Your data belongs to you

01Who is responsible for your data

The data controller is Mike SOBTAMFO, an engineer based in Cameroon. His full identity and status are in the legal notice. For any question about your data: contact@mikesobtamfo.com.

This site is aimed at visitors from Cameroon, Africa and Europe. I therefore apply the strictest level of protection to everyone: that of the European Union’s General Data Protection Regulation (GDPR), in addition to Cameroonian law no. 2024/017 of 23 December 2024 on personal data protection. This policy also takes into account the Swiss Federal Act on Data Protection (nFADP).

02What this site does not do

• No cookies: no advertising, audience-measurement or “technical” cookies.
• No tracking: no Google Analytics, no Meta, LinkedIn or TikTok pixel, no recording of your clicks or movements.
• No third-party service called when a page opens: fonts are hosted on this site, and there is no embedded map or video.
• No reCAPTCHA: bot protection works without watching you (an invisible trap field and a minimum filling time).
• No selling, renting or passing on of your data, to anyone.
• No automatic sign-up to a newsletter, and no email marketing without your prior agreement.

03The data you give me

Each collection has a precise purpose. Only the fields marked with an asterisk are required: the others are genuinely optional. Please don’t send me sensitive data (health, opinions, bank details): I don’t need any.

• Form

  Quote request

  Data

  Project type and one-sentence description, timing, indicative budget, name, email. Business, organisation, phone, preferred channel and free-text answers: only if you provide them.

  Why

  To reply to you and prepare a suitable proposal.

  Legal basis

  Pre-contractual steps taken at your request (GDPR, art. 6.1.b); in Cameroon, your consent, given by sending (law no. 2024/017).

  Retention

  3 years after our last conversation if no project is signed.

• Messages

  Email, phone, WhatsApp

  Data

  Your contact details and whatever you choose to write to me.

  Why

  To talk about your project or your question.

  Legal basis

  Pre-contractual steps taken at your request (GDPR, art. 6.1.b); in Cameroon, your consent, given by sending (law no. 2024/017).

  Retention

  3 years after our last conversation. WhatsApp belongs to Meta: its own rules apply to your messages.

• Clients

  Signed project

  Data

  Contact details, quote, contract, invoices, project-related exchanges.

  Why

  To deliver the work, invoice, and provide the warranty and maintenance.

  Legal basis

  Performance of the contract (art. 6.1.b) and accounting obligations (art. 6.1.c).

  Retention

  For as long as we work together; accounting records: 10 years, the legal period.

• Technical

  Host logs

  Data

  IP address, date and time, page requested, browser type.

  Why

  Security of the service and abuse prevention.

  Legal basis

  Legitimate interest (art. 6.1.f).

  Retention

  According to the host’s policy, usually a few weeks at most.

04Who can access it

Your data is read by me alone. It is not sold, rented or passed on. A few technical providers process it on my behalf, only to make the service work:

05AI in my projects

I build with the help of artificial intelligence tools. Here are the rules I set myself for your data:

• This site uses no AI service on its visitors’ data. Your request is read by me, not analysed by a robot.
• In a project, I give no data from your business or your customers to an AI service without your written agreement. To build and test, I work with fictional or anonymised data.
• If your project includes an AI agent, we choose together the service, where the data is processed and the safeguards. Your users know they are talking to an AI.

06Transfers outside Cameroon and the European Union

Some of these providers are based outside Cameroon or the European Union, notably in the United States (form service, WhatsApp, booking tool). I favour those that cover these transfers with recognised safeguards: a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.

For data of people living in Cameroon, I complete the formalities required by law no. 2024/017 with the data protection authority, as soon as it is able to receive them.

07How long I keep it

08What stays on your device

For your comfort, this site may save two pieces of information in your browser’s local storage (localStorage). They stay on your device, are never sent to me and are not used to recognise you:

• ms-portfolio:theme: the dark theme, if you chose it with the button in the header;
• ms-portfolio:devis: the draft of your quote request, so you lose nothing if you close the page.

These preferences, requested by you and needed for the service, are exempt from consent under the CNIL guidelines. You can clear them at any time, below or in your browser settings. The demo sites follow the same principle, with their own keys (fictional basket, demo banner closed).

09Third-party content: only if you ask

No external resource is loaded when a page opens. The links to WhatsApp, LinkedIn, GitHub, Malt or the booking tool are plain links: nothing is sent to these services until you click.

If a video or map is ever embedded, it will first be replaced by an image and will load only after your click, with a message saying which service will be contacted.

10Audience measurement

No audience measurement is active on this site today. So I don’t know how many people visit it: that is a deliberate choice.

If I ever switch one on, it will be a cookie-free tool that collects no data that could identify you and meets the consent-exemption conditions set by the CNIL. This page will be updated before it goes live.

11Security

The site is served over HTTPS only, with strict security headers, including a content security policy that blocks any unplanned script. It has no database and no admin area, so it offers very little for an attacker to grab. I limit the data collected to what is strictly necessary.

If a data breach that may concern you occurs, I will inform you and the competent authority within the time limits set by law.

12Your rights, and how to use them

Whatever your country, you can at any time:

• access the data about you and get a copy;
• have it corrected or completed;
• have it deleted;
• object to its processing or ask for it to be restricted;
• get it back in a readable, reusable format (portability);
• withdraw your consent, without affecting what was done before;
• in France, set instructions for what happens to your data after your death.

Write to me with “Personal data” in the subject line. I reply within one month at most, and in practice much faster. I will only ask for proof of identity if there is a reasonable doubt.

13Complaints

If, after contacting me, you believe your rights are not being respected, you can contact the data protection authority in your country:

• France: the CNIL;
• Belgium: the Data Protection Authority;
• Switzerland: the Federal Data Protection and Information Commissioner;
• Cameroon: the personal data protection authority created by law no. 2024/017, once it is set up.

14Updates to this policy

This policy will change if the site changes, for example if I switch on cookie-free audience measurement or a form delivery service. The update date is at the top of the page, and any important change will be flagged there.

Version 1.1 · 3 October 2026 · added the section “AI in my projects”