write. This data is sent directly to Henri Lamy by email and is not stored in a database.

Analytics — we use Google Analytics (gtag.js) to understand how visitors use the site. Google Analytics collects anonymised IP addresses, pages visited, time on site, device type, and browser information. IP anonymisation is enabled; your full IP address is never stored. We also use Vercel Analytics, which collects aggregated performance and traffic metrics without storing personally identifiable information.

Inquiry form data is collected solely to respond to your enquiry about artworks, commissions, or collaborations. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) and, where applicable, steps prior to entering a contract (Art. 6(1)(b) GDPR).

Analytics data is collected to understand which pages and content are most useful, to improve site performance, and to inform future updates. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). You may opt out at any time — see the Cookie Policy.

Inquiry emailsare kept in Henri Lamy's email inbox for as long as the correspondence is relevant, then deleted. There is no separate database retention.

Google Analyticsdata is retained for 14 months by default, as configured in the Google Analytics property. Vercel Analytics data is retained according to Vercel's standard policy (90 days for detailed logs).

We do not sell, rent, or trade your personal data. We share data only with the following service providers, each acting as a data processor under appropriate safeguards:

• Google LLC — analytics processing via Google Analytics. Google may transfer data to the United States under the EU–US Data Privacy Framework.
• Vercel Inc. — site hosting and performance analytics. Vercel processes data in the United States under Standard Contractual Clauses.
• Cloudinary Inc. — image delivery (artwork images). No personal user data is shared with Cloudinary.
• Mux, Inc. — video delivery (performance videos). No personal user data is shared with Mux.

Under the GDPR and applicable French law (Law No. 78-17 of 6 January 1978 as amended), you have the following rights regarding your personal data:

• Right of access — to obtain a copy of the personal data we hold about you.
• Right to rectification — to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to restriction — to request that we restrict processing of your data in certain circumstances.
• Right to object — to object to processing based on legitimate interests.
• Right to data portability — to receive your data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, send a written request to contacthenrilamy@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the French data protection authority: CNIL (Commission Nationale de l'Informatique et des Libertés), www.cnil.fr.

The site is served exclusively over HTTPS. Henri Lamy takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. Inquiry data is handled through standard encrypted email channels and is not stored in any publicly accessible database.

This policy may be updated from time to time. When it is, the "Last updated" date at the top of the page will change. Continued use of the site after an update constitutes acceptance of the revised policy.