Legal information
Privacy policy
Who processes your data, for what purposes, on which legal bases, for how long and with what rights.
Data controller and scope
Nabil ABOUL FATH is the controller of the processing described below.
This policy covers browsing on this site, enquiries sent through the form or by email, and their follow-up. Where an engagement requires other processing, appropriate information is provided at the time of collection. External sites reached by link have their own information.
- Contact
- nabil@hovance.fr — +33 1 84 20 05 80
Information collected
You provide your name, email address, the nature of your enquiry and your message. Company and telephone are optional. Mandatory fields are marked with an asterisk.
Please limit your message to information useful for a first discussion: do not attach client files, named booking data, access credentials or sensitive information. If such material is needed for an engagement, an appropriate channel is agreed separately.
Technical data may be recorded when the site is accessed: IP address, date and time, resources requested, browser type and security events.
Uses and legal bases
- Responding to your enquiries and corresponding with company representatives — legitimate interest (Article 6(1)(f) GDPR).
- Preparing, at your request, a service to which you would personally be a party — pre-contractual measures (Article 6(1)(b)).
- Protecting the site, detecting abusive use and diagnosing incidents — legitimate interest in the security of the service.
- Handling your rights requests — legal obligation (Article 6(1)(c)).
- Managing an agreed engagement — contract for an individual counterparty, legitimate interest for the client company’s contacts; invoicing and archiving under legal obligations.
Retention periods
At the end of the applicable periods, data is deleted or anonymised. Restricted archiving remains only for a legal obligation or the defence of legal rights.
- Enquiry with no commercial follow-up
- 12 months after the exchange is closed
- Business prospecting, if implemented
- 3 years after the last contact initiated by the prospect
- Concluded contract
- Duration of the relationship, then 5 years’ archiving of documents useful as evidence
- Accounting records and invoices
- 10 years from the close of the financial year
- Technical security logs
- 6 months, longer in the event of an incident or dispute
- Rights requests
- Evidence of the reply kept 3 years; proof of identity deleted after verification
- Objection to prospecting
- At least 3 years, to avoid a further approach
Who has access to the data
Data is accessible to persons authorised by the publisher and, within the limits of their duties, to hosting, email, form-processing, maintenance and security providers, all bound by contractual data protection obligations.
Form data is not sold. MHW is an editorial initiative carried personally by Nabil ABOUL FATH: a hOvance enquiry does not subscribe you to its communications and does not feed its file. The purposes remain separate.
Location and transfers
Processing is carried out by the publisher and its technical providers. You may obtain the list of those providers, their role, their location and, in the event of a transfer outside the European Economic Area, a copy of the applicable safeguards, by writing to nabil@hovance.fr.
Providers and countries of processing
The table below lists the technical providers that may process data on the publisher's behalf, their role and their country of processing.
Providers marked "active only when configured" process no data until the corresponding service is enabled on the site.
| Provider | Role | Country of processing |
|---|---|---|
| Vercel Inc. | Hosting and delivery of the pages | United States |
| Resend (api.resend.com) | Delivery of contact-form emails | United States (data storage; the SCCs and the EU–US Data Privacy Framework govern the transfer) |
| Cloudflare Turnstile (challenges.cloudflare.com) | Form anti-bot protection — active only when configured | Worldwide processing, potentially outside the EU/EEA/Switzerland/UK; governed by the SCCs and the Data Privacy Framework |
| Upstash | Per-visitor submission rate limiting — active only when configured | United Kingdom (London, eu-west-2 region) |
| Supabase | Structured retention of enquiries — active only when configured | Ireland (West EU region) |
Access from Morocco
hOvance operates in France and Morocco. Enquiries received through this site may therefore be accessed from Morocco, including where providers' servers are located in the European Union.
Such access may constitute a transfer of data outside the European Union under the GDPR. The framework governing it is being defined and will be specified on this page before go-live. Any questions in the meantime: nabil@hovance.fr.
Security
The publisher implements measures proportionate to the risks: securing communications, restricting access, authenticating administrators, maintaining the tools and incident-handling procedures. No system offers absolute security; this limitation does not reduce our obligations.
Your rights
Send your request to nabil@hovance.fr. We reply in principle within one month, extendable by two months in complex cases, with notice within the first month. A complaint may be lodged with the CNIL (cnil.fr) or the competent authority of your place of residence or work.
- Access, rectification, erasure and restriction of processing.
- Objection, on grounds relating to your particular situation, to processing based on our legitimate interest.
- Objection to commercial prospecting, at any time and without justification.
- Withdrawal of consent at any time, without affecting earlier operations.
- Portability of the data you have provided, where processing relies on consent or a contract.
- Instructions regarding the fate of your data after your death.
Automated decisions and updates
The processing described gives rise to no decision based solely on automated processing producing legal effects concerning you.
This policy is updated when the site or the processing changes. A new use requiring your consent will not be activated on the sole basis of a change to this page.