How we handle your personal data
This page describes what we do with the personal data of our prospects, clients and contacts — yours, if we write to you or if you reply to us. Simply browsing this site is covered instead by our privacy policy.
Last updated: 30 August 2026.
Who processes your data
CONSTELLAR, a simplified joint-stock company with a sole shareholder, 4 allée Lucie Wynen, 93100 Montreuil, France, registered under SIREN 106 853 153, acts as the data controller.
The company has not appointed a data protection officer: it falls into none of the cases where article 37 GDPR requires one. Any question about your data is handled directly at contact@constellar.io.
What we process, and why
Commercial prospecting. Your name, your role, your professional contact details, the company you work for and the history of our exchanges. Purpose: to reach you, to present what we do, and to know where we stand. Legal basis: our legitimate interest in developing our business among professionals (article 6(1)(f) GDPR). You may object at any time.
Proposals, quotes and contracts. The same data, plus whatever the engagement requires: scope, contacts, terms. Purpose: to draw up a proposal, contract it, and perform it. Legal basis: pre-contractual steps taken at your request, then performance of the contract (article 6(1)(b)).
Invoicing and accounting. Billing details, amounts, supporting documents. Purpose: to issue invoices and keep the accounts. Legal basis: legal obligation (article 6(1)(c)), in particular article L123-22 of the French commercial code.
Where your data comes from
Most of the time, from you: you write to us, you reply, you send us what is needed to draw up a quote.
Sometimes not. We also identify contacts from professional sources: professional networks such as LinkedIn, company websites, professional directories and databases, events and trade shows, business cards, and referrals from third parties.
In that second case, article 14 GDPR requires us to inform you: this page does so, and we will tell you on request which specific source your data came from.
Recorded or transcribed meetings
Our meetings are held mainly on Google Meet. We sometimes record them, have them transcribed and have an automatic summary produced, in order to keep a faithful record of what was said and decided. Legal basis: our legitimate interest in documenting our exchanges.
The tool notifies every participant when recording starts. You may ask that there be no recording and no transcription: the meeting then takes place without, and nothing else changes.
Any other video-conferencing, recording or transcription tool is used only with the client’s prior agreement.
How long we keep it
Prospects. Three years from our last contact, in line with the French data protection authority’s recommendation. After that, the data is erased.
Clients. For the duration of the contractual relationship, then archived for the applicable limitation periods — five years for contractual obligations, ten years for accounting records (article L123-22 of the French commercial code).
Meeting recordings. Deleted as soon as the write-up is done, and at the latest one month after the meeting. The write-up itself follows the retention of the file it belongs to.
Who else has access
Google. Our email, calendar, video-conferencing and documents are hosted on Google Workspace, provided by Google Ireland Limited. Transfers to the United States may result; they are covered by the European Commission’s standard contractual clauses and by the EU–US Data Privacy Framework.
Qonto. Our quotes, invoices and payments go through Qonto, a French provider.
Where applicable, our accountant and our advisers, strictly limited to what they need.
Your data is never sold, rented or passed on for advertising purposes. Nor do we use it to train an artificial intelligence model.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to give directions on what happens to your data after your death.
To stop hearing from us, one word is enough — to contact@constellar.io, or in reply to any of our emails. You do not have to give a reason.
Any other request is handled at the same address; we answer within one month.
If our answer does not satisfy you, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris CEDEX 07, France — www.cnil.fr.
This site itself
Browsing constellar.io sets no cookie and uses no tracker. The detail is in our privacy policy and on the cookies page.
