Privacy Policy

Last updated: February 25, 2026

This Privacy Policy describes how DCM Digital (Joan Lyczak, Individual Entrepreneur) collects, uses, and protects your Personal Data when you use the site dcmcore.com (the "Site"), in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

1. Data Controller

Joan Lyczak
Individual Entrepreneur
Paris, France
Email: dcmcoreinstitute@gmail.com

2. Data Collected

We collect the following categories of data, only after your explicit consent via the cookie banner:

Analytical browsing data (GA4): Pages visited, session duration, browser type, screen resolution, country of origin (anonymized IP).
Behavioral data (Hotjar): Click heatmaps, scroll depth, anonymized session recordings (if enabled).

Data not subject to consent:

Local Storage (LocalStorage): Display preferences (theme, language, user role). This data remains on your device and is never transmitted to our servers.
Hosting Logs (GitHub Pages): Technical data inherent to the hosting infrastructure.

3. Purposes and Legal Basis

Purpose	Legal Basis (Art. 6 GDPR)
Audience measurement (GA4)	Art. 6.1.a - Consent
UX Analysis (Hotjar)	Art. 6.1.a - Consent
Technical operation (LocalStorage)	Art. 6.1.f — Legitimate Interest

4. Data Recipients

Analytical data is processed by the following subcontractors:

Google LLC (Google Analytics 4) — Headquarters: Mountain View, CA, USA
Hotjar Ltd — Headquarters: Dragonara Business Centre, Malta (EU)
GitHub Inc. (Hosting) — Headquarters: San Francisco, CA, USA

5. Transfers Outside the EU

Data transmitted to Google LLC and GitHub Inc. are subject to transfers to the United States, governed by the Standard Contractual Clauses (SCC) of the European Commission and the EU-US Data Privacy Framework.

6. Retention Period

GA4 Cookies: 13 months maximum (in accordance with GDPR guidelines).
Hotjar Data: 365 days maximum.
LocalStorage: Persistent until manual deletion by the user.

7. Your Rights (GDPR)

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

Right of access (Art. 15) - Obtain confirmation and a copy of your data.
Right to rectification (Art. 16) - Correct inaccurate data.
Right to erasure (Art. 17) - Request the deletion of your data.
Right to restriction (Art. 18) - Restrict processing.
Right to data portability (Art. 20) - Receive your data in a structured format.
Right to object (Art. 21) - Object to processing at any time.
Withdrawal of consent — You can withdraw your consent to analytical cookies at any time via the "Manage Cookies" link at the bottom of the page.

To exercise these rights, contact: dcmcoreinstitute@gmail.com

8. Complaint

If you believe that the processing of your data constitutes a violation of the GDPR, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):