Information
Privacy Policy
This site has no accounts, no database and no audience-measurement tool. The only time you send personal information is when you write to me. This page explains exactly what happens to it.
Last updated : 20 August 2026
Who handles your data
- Data controller
- Léna Goullioud, sole trader (entrepreneur individuel) trading as Madrilena, publisher of this site.
- Contact
- contact@madrilena.fr — the same address for exercising your rights, with no particular formality.
- Data protection officer
- None has been appointed: the regulation does not require one here. Your requests therefore reach me directly.
What this site does not do
The site is a set of fixed pages sitting on a web host. That is not a technical detail: it explains most of what follows.
- No audience-measurement tool: no Google Analytics, no Matomo, none at all.
- No advertising pixel: no Meta, no TikTok, no Google Ads.
- No targeted advertising, no profiling, no sale or rental of data.
- No accounts, no member area, no payment, no database.
- No newsletter and no marketing emails: writing to me signs you up for nothing.
- No third-party content loaded behind your back: the videos and photos are served from this site, with no TikTok player and no embedded frame, and the fonts are hosted here — no request is ever sent to Google Fonts.
The contact form
The form on the Contact pages is the only place on this site where you type anything. It is handled by a single script, hosted alongside the site, whose entire job is to lay your message out and email it to me. Nothing is recorded in a database: there isn’t one.
- Name
- Required. 100 characters at most.
- Email address
- Required, otherwise I cannot reply to you. 160 characters at most.
- Company or brand
- Optional. 120 characters at most.
- Type of enquiry
- Required, chosen from a fixed list: collaboration, Study in Spain, content creation / UGC, other enquiry.
- Message
- Required. 4,000 characters at most.
Three further pieces of information travel with your message without you typing them:
- the language of the page — “fr” or “en” — which decides the language of the confirmation and appears in the email I receive;
- the time between the form appearing and the message being sent, measured by your browser: it serves only to filter out automated submissions, and is never kept;
- an invisible field that a human visitor always leaves empty: filled in, it gives a bot away and the submission is refused.
On arrival, the script adds the date and time, and puts your address in the “Reply to” header so that my answer reaches you. Your address is never used as the sender: the email always goes from contact@madrilena.fr to contact@madrilena.fr, which is what stops the form from being used as a relay by anyone else.
You are of course welcome to email me directly at contact@madrilena.fr instead. In that case the information handled is simply whatever your message contains.
Why this data, and on what legal basis
Answering your enquiry
- Legal basis
- Legitimate interest (GDPR article 6(1)(f)).
- Why
- Receiving and handling messages deliberately addressed to me. You may object at any time: your enquiry is then deleted, and goes unanswered.
Considering a collaboration or business enquiry
- Legal basis
- Steps taken at your request prior to entering into a contract (GDPR article 6(1)(b)).
- Why
- When your message is about a partnership, a campaign or a piece of work, the exchange that follows prepares a possible contract. Where no contract is in prospect, those exchanges fall under the legitimate interest above.
Protecting the form from spam and abuse
- Legal basis
- Legitimate interest (GDPR article 6(1)(f)).
- Why
- An unprotected public form very quickly becomes a spam relay. The measures used are set out in the next section.
Serving the site in the right language
- Legal basis
- Legitimate interest (GDPR article 6(1)(f)). The cookie involved is exempt from consent.
- Why
- So you do not have to pick your language again on every visit. Nothing else is remembered.
None of these purposes relies on your consent, which is why there is no “I accept the privacy policy” box to tick before sending the form. A mandatory box of that kind would not be freely given consent, and would add no protection whatsoever.
Form security and IP address
The form uses no CAPTCHA: that would mean sending visitor data to a third-party provider. Four simpler protections take its place.
- An invisible field: if it is filled in, the submission is refused.
- A minimum of 3 seconds between the form appearing and the message being sent.
- Maximum lengths per field, and a maximum request size.
- A limit of 5 submissions per hour per IP address.
That last protection does process your IP address, and it would be dishonest to write otherwise. Here is exactly what happens:
- the IP address of the connection is turned into a SHA-256 fingerprint using a fixed salt; the address itself is written nowhere;
- that fingerprint becomes the name of a small file, placed in the server’s temporary folder, outside the site; it holds nothing but the timestamps of recent submissions;
- only timestamps from the past hour are taken into account: older ones are ignored, then overwritten;
- no name, no email address and no message is attached to that fingerprint.
A fingerprint is not anonymisation: the salt is no secret, and a fingerprint of an IP address remains pseudonymised personal data. It lowers the risk without removing it — which is why it is described here rather than glossed over.
If the temporary folder is not writable, the rate limit switches itself off rather than blocking a legitimate message; the other three protections stay in place.
When an email fails to go out, the script writes one line to the host’s error log, naming only the type of enquiry concerned — no name, no address, no message. Separately, the host keeps its own technical connection logs, under its own responsibility and legal obligations; they are used neither to measure traffic nor for any other purpose.
For how long
- General enquiry
- A question, a message from a student, an exchange with no business follow-up: up to 12 months after our last exchange.
- Business enquiry
- Collaboration, partnership, commissioned work: up to 3 years after the last contact coming from you. That is the reference period the CNIL applies to prospects; it is a ceiling, not a quota to use up.
- Anti-spam protection
- A rolling hour: however long it takes for the submission limit to reset. Nothing is kept beyond that.
- Invisible field and filling time
- Nothing is kept: these values only decide whether a submission is accepted or refused, then disappear with the request.
If a collaboration goes ahead, the documents it produces — quotes, invoices, contracts — fall under separate legal obligations, accounting ones in particular, with their own retention periods. They no longer come from the form, and this policy does not govern them.
These periods are maximums. You can ask for our exchanges to be deleted at any time, and I delete messages sooner when they clearly no longer serve any purpose.
Who has access
- Me, Léna, who reads and handles the messages received.
- OVH, which hosts the site and the mailbox, acting as a technical provider: the emails pass through its servers and are stored there.
Nobody else. Your data is never sold, rented, exchanged or passed on to a partner brand, an advertiser or a platform.
Hosting and location
The site and the mailbox are hosted by OVH, on a shared hosting plan. The site itself calls no outside service to work: everything a page loads — text, images, videos, fonts — comes from that same host.
Where the servers physically sit, and whether any transfer outside the European Union takes place, is governed by OVH’s own terms; I cannot verify it beyond what the host publishes, so I will not describe it on its behalf. What I can state: this site organises no transfer of your data to a third country, and adds no provider beyond the host.
Content and external links
The videos and photos shown on this site are copies, served from the host. None of them opens a connection to TikTok or Instagram unless you click: there is no embedded player, no frame (iframe) and no social sharing button.
The site does, however, link outwards: TikTok, Instagram, LinkedIn, partner brands and the Study in Spain service. When you click, you leave this site. What happens next — cookies, analytics, a logged-in account — is governed by that service’s own privacy policy, which I neither control nor will describe on its behalf.
Partner and affiliate links
Some links on this site carry a partnership or affiliate identifier: a code inside the address telling the partner that the visit came from me. I may earn a commission or benefit from a partnership on that basis, at no extra cost to you.
This site does not measure those clicks: no tracking tool, no intermediate redirect, no record of which links were clicked. I do not follow visitors individually. The partner, for its part, handles the click according to its own privacy policy, which is the one to refer to.
Security
- The site is served over HTTPS, with automatic redirection from HTTP.
- Security headers are set: no embedding of the site in a third-party frame, no guessing of file types, a restrictive referrer policy, and camera, microphone, geolocation and payment switched off.
- The form script accepts nothing but a form submission, validates every field, rejects any line break inside an email address, and can only ever write to one hard-coded address.
- Form responses are neither cached nor indexed.
- There is no database, no account and no password to protect: what is not collected cannot leak.
No arrangement is infallible. These choices aim to reduce the exposed surface, not to promise absolute security.
Your rights
Over the data concerning you, you have the rights the GDPR provides:
- Access
- To know whether data concerning you is processed, and to obtain a copy.
- Rectification
- To correct inaccurate or incomplete information.
- Erasure
- To ask for our exchanges to be deleted.
- Restriction
- To ask for processing to be frozen while something is checked.
- Objection
- To object to processing based on legitimate interest — here, receiving and handling your enquiry, and the anti-spam measures.
- Portability
- To receive, in a machine-readable format, the data you provided, where the processing rests on a contract or on your consent. Here, that covers only exchanges falling under pre-contractual steps.
To exercise any of these rights, write to contact@madrilena.fr. Your request is handled within one month, which may be extended by two further months if it is complex — you would be told if so. I may ask for a detail that confirms the request really comes from you; never for identity papers where an email exchange is enough.
If my answer does not satisfy you, you may lodge a complaint with the CNIL, the French supervisory authority: cnil.fr (opens in a new tab), or 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, France.
No automated decision-making
The information you send feeds no automated decision and no profiling: it is read by a person. The anti-spam checks described above accept or refuse a submission according to fixed rules, without producing any assessment of you as a person — and a refused submission never stops you from emailing me directly at contact@madrilena.fr.
Updates to this policy
This policy describes how the site actually works as of the date shown at the top of the page. If the site changes — a tool added, a form field altered, another cookie — the policy is updated at the same time and the date changes. There is no archive of earlier versions: if you are unsure what changed, write to me at contact@madrilena.fr.