Privacy notice

This site sets no cookies. It has no advertising, no third-party trackers, no social embeds and no analytics. The only personal data it processes is what you type into the contact form, and it is used to reply to you.

KOR IT is the data controller for this site. For any question about your data, or to exercise any of the rights below, write to contact@korit.org. We answer these ourselves; there is no ticketing system in between.

This site sets no cookies. Not for analytics, not for advertising, not for preferences, and not for session state — there is no session. Nothing on any page reads or writes a cookie.

Because no non-essential storage is used, no consent is legally required today. The consent notice you saw on your first visit exists so that the choice is already recorded if that ever changes: any analytics we add in future load only after an explicit opt-in, and cannot run before one. That is enforced in the code rather than promised — a single component is the only place an analytics script may be mounted, and it cannot render without a recorded opt-in.

Your choice itself is stored in your browser's local storage under the key korit.consent, together with the date you made it. It is never transmitted to us or to anyone else. Recording a consent decision is strictly necessary processing and needs no consent of its own; storing it outside a cookie is what keeps the first sentence of this section literally true.

Declining is exactly as easy as accepting, nothing is pre-selected, and dismissing the notice is not treated as agreement. You can change or withdraw your choice at any time — it is as easy to withdraw as it was to give.

This site is published in English and French. If your browser tells us it prefers French while you are reading an English page, we offer you the French version in a small dismissible strip. We never move you automatically, and the offer is a suggestion rather than a redirect.

Whether you accepted or dismissed that offer is remembered in your browser's local storage under the key korit.language, so you are not asked again. Like the consent decision, it is never transmitted anywhere and it is not a cookie.

The contact form collects your name, email address, chosen subject and message. That data is transmitted to KOR IT so your enquiry can be answered. It is not added to a mailing list, not enriched against third-party databases, and never sold or shared for marketing. The lawful basis is our legitimate interest in responding to people who contact us.

Submissions are rate-limited per network to prevent abuse. That check uses the connecting IP address in memory for the duration of the limit window only, and does not write it to any durable store.

Message delivery is handled by Resend, a transactional email provider, acting as a processor. Your message is relayed to a KOR IT mailbox and is not stored by the website. Enquiries are kept in that mailbox for as long as the conversation is relevant and deleted when it is not; in practice, no longer than 24 months. You can ask for your message and any reply to be deleted at any time.

Our host, Vercel Inc., records standard request logs — IP address, timestamp, requested path, user agent — as any web server does. These are used for security and operational purposes and are retained under Vercel's own policy. We do not use them to profile visitors, and we do not combine them with anything else.

Fonts are self-hosted. No request is made to a third-party font host, CDN or asset host when you load a page, which means no third party receives your IP address as a result of browsing this site. The 3D scenes are generated in your browser from code and load no external asset of any kind.

Under the GDPR you have the right of access, rectification, erasure, restriction, portability and objection in respect of your personal data, and the right to withdraw consent at any time without affecting processing carried out before you withdrew it.

To exercise any of these, write to contact@korit.org. You also have the right to lodge a complaint with your national supervisory authority — in France, the CNIL.

If this notice changes materially — in particular if any analytics product is ever added — the change will be made here, and the consent notice will ask again rather than assuming a previous answer still applies.