Privacy Policy and Personal Data
Last updated: 18 September 2026
1. Data controller
The controller responsible for the processing of personal data described in this policy is: BUREAU TONALLI, simplified joint-stock company with a sole shareholder (SASU), share capital: €1,000, registered with the Paris Trade and Companies Register under number 911 629 194, 212 rue Saint-Maur, 75010 Paris, France. Email: dream@bureautonalli.com
This policy is provided in accordance with Regulation (EU) 2016/679—the General Data Protection Regulation (“GDPR”)—and the French Data Protection Act No. 78-17 of 6 January 1978, as amended.
2. Information collected through the website
The BUREAU TONALLI website does not provide user accounts, an online contact form, a newsletter subscription service or an online purchasing facility. BUREAU TONALLI does not use the website to collect visitors’ names, email addresses or telephone numbers.
The website displays an email link allowing visitors to contact BUREAU TONALLI using their own email service. Clicking this link does not submit information through the website itself.
3. Information provided by email
When you contact BUREAU TONALLI at dream@bureautonalli.com, we receive the information that you voluntarily include in your message. This may include your name and professional contact details; your company and professional role; information concerning a proposed project; requests for availability, fees or a quotation; documents or other information attached to your message; and subsequent correspondence relating to the request.
Please do not include sensitive personal information that is not necessary for your enquiry. This information is processed exclusively to read and respond to your enquiry; discuss a potential project; provide information about availability, fees or quotations; take steps requested before entering into a contract; manage an existing professional or contractual relationship; and comply with applicable legal, accounting or administrative obligations.
Depending on the circumstances, this processing is based on the performance of pre-contractual measures requested by you or the performance of a contract under Article 6(1)(b) GDPR; BUREAU TONALLI’s legitimate interest in responding to professional enquiries and conducting its business under Article 6(1)(f) GDPR, particularly where you contact us on behalf of a company; or compliance with a legal obligation under Article 6(1)(c) GDPR.
Providing this information is voluntary. However, we may be unable to respond or prepare a quotation if we do not receive the information necessary to understand your request.
4. No advertising or newsletters
Email addresses and other contact details received through professional enquiries are not added to an advertising or newsletter mailing list; used to send unsolicited promotional communications; sold, rented or provided to data brokers; used for targeted advertising; or used to create advertising profiles.
BUREAU TONALLI will only use your details to respond to and manage the professional exchange that you initiated, unless you separately and expressly request another use.
5. Website hosting and technical information
The website is hosted using Framer. When a visitor accesses the website, limited technical information may be processed automatically by the hosting and content-delivery services. This can include an IP address, the date and time of the request, the requested page, the referring page, and information concerning the browser, operating system and device.
This information is processed only to display and deliver the website and its media; maintain the website’s security and technical performance; detect technical errors or misuse; and produce aggregated website-usage statistics. The legal basis is BUREAU TONALLI’s legitimate interest in operating, securing and improving its website, under Article 6(1)(f) GDPR.
6. Audience measurement and cookies
The website uses Framer’s built-in analytics service. Framer Analytics does not use cookies or persistent advertising identifiers. To distinguish visits during a single day, Framer uses the visitor’s IP address and browser information to create a temporary identifier using a daily rotating secret. The secret is reset each day.
BUREAU TONALLI only receives aggregated information, such as page views, referring sources, approximate country, device type, browser and operating system, and cannot use these statistics to identify individual visitors. The website does not currently use advertising cookies, social-media tracking pixels or third-party marketing analytics. If a service requiring prior consent is introduced in the future, it will not be activated before visitors receive appropriate information and an opportunity to accept or refuse it.
7. Service providers and recipients
Personal data is accessible only to BUREAU TONALLI personnel who require it for the purposes described above. Limited information may also be processed by service providers necessary to operate the website and professional communications, including Framer B.V. for website hosting and built-in analytics; Google services for professional email delivery and the delivery of a website font; BunnyWay d.o.o. (bunny.net) for the delivery of images and video through its content-delivery network; and Framer’s hosting infrastructure providers, including Amazon Web Services.
Information may also be disclosed to BUREAU TONALLI’s professional advisers, accountants or competent public authorities where necessary or legally required. These providers may act as processors on behalf of BUREAU TONALLI or as independent controllers for certain limited technical operations.
8. International transfers
Some service providers or their subprocessors may process information outside the European Economic Area. Where such a transfer takes place, it must be supported by a mechanism recognised under Chapter V of the GDPR, such as an adequacy decision, the EU–US Data Privacy Framework where applicable, or the European Commission’s Standard Contractual Clauses.
9. Retention periods
Personal data is retained only for as long as reasonably necessary. If an enquiry or quotation does not lead to a commercial relationship, related correspondence will normally be deleted within 12 months of the last exchange. If an exchange leads to a commercial relationship, contracts and commercial correspondence may be retained for five years after the end of that relationship.
Invoices and supporting accounting documents are retained for ten years from the end of the relevant financial year, as required by French law. Information may be retained for longer where necessary to establish, exercise or defend a legal claim or to comply with another legal obligation. Technical information is retained according to the limited operational and security requirements of the relevant service provider. Framer’s daily analytics identifier does not persist from one day to the next. Aggregated anonymous statistics may be retained for a longer period.
10. Your rights
Subject to the conditions and limitations provided by applicable law, you may request access to the personal data concerning you; correction of inaccurate or incomplete information; deletion of your personal data; restriction of processing; portability of information you provided, where applicable; and to object to processing based on BUREAU TONALLI’s legitimate interests.
To exercise these rights or ask a question about this policy, contact dream@bureautonalli.com. Please indicate that your request concerns personal data. BUREAU TONALLI may request additional information only where reasonably necessary to verify your identity.
You also have the right to submit a complaint to the French supervisory authority: Commission Nationale de l’Informatique et des Libertés (CNIL), www.cnil.fr.
11. Security
BUREAU TONALLI takes reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. However, no internet or email transmission can be guaranteed to be completely secure. You should therefore avoid sending confidential or sensitive information by ordinary email unless appropriate safeguards have been agreed.
12. Changes to this policy
This policy may be updated if the website, BUREAU TONALLI’s practices, its service providers or the applicable legal requirements change. The date displayed at the beginning of the policy indicates its latest revision.