Updated October 2026
Privacy policy
Controller & contact
Paolo Grilly EI / Codbip is responsible for processing related to this website. For questions or rights requests: [email protected].
Data processed
Without analytics consent: your consent choice and technical logs needed for operation and security (IP address, time, requested resource and result). If you email us: your contact details and message. This portfolio has no user accounts, forms or business database.
Purposes & legal bases
Website operation and protection: legitimate interest. Responding to an engagement enquiry: precontractual measures or legitimate interest, depending on the request. Rybbit analytics: optional consent, which you can withdraw in the footer. No advertising use.
Call request
The “Book a call” form sends what you need for the engagement, its topic, first name, last name, work e-mail, company and preferred slot, directly to Codbip’s contact service (codbip.com). Purpose: getting back to you to set the call (pre-contractual steps at your request). Data is stored in Codbip’s follow-up tool (Directus, hosted in Europe) and an e-mail is sent through Brevo (EU). Cloudflare Turnstile checks that the request is not automated (legitimate interest in spam protection). Retention: 3 years after the last contact. This site stores nothing itself.
Analytics
Rybbit is open-source software self-hosted by Codbip and served from rybbit.bobymining.com (Codbip infrastructure in Europe). Its script loads only after consent. Analytics covers visits and pages viewed; URL query parameters are not tracked. Do not put confidential information in URLs. Data is not sold.
Retention & recipients
Your consent preference expires after 6 months. Technical logs follow Codbip infrastructure’s security-retention policy. Contact exchanges are kept during the relationship and necessary follow-up, then deleted or archived according to applicable obligations. Access is limited to Paolo Grilly and providers needed for hosting, request delivery (Cloudflare, which processes the IP address and request to deliver and secure the site, including outside the European Union under its contractual commitments) and email.
Your rights
You may request access, rectification, erasure, restriction and, where applicable, portability or objection. Withdrawing consent does not affect earlier processing. You may complain to the French data-protection authority, CNIL: https://www.cnil.fr.