Legal
Privacy policy
Updated 25 October 2026
In short: this site sets no cookies, does not measure its audience and loads nothing from another site. When you browse it, the only data processed are our host’s technical logs, which it needs to serve you the pages. If you write to us or fill in one of our forms, we also process what you send us.
Data controller
Orsnst SASU, 47 rue Vivienne, 75002 Paris, is the controller of the processing described on this page. For any question about your data, write to us at contact@orsnst.com.
What the site does not do
- It sets no cookies and stores nothing in your browser.
- It does not measure its audience and contains no tracking tool or advertising pixel.
- It loads nothing from another site: fonts, scripts and images are served by orsnst.com.
- It asks you for no information, unless you fill in one of its forms (process, contact, application).
- It makes no automated decision about you and does not profile you.
This is why no consent banner appears. If we ever add audience measurement, this page will be updated before it goes live, and your consent will be asked for where the law requires it.
The host’s logs
As with any website, your browser sends technical data with every page it requests: your IP address, the date and time, the page address, and information about your browser and operating system.
- Purposes
- Serving you the site’s pages and protecting the site against abuse. We do not use these data to measure the audience or to identify you.
- Legal basis
- Our legitimate interest in running the site and keeping it secure (GDPR article 6(1)(f)).
- Recipient
- Vercel Inc., our host, which acts on our behalf as a processor.
- Retention
- One day for the logs we can access. Vercel may keep some data longer, for as long as its legal and contractual obligations require, as set out in its privacy policy.
If you write to us or use the contact form
If you write to us at contact@orsnst.com or fill in the contact form, we process what you give us: your name, your email address, your company, your phone number if you add it, your message and, for a proposed process, the process concerned and the size of your company. The form reaches us as an email; the site stores nothing.
- Purposes
- Answering you and, where relevant, following up on our exchanges.
- Legal basis
- Our legitimate interest in answering the messages we receive, or steps taken at your request before entering into a contract (GDPR article 6(1)(b) and (f)).
- Recipient
- Google, which provides our email (Google Workspace), and Vercel, which hosts the site and passes the form on from its servers in Paris. Both act on our behalf as processors.
- Retention
- Three years after our last exchange.
If you apply to join us
If you apply through the “Join us” form, we process what you give us: your name, your email address, your phone number and LinkedIn profile if you add them, your main area, the kind of collaboration you are looking for, your message and your CV. The application reaches us as an email; the site stores nothing.
- Purposes
- Assessing your application and, where relevant, contacting you about it.
- Legal basis
- Steps taken at your request before entering into a contract (GDPR article 6(1)(b)).
- Recipients
- Google, which provides our email (Google Workspace), and Vercel, which hosts the site and passes the form on from its servers in Paris. Both act on our behalf as processors.
- Retention
- Two years after our last contact, unless you ask us to delete it sooner.
Transfers outside the European Union
Vercel Inc. is based in the United States. It participates in the EU-U.S. Data Privacy Framework and uses the European Commission’s standard contractual clauses where the law requires them.
Google covers the transfers related to our email with the European Commission’s standard contractual clauses, included in its data processing terms.
Your rights
You can ask for access to your data, its rectification or erasure, the restriction of its processing or its portability where that right applies, and you can object to its processing (GDPR articles 15 to 21). Write to us at contact@orsnst.com; we answer within one month.
The host’s logs stay accessible to us for one day only: after that, we can no longer find them.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority: online at cnil.fr/fr/plaintes (in French) or by post (CNIL, Service des plaintes, 3 place de Fontenoy, 75007 Paris, France), or with the data protection authority of the European Union country where you live.
Changes
We update this page when the site changes. The date at the top of the page shows the version in force.