Privacy policy

Last updated: 16 October 2026

Who is responsible

Stepan Bogatyrev EI, artiste-auteur, SIREN 931 740 724. For any question about your data: stepan@bogatyrev.pro.

What data, and why

The contact form collects your name, your email or phone number and, if you choose to say, the format you are interested in. This data is used only to reply to your request and, where relevant, to send you a quote.

Legal basis: your consent, given by ticking the box in the form, and pre-contractual steps taken at your request (Article 6(1)(a) and (b) GDPR).

I do not sell your data, I do not use it for marketing without your consent, and I share it only with the technical providers listed below.

How long

Data from a request that does not lead to a project is deleted 3 years after our last exchange. If we work together, it is kept for the duration of our relationship and then as required by accounting and tax rules.

Technical providers

Cloudflare, Inc. — site hosting, spam protection for the form (Cloudflare Turnstile) and cookie-free visit statistics (Cloudflare Web Analytics).
Plus Five Five, Inc. (Resend) — delivery of the email that forwards your request to me.
Apple (iCloud) — my mailbox, where your request arrives.

Data may be processed in the United States. Transfers are covered by appropriate safeguards: the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Cookies and external services

The site uses no advertising cookies and no cookie-based analytics. A single technical cookie, lang, remembers the language you chose for 12 months.

Cloudflare Turnstile checks that the form is sent by a person rather than a bot; to do so it processes technical data from your browser.

Videos hosted on Vimeo or YouTube load only if you click on them. Those services may then set their own cookies.

Business correspondence

This part covers work emails, messages and calls: when you write to me, when I write to you first and when we work together. The controller is Stepan Bogatyrev EI (see Who is responsible).

What data

name, company and job title;
email address, phone number, your profile name on a messaging app or social network;
the content of messages, attachments and the history of our exchanges;
my working notes: what we agreed and what comes next;
if I wrote to you first: where your contact details came from.

Please don’t send me anything the work doesn’t need, such as ID numbers or health information.

If I write to you first

I write first — by email or by message — only to businesses and professionals, and only about your work. I never write first to private individuals.

I find contacts myself, by hand: business directories and registers, trade shows, fairs and competitions, online maps, company websites and their social media pages, meeting in person. Sometimes a mutual acquaintance passes on your contact. In my first message, I tell you where your contact came from.

If you’d rather not hear from me again, just say so — “no thanks” is enough. I won’t write to you again.

Why, and on what legal basis

To reply to your request and prepare a quote: steps taken at your request before a contract (Article 6(1)(b) GDPR).
To carry out the work — discussing the project, sending files, agreeing on changes: performance of the contract (Article 6(1)(b)).
To write to you first and keep my list of contacts: my legitimate interest in telling people who may find it useful about my work (Article 6(1)(f)).
To keep quotes and invoices: legal obligation (Article 6(1)(c)).
To keep our correspondence about what we agreed, in case of a dispute: my legitimate interest (Article 6(1)(f)).

I do not sell your data and I do not share it for advertising.

How long

No follow-up or no reply: 3 years after your last message. If you never replied: 3 years after I obtained your contact details.
You asked me not to write again: I delete your contact and our correspondence. I keep only your name, your address or number and the date you said no, for 3 years, so that I don’t write to you again.
We worked together: project correspondence is kept for 5 years after the project ends, quotes and invoices for 10 years.

Who else sees your data and where it is stored

Apple (iCloud) — my mailbox stepan@bogatyrev.pro and my phone contacts. In Europe the service is provided by Apple Distribution International (Ireland); data is generally stored by Apple Inc. in the United States.
Google Drive — working documents for the project. Provided by Google Ireland; Google servers around the world, including in the United States.
Cloudflare — download links for final files from bogatyrev.pro (Cloudflare R2 storage).
CIC — quotes and invoices, through the bank’s e-factures service (France).
Claude (Anthropic) — AI assistant: message drafts, translation, notes. Provided by Anthropic Ireland; data is processed on servers in the United States. In my settings, the use of my conversations to train models is turned off.
Project partners, for example a composer or an editor: they see the project files and your comments and are sometimes copied on emails. They receive only what the project needs.

My list of contacts and my working notes are on my computer. The AI assistant can see them when I work on them.

If you write to me on WhatsApp, Instagram, Facebook Messenger, LinkedIn, Telegram, iMessage or by SMS, that service handles our messages under its own rules, as it does all your messages there.

Apple, Google, Cloudflare and Anthropic also process data in the United States. These transfers are covered by safeguards provided by the GDPR: the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

Your rights

You can find out what data I hold about you and get a copy, have it corrected or deleted, restrict its processing, receive the data you gave me in a convenient format, or object to its processing. You can object to marketing messages at any time, without giving a reason. See also Your rights.

Contact

stepan@bogatyrev.pro — I reply within one month. So that I don’t hand your data to someone else, I may ask you to confirm that the request comes from you.

Your rights

You can ask to access, correct or delete your data, restrict or object to its processing, or withdraw your consent at any time by writing to stepan@bogatyrev.pro. I reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL: www.cnil.fr.