We are committed to protecting your personal data in accordance with GDPR. This policy explains what data we collect, why, and how to manage it.
1. Data Controller
- Identity: Thomas Mercier — Smart Wealth Blog
- Email: contact@smartwealthblog.com
- Address: 12 rue de la Paix, 75001 Paris
2. Data Collected and Purposes
2.1 Navigation Data (logs)
When you visit, our host (Render) automatically collects technical data: anonymised IP address, browser type, pages visited, visit duration. This data is retained for a maximum of 13 months and used solely for security and aggregated audience analysis.
Legal basis: Legitimate interest (Art. 6.1.f GDPR).
2.2 Contact Form
When you use our contact form, we collect: your name, email address, and the content of your message. This data is processed by Formspree (GDPR-compliant sub-processor) and retained for 36 months to handle your request.
Legal basis: Contract performance / consent (Art. 6.1.a and 6.1.b GDPR).
2.3 Newsletter (if applicable)
If you subscribe to our newsletter, we collect your email address. You may unsubscribe at any time via the link in every email. Data is retained until unsubscription.
Legal basis: Consent (Art. 6.1.a GDPR).
3. Cookies and Tracking Technologies
A cookie is a small text file placed on your device when you visit a website. It may be read on a subsequent visit.
3.1 Strictly Necessary Cookies (consent-exempt)
| Cookie Name | Purpose | Duration |
|---|---|---|
pe_cookie_consent | Stores your cookie consent choice | 12 months |
3.2 Advertising Cookies — Google AdSense (consent required)
This site uses Google AdSense to display advertising. Google AdSense uses cookies to serve relevant ads based on your browsing. These cookies are only placed with your explicit consent.
| Cookie | Publisher | Purpose | Duration |
|---|---|---|---|
IDE | Google / DoubleClick | Ad targeting | 13 months |
DSID | Targeted advertising | 2 weeks | |
test_cookie | Compatibility check | Session | |
__gads | Google AdSense | Ad frequency capping | 13 months |
To learn more about how Google uses your data: https://policies.google.com/privacy.
To opt out of Google ads: https://adssettings.google.com.
3.3 Analytics Cookies — Google Analytics (consent required)
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Unique visitor identifier — analytics | 24 months |
_ga_XXXXXXXX | GA4 session | 24 months |
Note: IP anonymisation is enabled. No personally identifiable data is transmitted to Google via Google Analytics.
4. Managing Your Cookie Preferences
You may change your preferences at any time:
- Via the consent banner displayed on your first visit
- By clearing cookies in your browser (Settings → Privacy → Clear browsing data)
- Via your browser settings: aboutcookies.org
5. Sharing Your Data
We do not sell or rent your personal data to third parties. Your data may be shared with:
- Formspree (contact form) — GDPR sub-processor
- Google (AdSense / Analytics) — only with your consent
- Render (web host) — technical log data
- Competent authorities — upon judicial request only
6. International Transfers
Some of our service providers (Google, Formspree, Render) are established in the United States. These transfers are governed by the European Commission's Standard Contractual Clauses (SCCs) and the EU–US Data Privacy Framework.
7. Data Security
We implement appropriate technical and organisational measures to protect your data: HTTPS/TLS connection, restricted access, hashed passwords. No system is infallible; we invite you not to transmit sensitive information via our contact form.
8. Your Rights (GDPR)
Under Articles 15 to 22 of the GDPR, you have the following rights:
| Right | Description |
|---|---|
| ✅ Right of access (Art. 15) | Obtain a copy of the data held about you |
| ✏️ Right to rectification (Art. 16) | Correct inaccurate data |
| 🗑️ Right to erasure (Art. 17) | Request deletion of your data ("right to be forgotten") |
| ⏸️ Right to restriction (Art. 18) | Restrict processing in certain cases |
| 📦 Right to portability (Art. 20) | Receive your data in a structured format |
| 🚫 Right to object (Art. 21) | Object to processing based on legitimate interest |
| ↩️ Withdrawal of consent | Withdraw your consent at any time |
To exercise these rights: contact@smartwealthblog.com. Response within 30 days. You may also lodge a complaint with the CNIL: www.cnil.fr.
9. Retention Periods Summary
| Data Type | Retention Period |
|---|---|
| Navigation data (logs) | 13 months |
| Contact form | 36 months |
| Newsletter | Until unsubscription |
| Consent cookies | 12 months |
| Google advertising cookies | 13 months (if consent granted) |
10. Changes to This Policy
This policy may be updated to reflect legal changes or changes in our practices. The date of the last update is shown at the top of this page. We encourage you to review it regularly.