Privacy policy
RGPD / GDPR
Mis à jour le 1er septembre 2026 / Updated 1er septembre 2026
Data controller
Nathalie Varlet (sole proprietor), Santa Gertrudis de Fruitera, Ibiza, Balearic Islands, Spain.
Contact for any question about your data: contact@nathalievarlet.com
Data collected and purposes
Contact form: first name, last name, email, phone (optional), message. Used solely to answer your appointment or information request.
Anti-spam protection: the form uses Cloudflare Turnstile, which analyses the submission without using your data for advertising purposes.
No tracking cookies or audience measurement tools are used on this site.
Legal basis
Processing of form data is based on your consent (mandatory checkbox before sending), in accordance with Regulation (EU) 2016/679 (GDPR).
Recipients
Your data is transmitted only to Nathalie Varlet to process your request.
Technical providers: Cloudflare (hosting and form protection) and, for email delivery, an email sending service (Resend). These providers act as processors.
Retention period
Form data is kept for the time needed to process your request, then at most 3 years after the last contact, unless an ongoing client relationship or legal obligation requires otherwise.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data.
To exercise these rights, write to contact@nathalievarlet.com. You may also lodge a complaint with the Spanish supervisory authority (AEPD — www.aepd.es) or, for France, the CNIL (www.cnil.fr).
Security
The site is served over HTTPS (TLS encryption) and the form is protected against spam. No data is sold or shared with third parties for commercial purposes.
