Privacy Policy

Last updated: March 25, 2026

Preamble

David PAVLOVSCHII, operating under the business name Doved Studio ("We"), places great importance on the protection of your personal data. This Privacy Policy describes how we collect, use, store, and protect the personal data of users ("You") of our website accessible at the address https://www.dovedstudio.com (the "Site") and our mobile applications (the "Apps"), in accordance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and applicable French law.

Article 1 – Data Controller

The controller of personal data collected via the Site is:

• David PAVLOVSCHII (Sole Proprietor)
• Located at 200 rue de la Croix Nivert, 75015 Paris, France
• Email address: hello@dovedstudio.com

Article 2 – Personal Data Collected

We collect different categories of personal data about you when you use our Site:

Data you provide to us directly:

• Via the contact form: Your name, first name, email address, [If applicable: your phone number], and the content of your message.
• Via internship applications (if submitted by email or form): Information contained in your CV, cover letter, portfolio (including name, first name, contact details, educational and professional background, skills, etc.).

Data collected via our mobile Apps:

• Voice recordings: Some Apps allow voice recording. Audio recordings are sent to Google Gemini (Google's AI service) for transcription. Audio is not retained after transcription is complete.
• Body measurement photos: Some Apps allow you to take photos for body measurement tracking. These photos are stored exclusively on your device and, if iCloud is enabled, synced through Apple's standard mechanisms. They are never sent to our servers.
• Text and video content: Some Apps process your text and video content to generate mathematical representations (embeddings) for semantic search. This processing may occur on-device or via cloud services (Google Gemini). Data is not retained after processing.

Data automatically collected during your browsing:

• Connection and browsing data: Your IP address, browser type and version, operating system, pages visited on our Site, duration of your visit, dates and times of access. This data may be collected through our server log files and/or through cookies and similar technologies (see Article 9 - Cookies).

Article 3 – Purposes of Processing

Your personal data is collected and processed for the following purposes:

• Respond to your requests: Process and respond to your messages sent via the contact form or by email (requests for information, quotes, etc.).
• Manage applications: Receive, review, and manage applications received for our internship offers or unsolicited applications.
• Ensure the proper functioning and security of the Site: Technically administer the Site, diagnose problems, prevent fraud and abuse.
• Improve user experience: Facilitate your navigation and adapt the display of the Site (via functional cookies).
• Analyze Site audience (if applicable and with your consent): Understand how users interact with our Site in order to improve it (via analytical cookies).
• Comply with our legal and regulatory obligations.

Article 4 – Legal Bases for Processing

The processing of your personal data is based on the following legal bases:

• Your consent (Article 6(1)(a) GDPR): For the deposit and reading of non-essential cookies (analytical, marketing, etc.) on your device. You can withdraw your consent at any time.
• The performance of pre-contractual or contractual measures (Article 6(1)(b) GDPR): When we process your contact request with a view to a possible service provision, or when we process your application for an internship offer.
• Our legitimate interest (Article 6(1)(f) GDPR): To ensure the security and proper technical functioning of our Site, to respond to your initial contact requests, and to administratively manage our activity. We ensure that our legitimate interests do not override your fundamental rights and freedoms.
• Compliance with a legal obligation (Article 6(1)(c) GDPR): To retain certain data when required by law (e.g., accounting obligations).

Article 5 – Recipients of Data

Your personal data is processed by Doved Studio (David PAVLOVSCHII). It may also be communicated to the following recipients, within the limit of their respective attributions and for the purposes defined in Article 3:

• The Site host: Vercel Inc., to ensure the technical hosting of Site data.
• The backend provider (if used, e.g.: Supabase): For storage and management of data submitted via the contact form or application forms, if applicable.
• Google Gemini (Google LLC): For voice recording transcription and embedding generation for semantic search in our mobile Apps.
• Audience analysis tool providers (if used and with your consent): For example, Google Analytics.
• Competent authorities: Upon request and in the context of judicial or administrative proceedings.

We do not sell, rent, or share your personal data with third parties for commercial purposes without your prior consent.

Article 6 – Retention Period

We retain your personal data only for the time necessary for the purposes for which they were collected, in compliance with the legal bases indicated and legal obligations:

• Contact data: Retained for the time necessary to process your request, then archived for the applicable legal prescription period if the request leads to a contractual relationship (generally 5 years for commercial and accounting documents).
• Application data: Retained for the duration of the recruitment process. In case of a negative outcome, and unless you object, we may retain your file with your consent for a limited period (e.g.: 2 years) in case of new opportunities that may interest you.
• Browsing data and cookies: Information stored via cookies is retained for a maximum period of 13 months. The validity of your consent to cookies is 6 months maximum (CNIL recommendation). See Article 9 - Cookies.
• Server logs: Retained for a limited period (generally a few weeks to a few months) for security and technical diagnostic purposes.

Article 7 – Your Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of access: Obtain confirmation that your data is being processed and access this data.
• Right to rectification: Request the correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request the deletion of your data in certain cases provided for by the regulations.
• Right to restriction of processing: Request the suspension of the processing of your data in certain cases.
• Right to data portability: Receive the data you have provided to us in a structured, commonly used, and machine-readable format, and transmit it to another data controller (applicable if the processing is based on consent or a contract and carried out by automated means).
• Right to object: Object to the processing of your data for legitimate reasons, or at any time for processing for prospecting purposes.
• Right to withdraw your consent: Withdraw your consent at any time when processing is based on it (especially for non-essential cookies).
• Right to define post-mortem directives: Define directives relating to the fate of your data after your death.

To exercise these rights, you can contact us by email at hello@dovedstudio.com or by postal mail at the address mentioned in Article 1, providing proof of your identity if necessary.

You also have the right to lodge a complaint with the competent supervisory authority in France, the Commission Nationale de l'Informatique et des Libertés (CNIL - www.cnil.fr).

Article 8 – Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, disclosure, or unauthorized access. These measures include the use of the HTTPS protocol to secure the connection to our Site, hosting on platforms recognized for their security, and restricted access to data.

Article 9 – Cookies

Our Site uses cookies and similar technologies. A cookie is a small text file placed on your device (computer, tablet, mobile) during your visit.

• Strictly necessary cookies: These cookies are essential for the proper functioning of the Site (e.g.: session management, security). They do not require your consent.
• Functional cookies: These cookies improve your user experience (e.g.: remembering display preferences).
• Analytical cookies (if used): These cookies allow us to measure the Site's audience (number of visits, pages viewed, etc.) in an anonymized or pseudonymized manner to improve our services. Their deposit is subject to your prior consent.
• Marketing/third-party cookies (if used): These cookies may be used to display targeted advertisements or by third-party services integrated into the site (e.g.: videos, social networks). Their deposit is subject to your prior consent.

During your first visit to the Site, an information banner allows you to accept, refuse, or customize your choices regarding non-essential cookies. You can modify your preferences at any time via the "Cookie Management" link in the footer or via your browser settings.

Refusing certain cookies may affect your browsing experience. The lifespan of cookies is 13 months maximum and the validity of your consent is 6 months maximum.

For more information about the cookies we use, their purposes, and how to manage them, please consult our Cookie Policy.

Article 10 – Data Transfers Outside the European Union

Some of our service providers (Host Vercel Inc., backend provider Supabase if used, analysis tool provider like Google Analytics if used) may be located outside the European Union, particularly in the United States.

When your data is transferred to these countries, we ensure that an adequate level of protection is guaranteed, in accordance with the GDPR. These transfers are generally governed by mechanisms such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• An adequacy decision by the European Commission concerning the third country (e.g.: the Data Privacy Framework for certain certified American companies).

You can obtain more information about these transfers by contacting us.

Article 11 – Data Protection Officer (DPO)

Doved Studio has not appointed a Data Protection Officer (DPO), as this appointment is not mandatory given our activity. For any questions regarding the protection of your personal data, you can contact David PAVLOVSCHII at the contact details indicated in Article 1.

Article 12 – Modification of the Privacy Policy

We reserve the right to modify this Privacy Policy at any time. The modifications will take effect as soon as they are published on the Site. We encourage you to regularly consult this page to stay informed of any updates. The date of the last update is indicated at the top of this page.