Your data

Privacy policy.

Last updated: 2 July 2026

At Winka Studio, we care about protecting your personal data. This page explains what data we collect, why, who it is shared with and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data controller

Côme Merle, trading under the name Winka Studio (sole trader), 19 route de la Saudraie, 44500 La Baule-Escoublac, France.
Contact: contact@winkastudio.com

What data we collect, and why

The Site has no database and stores nothing in your browser. The data you send us passes through “on the fly”: from your browser to our technical providers, then to our mailbox.

1. Conversational assistant “Mika”

When you chat with our assistant Mika, the content of your messages is processed to answer your questions and understand your needs. These messages may contain personal data if you choose to provide it. If you share a website address, its public content may be retrieved automatically in order to analyse your project.

Purpose: answer your requests and qualify your project in real time.
Legal basis: pre-contractual measures taken at your request and legitimate interest in informing you (Art. 6.1.b and 6.1.f GDPR).
Processor: Mistral AI (France, European Union). Conversations are not stored by the model.
Retention: for the duration of your session only; no conversation is archived.

2. Project request (via the assistant)

To prepare a quote and get back to you, you can send us a few details through the assistant. The fields collected are:

First name (required)
Last name (required)
Company name (required)
Email address (required)
Your website address (optional)
Photos illustrating your project (optional, up to 6 images)

These details are sent, together with a summary of your exchange, to our team by email.

Purpose: prepare a quote, discuss your project and get back to you.
Legal basis: pre-contractual measures taken at your request (Art. 6.1.b GDPR).
Processors: Mistral AI (France, EU) to format the request; Resend (United States) to deliver the email.
Retention: for as long as necessary to handle your request, and for a maximum of 3 years from our last contact where no business relationship follows.

3. Technical data

As with any website, our hosting and content-delivery providers record technical data (IP address, browser type, timestamp) necessary for the operation and security of the Site.

Legal basis: legitimate interest (provision and security of the service, Art. 6.1.f GDPR).
Retention: in accordance with our technical providers' logging periods.

Cookies

The Site uses no cookies, no trackers and no analytics tools. No information is stored on your device (neither cookies nor localStorage). No consent banner is therefore required. Should this change, a consent mechanism compliant with the requirements of the CNIL would be put in place.

Recipients of your data

Your data is intended for Winka Studio only. It may be processed by our technical sub-processors acting solely on our instructions (host, AI assistant provider, email delivery service, email mailbox host, web-font provider). It is never sold, rented or transferred to third parties for commercial purposes.

Transfers outside the European Union

Some of our providers are established in the United States, which involves a transfer of data outside the European Union:

Vercel (Site hosting), United States
Resend (delivery of the contact email), United States
Email mailbox (hosting of the contact@winkastudio.com inbox, which receives and stores your request), United States
Google (“Google Fonts” web fonts, which receive your IP address when pages load), United States

These transfers are governed by appropriate safeguards, in particular the European Commission's standard contractual clauses, in accordance with Articles 44 et seq. of the GDPR. Our artificial-intelligence provider, Mistral AI, is established in France: exchanges with the assistant are not subject to any transfer outside the EU.

Security

The Site is accessed over a secure connection (HTTPS). We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. We ask you not to share sensitive data through the assistant.

Your rights

In accordance with the GDPR, you have the following rights over your data: right of access, rectification, erasure, restriction, objection and portability.

You can exercise these rights by writing to contact@winkastudio.com (proof of identity may be requested). You also have the right to lodge a complaint with the CNIL (www.cnil.fr) if you consider that your rights are not being respected.

Changes

This policy may be updated at any time. The date of the latest update appears at the top of this page.