Privacy Policy

1. Data controller

The site cgagency.art is published by CROSS GLOBAL ART AGENCY ("CGA Agency"), a French single-member limited liability company (EURL) with share capital of €1,000, registered with the Paris Trade and Companies Register under number 943 660 936, with its registered office at 6 rue d’Armaillé, 75017 Paris, France.

CGA Agency is the controller of the personal data collected on this website. For any question regarding your data: contact@cgagency.art. No data protection officer has been appointed, as the size and activity of the company do not require one.

2. Data collected and purposes

We only collect the data necessary to process your request.

  • "Start a brief" form : first and last name, company, business email, phone number (optional), type of need, project description — to respond to your request, prepare a discussion and, where applicable, a commercial proposal.
  • Email to contact@cgagency.art : the data you choose to send us — to process your request and continue the conversation.
  • Browsing the website : IP address, browser type, pages viewed (server technical logs) — to ensure the operation, security and availability of the website.
  • Consent banner : your cookie choices — to remember your preferences.

No audience measurement or targeted advertising tool is used on this website. Data submitted through the form is never sold, transferred or used for any purpose other than processing your request.

3. Legal bases

  • Form and emails : pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) and, for subsequent commercial follow-up, CGA Agency’s legitimate interest in developing its business with professionals (Art. 6(1)(f)).
  • Technical logs : legitimate interest in securing the website (Art. 6(1)(f)).
  • Non-essential cookies : your consent (Art. 6(1)(a)), collected through the banner and revocable at any time.

4. Recipients and processors

Your data is processed by the CGA Agency team. It is not shared with any third party for commercial purposes. The following technical providers have access to it strictly within the scope of their services:

  • OVH SAS, 2 rue Kellermann, 59100 Roubaix, France — hosting of the website and technical logs (France / European Union).
  • Google (Google Workspace) — hosting of the contact@cgagency.art mailbox that receives requests (EU, with possible transfers outside the EU governed by the European Commission’s Standard Contractual Clauses).
  • Google (Google Fonts) — loading of the website’s fonts; your IP address is sent to Google’s servers in the process (EU / United States, Standard Contractual Clauses).
  • Google (reCAPTCHA) — protection of the form against automated submissions (EU / United States, Standard Contractual Clauses).

CGA Agency may be required to disclose data to the competent authorities where required by law.

5. Retention periods

  • Contact requests and prospect exchanges : 3 years after your last contact.
  • Client data (quotes, contracts, invoices) : for the duration of the contractual relationship, then 10 years to meet accounting obligations.
  • Server technical logs : 12 months maximum.
  • Cookie consent choices : 12 months.

At the end of these periods, the data is deleted or anonymized.

6. Your rights and remedies

Under the GDPR and the French Data Protection Act, you have the following rights over your data: access, rectification, erasure, restriction of processing, objection (in particular to direct marketing), portability, and the right to set instructions regarding the fate of your data after your death.

To exercise these rights, write to contact@cgagency.art or by post to CGA Agency, 6 rue d’Armaillé, 75017 Paris, France, specifying your request. Proof of identity may be requested in case of reasonable doubt. We respond within one month.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr).

7. Security

The website is served over HTTPS. Access to the administration area is protected by strengthened authentication and intrusion protection, and regular backups are performed. Access to form data is restricted to authorized CGA Agency staff.

8. Cookies and trackers

A cookie is a small file placed on your device when you visit a website. This website only uses cookies that are strictly necessary for its operation and for remembering your consent choices (cmplz_* cookies, kept for 12 months, set by the Complianz consent management tool). They do not require your consent.

Google’s reCAPTCHA service, which protects the form, may set its own cookies; it is only loaded with your agreement through the banner. You can change your choices at any time via the "Manage consent" link at the bottom of the page, or configure your browser to refuse cookies — some features of the website may then no longer work.

The detailed list of cookies set is kept up to date below.

9. Updates to this policy

This policy may be amended to reflect changes to the website, the tools used or the regulations. The version in force is the one published on this page, with its last update date. Last updated: 12 October 2026.

CGA Agency – Continuous activation partner.

© 2026. All rights reserved.

This document is available in French, English, and Japanese. In the event of any discrepancy in interpretation, only the French version shall prevail.