Privacy Policy

1. Introduction

YMV & Co is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect personal data when you visit our website (ymvconsulting.com) or interact with our services, including the Fractional General Counsel assessment and the Partner Verification service. Our Website may contain links to third-party websites. Those websites have their own privacy policies and we do not accept any responsibility for their processing of your personal data.

2. Who We Are

This Privacy Policy applies to personal data processed by Deborah Visser, independent professional operating under the name YMV & Co, registered in France under SIRET number 98504214200010, acting as Data Controller within the meaning of Article 4(7) GDPR.

Contact: dv@ymvconsulting.com

3. Personal Data We Collect

We collect only what is necessary to provide our services. This includes:

Through the Fractional GC assessment form:

• Contact details: name, email, phone number
• Organisation information: company name, job title, sector, country
• Situational data: company stage, legal setup, decision-making structure, legal needs
• Qualitative input provided in free-text fields

Through the Partner Verification request form:

• Contact details of the person submitting the request
• Information about the subject of the verification (name, organisation, context)
• Any supporting information provided voluntarily

In the context of conducting Partner Verification services, we may also process publicly available information about third parties (corporate records, publicly accessible online profiles, media articles, public digital footprint). Such information is processed solely for the purpose of the client's verification request.

Technical data collected automatically when you visit the Website may include IP address, browser type, device information, pages visited, and access timestamps. This is used solely to ensure the security and proper functioning of the Website.

4. Purposes of Processing

Personal data may be processed for the following purposes:

• Responding to enquiries and evaluating consulting or verification requests
• Delivering Fractional GC and Partner Verification services
• Managing ongoing client relationships
• Ensuring the security and proper functioning of the Website

5. Legal Basis for Processing

Performance of a contract (Article 6(1)(b) GDPR): processing necessary to respond to requests or deliver services.

Legitimate interest (Article 6(1)(f) GDPR): processing necessary for due diligence, risk assessment, service improvement, or security purposes.

6. Data Sub-processors

To operate our services, we use the following third-party tools which may process personal data on our behalf:

• Netlify: website hosting and form delivery infrastructure
• Airtable: submission data storage and management

These providers act as data processors under Article 28 GDPR and process data solely according to our instructions. Where processing occurs outside the EEA, appropriate safeguards such as Standard Contractual Clauses are applied. A full list of sub-processors is available on request.

We do not sell your personal data. We do not share personal data with third parties for commercial purposes without your explicit prior consent.

7. Cookies

Our Website uses limited cookies for technical operation and security. We do not use advertising cookies or behavioural tracking. For full details, please refer to our Cookie Policy.

8. Data Retention

We retain personal data for as long as necessary for the purpose for which it was collected, or as required by applicable law. We apply data minimisation throughout and restrict access to personal data to those who need it for the relevant purpose.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure.

10. Your Rights

Under GDPR, you have the following rights in relation to your personal data. To exercise any of them, contact us at dv@ymvconsulting.com. We will respond within 30 days.

• Right of access (Article 15): to obtain confirmation of and access to the data we hold about you
• Right to rectification (Article 16): to correct inaccurate or incomplete data
• Right to erasure (Article 17): to request deletion of your data where applicable
• Right to restriction (Article 18): to request that we limit processing in certain circumstances
• Right to data portability (Article 20): to receive your data in a structured, machine-readable format
• Right to object (Article 21): to object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time

The supervisory authority responsible for YMV & Co is the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

11. Updates

This Privacy Policy may be updated periodically. The most recent version will always be available on the Website.

12. Contact

For any questions, complaints, or to exercise your rights, please contact: dv@ymvconsulting.com