Privacy — Département des Harnais

Controller

John Linotte, in a private capacity, Brussels, Belgium — the site remains static and tracker-free; sales of the Lab reports are handled through a Merchant of Record (see « Le Lab — shop » section);
contact : contact@harnais.be.

What this site collects

nothing. The site is static: no form, no account, no cookie, no tracking pixel, no analytics tag;
zero-tracker policy by default: if an audience-measurement tool were ever activated, it would be a low-footprint, self-hosted European tool, behind an explicit, non-pre-ticked consent (Belgian law of 13 June 2005, art. 129).

If you write

an email sent to contact@harnais.be is processed to reply to you (Article 6 §1 f GDPR — legitimate interest) and kept for the duration of the exchange;
your address is subscribed to nothing, shared with no one, and used for no marketing.

Hosting

the site is served by Cloudflare Pages (Cloudflare, Inc., United States), which may process technical logs (IP addresses) to serve the pages;
transfers outside the European Union are covered by the EU-U.S. Data Privacy Framework (Decision 2023/1795/EU) and, subsidiarily, by the Standard Contractual Clauses (Decision 2021/914/EU).

Le Lab — shop and payment

sales of the Lab reports are processed by Lemon Squeezy (Sold through Link, LLC, United States), acting as Merchant of Record; Lemon Squeezy collects payment, collects/declares/remits applicable taxes and is the controller of payment data; the author has no access to that data;
to process an order, the following data is required: identity, email address and jurisdiction of the buyer (payment data being processed by Lemon Squeezy). Legal basis: performance of the contract (Article 6 §1 b GDPR) and, for any information on new reports where applicable, consent (Article 6 §1 a);
this data is kept for the duration of legal and accounting obligations and then erased. It is neither sold nor transferred to third parties for commercial purposes;
the author processes order data (other than payment) solely to fulfil the order and provide after-sales service;
transfers outside the European Union (Lemon Squeezy, Cloudflare) are covered by the EU-U.S. Data Privacy Framework (Decision 2023/1795/EU) and, subsidiarily, by the Standard Contractual Clauses (Decision 2021/914/EU);
the conditions of sale (license, withdrawal, guarantee, applicable law) are set out in the Terms of Sale.

AI assistance, automated decisions

the publications on this site are prepared with the assistance of a harness of language-model-based agents operated by the author: an assistance tool, not a decision-maker;
no decision within the meaning of Article 22 §1 GDPR, no profiling within the meaning of Article 4 §4 — everything published is reviewed and owned by the human author.

Your rights

Articles 15 to 22 GDPR: access, rectification, erasure, restriction, portability, objection;
request to contact@harnais.be — reply within one month (Article 12 §3);
a complaint may be lodged with the Data Protection Authority, Rue de la Presse 35, 1000 Brussels — autoriteprotectiondonnees.be.

Changes