How we handle your personal data

Data controller

CONSTELLAR, SASU, 4 allée Lucie Wynen, 93100 Montreuil, France — contact@constellar.io.

Purposes and legal bases

Exchanges and commercial prospecting: replying to your messages, presenting our services and following up on our exchanges. Data: name, role, professional contact details, company, content of our exchanges and publicly available professional information about you. Our prospecting messages may be personalised on the basis of this data, which constitutes profiling. Legal basis: our legitimate interest in replying to professionals and developing our business with them (article 6(1)(f) GDPR).

Quotes, contracts and invoicing: the same data and whatever the engagement requires. Legal basis: pre-contractual steps and performance of the contract (article 6(1)(b)), accounting obligations (article 6(1)(c)). This data is required: without it, we can neither draw up a quote, nor contract, nor invoice.

Recording and transcription of meetings, when they take place. Legal basis: our legitimate interest in documenting our exchanges (article 6(1)(f)).

Sources

When your data does not come from you: business cards, trade shows, third-party referrals, and publicly available information (company websites, professional networks and directories, press).

Recipients and transfers

Our providers, strictly limited to what they need: Google Ireland Limited (email, calendar, video-conferencing, documents), Anthropic Ireland, Limited and Mistral AI (artificial intelligence), Notion Labs, Inc. (contact file), Qonto (quotes and invoicing), and our accountant.

Google, Anthropic and Notion process or may process data in the United States, and Mistral AI occasionally outside the European Union. These transfers rely on the EU–US Data Privacy Framework (adequacy decision) or on the European Commission’s standard contractual clauses. A copy of these safeguards can be obtained at contact@constellar.io.

Retention periods

Prospects: three years after our last contact.

Clients: the duration of the relationship, then five years (contractual obligations) and ten years (accounting records).

Meeting recordings: one month at most.

Your rights

Access, rectification, erasure, restriction, objection and portability, as well as the right to give directions on what happens to your data after your death: at contact@constellar.io.

You may object at any time, without giving a reason, to prospecting, including the profiling linked to it: one word to that address or in reply to any of our emails is enough.

You may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).