Privacy//GDPR
Privacy notice
What personal data this site handles, why, and what your rights are. The short version: a contact form, aggregate reading statistics, no advertising, no cross-site tracking.
Who is responsible
The data controller is Thomas Fungenzi, trading as Ekodama (entrepreneur individuel), reachable at contact@ekodama.pro.
The contact form
When you write to us through the form, we process the fields you fill in, meaning your name, organisation (optional), email, subject (optional), message and language, together with your IP address and browser identification (user-agent).
We use this to answer you (steps taken before entering a contract, Art. 6(1)(b) GDPR) and to prevent abuse: the IP address enforces a limit of a few messages per hour (legitimate interest, Art. 6(1)(f)). The form is protected by Cloudflare Turnstile, an anti-bot check; Cloudflare processes connection data for that purpose.
Submissions are stored in a database operated on Supabase infrastructure via Lovable Cloud, and a notification email is sent to our own inbox through the Lovable email service, which keeps delivery logs. Messages are kept for 24 months, then deleted.
Buying a report
Payment for catalogue references is handled by Paddle, acting as merchant of record (report sales are not yet open). Paddle collects your name, email, and payment details directly, under its own privacy policy; Ekodama receives confirmation of the transaction, never your card details.
Downloading a purchased report collects no further personal data.
Hosting and logs
The site is deployed through Lovable and served by Cloudflare Pages. Cloudflare processes IP addresses and technical logs as needed to deliver and secure the site (legitimate interest); Lovable, as the deployment platform, handles request logs the same way.
Audience statistics
The platform that deploys this site (Lovable) measures visits with a script served from our own domain. Each page view reports the page address, the referring page, your browser's user-agent and language, a country estimated from your time zone, and a random visit identifier (the session-id cookie below) to the platform's statistics service, acting on our behalf. What we see is aggregate: which pages are read, and roughly from where.
That is the extent of it. No advertising, no profile built across other sites, no name or contact detail attached, nothing sold or shared. We rely on legitimate interest (Art. 6(1)(f) GDPR), within the scope French guidance treats as consent-exempt audience measurement, which is why you will not see a cookie banner.
Cookies and local storage
This site sets three cookies. ek-locale remembers your language choice for twelve months. session-id is the visit identifier for the audience statistics above, kept for thirty minutes. __cf_bm is set by Cloudflare for about thirty minutes to tell humans from bots. Your theme preference and a first-visit flag live in your browser's local storage and never leave your device.
There is no advertising and no cross-site tracking. The cookies above are either strictly necessary or covered by the audience-measurement exemption, so the site shows no cookie banner.
Fonts
Pages load the Figtree and Inconsolata typefaces from Google Fonts, so your browser transmits your IP address to Google when a page loads.
Recipients and transfers
Personal data may pass through our service providers: Cloudflare (hosting, security, and anti-bot, USA), Lovable (site deployment, audience statistics, and notification emails), Supabase via Lovable Cloud (database), and Paddle (payments, once report sales open). Where a provider processes data outside the EU, the transfer rests on a European Commission adequacy decision or on standard contractual clauses.
Your rights
You can ask what data we hold about you, have it corrected or deleted, restrict its processing, receive it in a portable form, and object to processing based on legitimate interest. Write to contact@ekodama.pro; we answer within a month.
This site does no profiling and makes no automated decisions about you. If you believe your rights are not being respected, you can lodge a complaint with the CNIL (cnil.fr), the French supervisory authority.
Last updated
August 2026